Select Product Family as Oracle Application Access Controls Governor and

Using Segregation of Duties SoD 27-11 After you run these commands, the server certificate server.cert is created in the JAVA_HOMElibsecurity directory. b. In the TOMCAT_HOMEconfserver.xml file, enter the details of the keystore as attributes of the Connector element. See the following example: Connector port=8443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=TLS keystoreFile=JAVA_HOMElibsecurity.keystore c. Restart Oracle Application Access Controls Governor. 2. Import the certificate on the Oracle Identity Manager host computer as follows: a. Copy the server certificate created on the Oracle Application Access Controls Governor host computer to the JAVA_HOMElibsecurity directory of the Oracle Identity Manager host computer. b. Run the following command from the JAVA_HOMEbin directory: keytool -import -alias oaacg_trusted_cert -file JAVA_HOMElibsecurityserver.cert -trustcacerts -keystore JAVA_HOMElibsecuritycacerts -storepass changeit

27.7.2 Enabling SSL Between SAP GRC and Oracle Identity Manager

To enable SSL communication between SAP GRC and Oracle Identity Manager export the certificate on the SAP GRC host computer as follows: 1. In a Web browser, open the Web Services Navigator page of SAP GRC Access Control. The URL is similar to the following: https:mysapserver01:50001VirsaCCRiskAnalysisServiceConfig1?wsdl 2. The next step depends on the browser that you are using: – On Microsoft Internet Explorer: In the Security Alert dialog box, click View Certificate . On the Details tab of the dialog box, use the Copy to file button to export the certificate. – On Mozilla Firefox: Export the certificate as a .pem file. To be able to perform this step, you might need to download and install the Certificate Viewer enhancement from the Mozilla Web site. 3. Copy the certificate into the JAVA_HOMElibsecurity directory used by the application server hosting Oracle Identity Manager. 4. In a terminal window, change to the JAVA_HOMEbin directory. Note: In Step 2, JAVA_HOME refers to the directory on the Oracle Identity Manager host computer. Note: In this section, JAVA_HOME refers to the directory on the Oracle Identity Manager host computer that is used to run the application server.