If your LDAP directory service requires a secure LDAP connection (LDAPS), you must configure OpenText Filr with a root certificate. The root certificate identifies the root certificate authority (CA) for your Filr site, which enables you to export a self-signed root certificate based on your eDirectory or Active Directory tree.
Launch and log in to iManager for your tree.
Click Directory Administration.
Click Modify Object.
Click the magnifying glass icon to browse to and select the “Tree Name CA” object in the Security container of the eDirectory tree.
Click OK.
Click the Certificates tab.
Select the check box for the root certificate (this is not the certificate titled Self Signed Certificate, but rather the root certificate), then click Validate.
Select the check box for the root certificate, then click Export.
Deselect Export private key, then click Next.
Click Save the exported certificate, then select File in binary DER format.
Save the file to a location where it can be accessed later and with a file name that you can remember, such as SelfSignCert.der.
Click Close > OK.
Continue with Importing the Root Certificate into the Java Keystore.
On the Windows server, click Start > Run, then enter mmc.
In MMC, type Ctrl+M.
If the Internet Information Services (IIS) Manager snap-in is not installed on your Windows server, install it.
With IIS selected, click Add, then click OK.
In the left frame, click Internet Information Services, then click a Windows server that Filr can connect to for synchronizing users.
In the Filter list, scroll down to Server Certificates and double-click the icon.
In the Actions list, click Create Self-Signed Certificate.
Name the certificate with a name you can remember, such as the server name, then click OK.
Type Ctrl+M, select the Certificates plug-in, then click Add.
Select Computer account, then click Next.
Click Finish.
In the Snap-ins dialog, click OK.
In MMC, expand the Certificates plug-in, expand Personal, then click Certificates.
Right-click the certificate you created, select All Tasks, then click Export....
In the Certificate Export wizard, click Next.
Ensure that No, do not export the private key is selected, then click Next.
Ensure that DER encoded binary is selected, then click Next.
Name the certificate, then click Next.
Click Finish > OK.
The certificate is saved in C:\Users\Your-User-Name.
Ensure that the certificate is accessible from your management browser.
Continue with Importing the Root Certificate into the Java Keystore.
Navigate to the management console of your OpenText Appliance:
https://ip_address:9443Under Appliance Configuration, click Digital Certificates.
In the Key Store drop-down list, select JVM Certificates.
Click File > Import > Trusted Certificate.
A .der certificate is required for the import to be successful.
Browse to and select the trusted root certificate that you want to import.
If you want to import multiple certificates, ensure that the certificate names are different for each certificate.
Do not make any changes to the Alias field. It is populated by default.
Click OK.
The certificate should now be displayed in the list of JVM certificates.
Restart Filr so that Tomcat rereads the updated Java keystore file.
You can restart the Filr service as described in Shutting Down and Restarting the Appliance
in the OpenText Filr : Administrative UI Reference.
You are now ready to configure your Filr site for secure LDAP synchronization, as described in see LDAP Servers and Synchronization
in the OpenText Filr : Administrative UI Reference.