000018720 - How to update target CA's policy on Sentry RA

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000018720
Applies ToSentry RA 4.x
Keon Registration Authority
Microsoft Windows NT
Sun Solaris 2.6
TechNote 0282
IssueHow to update target CA's policy on Sentry RA
CauseWhen Keon Sentry RA is first installed against the CA, it inherits the profile options from the target CA.  However, if the target CA's profile options are changed after the installation of Keon/Sentry RA, these changes are not propagated to Keon/Sentry RA.
ResolutionThe Keon Sentry RA administrator has to manually update the CA's policy on the RA side by following the steps below:

1. Pick up the CA policy update templates from:
   https://knowledge.rsasecurity.com/docs/utilities/ca-update.zip

2. Unzip the ca-update.zip file and copy the "ca-update.xuda" template to
 <RA-install-dir>/WebServer/admin-server/ra/admin/

3. Replace the ca_md5 value in this template with your RA's target CA md5.

4. Connect to the following URL:

  https://<RA hosname>:<RA admin port no>/ra/admin/ca-update.xuda

  this will execute the ca-update.xuda file, then the target CA's policy will be updated into RA.


Note: This template only update the CA's profile, if you require other fields to be updated, you might need to modify other templates to accomplish it.
Legacy Article IDa3172

Attachments

    Outcomes