How to update target CA's policy on Sentry RA
2 years ago
Originally Published: 2001-06-19
Article Number
000056328
Applies To
Sentry RA 4.x
Keon Registration Authority
Microsoft Windows NT
Sun Solaris 2.6
TechNote 0282
Issue
How to update target CA's policy on Sentry RA
Cause
When Keon Sentry RA is first installed against the CA, it inherits the profile options from the target CA.  However, if the target CA's profile options are changed after the installation of Keon/Sentry RA, these changes are not propagated to Keon/Sentry RA.
Resolution
The Keon Sentry RA administrator has to manually update the CA's policy on the RA side by following the steps below:

1. Pick up the CA policy update templates from:
   https://knowledge.rsasecurity.com/docs/utilities/ca-update.zip

2. Unzip the ca-update.zip file and copy the "ca-update.xuda" template to
 <RA-install-dir>/WebServer/admin-server/ra/admin/

3. Replace the ca_md5 value in this template with your RA's target CA md5.

4. Connect to the following URL:

  https://<RA hosname>:<RA admin port no>/ra/admin/ca-update.xuda

  this will execute the ca-update.xuda file, then the target CA's policy will be updated into RA.


Note: This template only update the CA's profile, if you require other fields to be updated, you might need to modify other templates to accomplish it.