Use the Web Service Access Policy File

You create the Access Policy file in CA Service Desk Manager and then use this file in CA APM. The Access Policy file contains encrypted policy details that are assigned to a CA Service Desk Manager user who has access to various capabilities in the CA SDM application.
casm171
You create the Access Policy file in CA Service Desk Manager and then use this file in CA APM. The Access Policy file contains encrypted policy details that are assigned to a CA Service Desk Manager user who has access to various capabilities in the CA SDM application.
Follow these steps:
  1. Log in to the CA Service Desk Manager as an Administrator. Use the Administration tab to perform the following tasks:
    1. Create the Web Services Access Policy using the SOAP Web Services Policy option. Complete the following:
      1. Assign a name. The default name and code are CASM_POLICY; however, you can use any name as per your requirements.
      2. Assign a proxy user to this policy.
        This proxy user must have administrative access to CA Service Desk Manager.
      3. Verify that the Allow Impersonate property of CA Service Desk Manager is set to Yes.
        CA Service Desk Manager checks the access type of the CA APM user to be impersonated against the access type of the proxy user of the policy. If the access level of the CA APM user access type is less than or equal to the grant level of the proxy user access type, CA SDM replaces the CA APM user with the proxy user.
    2. Generate the policy key file with the help of pdm_pki tool for the Web Services policy that you created.
      In the Service Desk environment, open the Command Prompt and enter:
      C:>pdm_pki -p CASM_POLICY -f
      The policy file CASM_POLICY.p12 is generated in the same folder.
      The default/recommended name is CASM_POLICY.p12, but you can use any name as per your requirement.
    3. Verify that the Has Key property is set to Yes in the newly created Web Services access policy. The system typically configures this setting automatically when you generate the policy key file.
    4. Copy and save the policy key file to the CA APM default installation directory of the CA APM Web Server.
      C:\Program Files (x86)\CA\ITAM
      If you are using application clustering, copy the policy key file to the CA APM installation directory of every CA APM Webserver Component cluster node. If you re-configure the Policy in CA SDM, then you must re-generate the policy file and copy it to CA APM Web Server installed directory.
  2. Log in to CA APM as an Administrator.
    Default:
    uapmadmin
    .
  3. Click Administration, System Configuration, Service Desk Manager.
  4. Enter the complete URL for CA Service Desk Manager SOAP Web Services in the following format:
    http://<ServiceDeskHostName>:<PortNum>/axis/services/USD_R11_WebService.
  5. Copy the CA Service Desk Manager SOAP Policy file from CA Service Desk Manager Server to the CA APM web server installation folder. Default installation directory :
    C:\Program Files (x86)\CA\ITAM
  6. Enter the file name of CA Service Desk Manager policy file that is copied on the CA APM Web server component installation folder.
  7. Enter the CA Service Desk Manager policy code that is the policy name as configured in the CA Service Desk Manager Administration SOAP Web Services policy configuration page.
  8. Click Save.
Do not perform IISReset on the CA APM Web Server or CA APM Application Server.