Policy Server Tools

provides a number of administrative tools to help manage your environment.
CA Single Sign-On
provides a number of administrative tools to help manage your environment.
For the Policy Server tools to work correctly on a Linux Red Hat operating system, define the Policy Server host name in /etc/hosts. You define the host name in this location because these utilities generate adminoids and OIDs. The operating system uses the gethostid() and gettimeofday() Linux functions when generating these OIDs.
The following list describes the function of each tool.
  • smobjimport
    Imports policy data into the policy store.
    This utility is available only to import an existing backup smdif file into the policy store. To migrate a policy store manually, use the XPSExport and XPSImport utilities.
  • smkeyexport
    Exports keys from the key store.
  • smkeyimport
    Imports keys into the key store.
  • smkeytool
    Lets you manage the certificate data store.
    You can also use this utility with the access legacy key store flag (-accessLegacyKS) to manage an existing smkeydatabase during a migration to the current release.
  • smldapsetup
    Manages the
    CA Single Sign-On
    policy store in an LDAP directory.
  • ODBC database SQL scripts
    Removes policy store, token data, and log schema from ODBC databases.
  • smpatchcheck
    Verifies that all required/recommended patches are installed on your Solaris system.
  • smreadclog
    Reads RADIUS log files that the Policy Server generates.
  • smreg
    Lets you change the super user password.
In addition,
CA Single Sign-On
provides tools for working with policy data. The following list provides an overview of the XPS-family of tools. XPS tools are platform-independent command line utilities that XPS administrators can use to manage policy store data. To learn about the options for a particular tool, enter the tool name followed by a question mark at the command line. For example:
XPSConfig ?
  • XPSConfig
    Manages configuration data including vendors, products, and product parameters.
     To use XPSConfig, your administrator account requires XPSConfig privileges.
  • XPSEvaluate
    Evaluates expressions and lets you test performance.
     To use XPSEvaluate, your administrator account requires XPSEvaluate privileges.
  • XPSExplorer
    Manages policy data including vendors, products, and applications.
     To use XPSExplorer, your administrator account requires XPSExplorer privileges.
  • XPSExport
    Exports data from a policy store.
  • Imports data to a policy store.
  • XPSSecurity
    Allows interactive creation and editing of XPS Administrators and their rights. To use this tool, copy it from either \win32\tools or /solaris/tools from the 
    CA Single Sign-On
     installation file that you downloaded from Support to 
    • siteminder_home
      Specifies the Policy Server installation path.
    After you use XPSSecurity, delete it from
    \bin to prevent unauthorized use.
     To use XPSSecurity, your administrator account requires XPSSecurity privileges.
  • XPSSweeper
    Synchronizes XPS and 
    CA Single Sign-On
     policy stores.
     To use XPSSweeper, you require an administrator. No additional rights are required.