Policy Server Tools
provides a number of administrative tools to help manage your environment.
CA Single Sign-Onprovides a number of administrative tools to help manage your environment.
For the Policy Server tools to work correctly on a Linux Red Hat operating system, define the Policy Server host name in /etc/hosts. You define the host name in this location because these utilities generate adminoids and OIDs. The operating system uses the gethostid() and gettimeofday() Linux functions when generating these OIDs.
The following list describes the function of each tool.
- smobjimportImports policy data into the policy store.This utility is available only to import an existing backup smdif file into the policy store. To migrate a policy store manually, use the XPSExport and XPSImport utilities.
- smkeyexportExports keys from the key store.
- smkeyimportImports keys into the key store.
- smkeytoolLets you manage the certificate data store.You can also use this utility with the access legacy key store flag (-accessLegacyKS) to manage an existing smkeydatabase during a migration to the current release.
- smldapsetupManages theCA Single Sign-Onpolicy store in an LDAP directory.
- ODBC database SQL scriptsRemoves policy store, token data, and log schema from ODBC databases.
- smpatchcheckVerifies that all required/recommended patches are installed on your Solaris system.
- smreadclogReads RADIUS log files that the Policy Server generates.
- smregLets you change the super user password.
CA Single Sign-Onprovides tools for working with policy data. The following list provides an overview of the XPS-family of tools. XPS tools are platform-independent command line utilities that XPS administrators can use to manage policy store data. To learn about the options for a particular tool, enter the tool name followed by a question mark at the command line. For example:
- XPSConfigManages configuration data including vendors, products, and product parameters.Note:To use XPSConfig, your administrator account requires XPSConfig privileges.
- XPSEvaluateEvaluates expressions and lets you test performance.Note:To use XPSEvaluate, your administrator account requires XPSEvaluate privileges.
- XPSExplorerManages policy data including vendors, products, and applications.Note:To use XPSExplorer, your administrator account requires XPSExplorer privileges.
- XPSExportExports data from a policy store.
- Imports data to a policy store.
- XPSSecurityAllows interactive creation and editing of XPS Administrators and their rights. To use this tool, copy it from either \win32\tools or /solaris/tools from theCA Single Sign-Oninstallation file that you downloaded from Support tositeminder_home\bin.
After you use XPSSecurity, delete it fromsiteminder_home\bin to prevent unauthorized use.Note:To use XPSSecurity, your administrator account requires XPSSecurity privileges.
- siteminder_homeSpecifies the Policy Server installation path.
- XPSSweeperSynchronizes XPS andCA Single Sign-Onpolicy stores.Note:To use XPSSweeper, you require an administrator. No additional rights are required.