Nexus Certificate Manager

The following instructions closely follow those given in [NIGCM]. That is also where more details on the installation of the Nexus Certificate Manager can be found, if needed.

  1. Make sure that you have access to the license file before starting the installation.

  2. Make install_server.sh executable. Execute the command:

›_ Console

chmod a+x install_server.sh 
  1. Execute install_server.sh.

  2. Enter the full installation path, e.g. /opt/cm/server.

If CM clients are already installed on this computer, the server installation should not be made to the same directory.

  1. Confirm the path.

  2. Enter the name of the license file.

  3. Confirm the file name.

  4. Enter the number or name of each server component, for which you have the license, separated by a space character (" ").

The CMDB database should already exist and the JDBC component should be included to create the database connection parameters.

Install all server components at the same time. It is not possible to add new components later. To do this, the existing components should be uninstalled before they can be reinstalled (see Section 3.11.2 in [NIGCM]). If you have a license for the Key Archive and Recovery or Card Production Manager functions, but you are not going to use them, you should set the following parameters in cm.conf:

CardProductionManager.start=false

KARFactory.start=false

  1. Select a database engine.

  2. Select the machine where the database is installed. The default is localhost.

  3. Select the JDBC port for the database.

  4. Enter the database instance name.

  5. Enter the name of the database CM user. The default is lcmreq.

  6. Enter the password for the lcmreq user.

  7. Await a message from the installation program, confirming a successful installation. If an error message occurs, correct the indicated error and restart the installation by using the setup.sh shell script located in the <install_root>/install directory.

  8. Optionally, start the CMSNMP monitor: <install_root>/bin/cmsnmp start

If the CM SNMP monitor is installed, the *.agent.connectToSupervisor configuration parameter should be set to true in the configuration files cis.conf and cm.conf. *.agent.connectToSupervisor = true

  1. Start CIS: <install_root>/bin/cis start

  2. Start CF: <install_root>/bin/cf start

  3. Check that the two processes have started and that the two instances of the Java process have started as well.

  4. Check the log files in <install_root>/logs to see that the start was successful.

  5. Continue with the configuration as described in the following chapters.