Update the lsservice.properties file to indicate key management responsibility
Update the lsservice.properties file on the non-primary authenticating service server. If SSOP is primary, update lsservice.properties on Landmark, if SSOPV2 is primary update lsservice.properties on LSF.
-
Grant key management responsibility to LSF. SSOPV2
is primary authenticating service to the end of the line
- On the LMRK server, open LASYSDIR/lsservice.properties for editing.
-
Add the following properties:
server.keymgmt=keymgmtserver
server.keymgmtserver.host=<LSF hostname>
server.keymgmtserver.port=<LSF security server port>
server.keymgmtserver.sslport=<LSF security server SSL port>
where
"keymgtserver.host" and "keymgtserver.port" are the fully qualified name and port number of the primary authentication server.
Example:
server.keymgmt=keymgmtserver
server.keymgmtserver.host=mylsfserver.lawson.com
server.keymgmtserver.port=9888
server.keymgmtserver.sslport=9889
- Save and close the file.
- Do not perform step 2, continue with step 3 of this procedure.
-
If you have performed steps 1a-d above, do not perform this step.
Grant key management responsibility to LMRK. SSOP is primary authenticating service to the end of the line
- On the LSF server, open LAWDIR/system/lsservice.properties for editing.
-
Add the following properties:
server.keymgmt=keymgmtserver
server.keymgmtserver.host=<LMRK hostname>
server.keymgmtserver.port=<LMRK security server port>
server.keymgmtserver.sslport=<LMRK security server SSL port>
where
"keymgtserver.host" and "keymgtserver.port" are the fully qualified name and port number of the primary authentication server.
Example:
server.keymgmt=keymgmtserver
server.keymgmtserver.host=mylmrkserver.lawson.com
server.keymgmtserver.port=9888
server.keymgmtserver.sslport=9889
- Save and close the file.
- This change requires the server that was updated to be restarted.