eTrust Directory Administrator Guide - CA Technologies

DXconsole
Testing the Secure Remote DXconsole Using TLSclient
The TLSclient utility establishes an encrypted tunnel between the remote console
client and the DSA. The steps to configure the DSA and TLSclient are as follows:
1. Create the TLSclient configuration file on the client machine
2. Configure the DSA for SSL connections to DXconsole on the server machine
3. Start TLSclient on the client
4. Start the DSA on the server
5. Test the connection
Create the TLSclient
Configuration File
To configure TLSclient, you will need to create the following file on the client
machine:
■
■
Windows: %DXHOME%\config\tlsclient\tlsclient.cfg
UNIX: $DXHOME/config/tlsclient/tlsclient.cfg
This implies that eTrust Directory is also installed on the client machine,
although this may not be required. The only requirement should be that the
environment variable DXHOME is set and the trusted root certificate is available.
The format for tlsclient.cfg is:
inPort outPort remoteAddress
Where inPort is the port on the client machine that will be used for tunneling,
outPort is the DXconsole remote-console-port on the server and remoteAddress
is the hostname of the server running the DXconsole you wish to connect to.
Here is an example for the sample DemoCorp DSA running on the server
machine:
19390 19395 hostname.ca.com
Start TLSclient
TLSclient can be installed to the system services using the command:
tlsclient install -ca
Here is an example for the DemoCorp DSA:
tlsclient install democorp -ca config/ssld/trusted.pem
You can then start the TLSclient instance with:
tlsclient start
For the DemoCorp DSA example, this would be:
tlsclient start Democorp
2–20 eTrust Directory Administrator Guide