---
title: Install DS as an IDM repository
description: When IDM uses multiple DS replicas, configure IDM for failover.
component: pingds
version: 7.3
page_id: pingds:install-guide:profile-idm-repo
canonical_url: https://docs.pingidentity.com/pingds/8.1/install-guide/profile-idm-repo.html
llms_txt: https://docs.pingidentity.com/pingds/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2023-05-15T16:45:22Z
keywords: ["Identities", "Identity Store", "Install", "LDAP", "Repository", "Setup & Configuration"]
superseded_by: https://docs.pingidentity.com/pingds/8.1/install-guide/profile-idm-repo.html
---

# Install DS as an IDM repository

|   |                                                                                                                                                                   |
| - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | When IDM uses multiple DS replicas, configure IDM for [failover](https://docs.pingidentity.com/pingidm/7.3/install-guide/external-ds.html#two-ds-active-passive). |

1. Before proceeding, install the server files.\
   For details, refer to [Unpack files](install-files.html).

2. Run the `setup` command with the `--profile idm-repo` option:

   ```bash
   $ /path/to/opendj/setup \
    --deploymentId $DEPLOYMENT_ID \
    --deploymentIdPassword password \
    --rootUserDN uid=admin \
    --rootUserPassword str0ngAdm1nPa55word \
    --hostname localhost \
    --adminConnectorPort 34444 \
    --ldapPort 31389 \
    --enableStartTls \
    --profile idm-repo \
    --set idm-repo/domain:forgerock.com \
    --acceptLicense
   ```

   * The deployment ID for installing the server is stored in the environment variable `DEPLOYMENT_ID`. Install all servers in the same deployment with the same deployment ID and deployment ID password. For details, read [Deployment IDs](../security-guide/pki.html#about-deployment-ids).

   * The administrative account to use in IDM when connecting to DS has:

     * Bind DN: The DN set with the `--rootUserDN` option.

     * Password: The password set with the `--rootUserPassword` option.

   * The base DN for IDM data is `dc=openidm,dc=forgerock,dc=com`.

   * IDM requires change number indexing with the default settings.

   For the full list of profiles and parameters, refer to [Default setup profiles](setup-profiles.html#default-setup-profiles).

3. Finish configuring the server *before you start it*.

   For a list of optional steps at this stage, refer to [Install DS for custom cases](custom-replica.html).

4. If all access to DS goes through IDM, IDM manages password policy.

   In this case, relax the default password policy settings:

   ```bash
   $ dsconfig \
    set-password-policy-prop \
    --policy-name "Default Password Policy" \
    --reset password-validator \
    --offline \
    --no-prompt

   $ dsconfig \
    set-password-policy-prop \
    --policy-name "Root Password Policy" \
    --reset password-validator \
    --offline \
    --no-prompt
   ```

5. Start the server:

   ```bash
   $ /path/to/opendj/bin/start-ds
   ```