Installing the Directory Server in non-interactive mode with a truststore - PingDirectory

Page created: 26 Jul 2021 |

Page updated: 7 Dec 2022

| 1 min read

9.0 Product PingDirectory Directory Capability Product documentation Content Type Administration User task IT Administrator Administrator Audience System Administrator Software Deployment Method Installation

You can set up the Directory Server using an existing truststore for secure communication. This section assumes that you have an existing keystore and truststore with trusted certificates.

Unzip the distribution ZIP file, review Before You Begin, and then, from the server root directory, run setup with the --no-prompt option for non-interactive mode. The following example enables security using both SSL and StartTLS. It also specifies a JKS keystore and truststore that define the server certificate and trusted CA. The userRoot database contents will remain empty and the base DN entry will not be created.
```
$ ./setup --no-prompt --rootUserPassword "password" \ 
  --baseDN "dc=example,dc=com" --ldapPort 389 --enableStartTLS \ 
  --ldapsPort 636 --useJavaKeystore config/keystore.jks \ 
  --keyStorePasswordFile config/keystore.pin \
  --certNickName server-cert --useJavaTrustStore config/truststore.jks \ 
  --acceptLicense --instancename Instance1 --location Location1
```
The password to the private key with the keystore is expected to be the same as the password to the keystore. If this is not the case, the private key password can be defined with the Administrative Console or the dsconfig tool by editing the Trust Manager Provider standard configuration object.