Installing the PingDirectory server in non-interactive mode with a truststore - PingDirectory

Page created: 15 Jul 2022 |

Page updated: 20 Jan 2023

| 1 min read

9.2 Product PingDirectory Directory Capability Product documentation Content Type Administration User task IT Administrator Administrator Audience System Administrator Software Deployment Method Installation

You can set up the PingDirectory server using an existing truststore for secure communication. This section assumes that you have an existing keystore and truststore with trusted certificates.

Unzip the distribution .zip file, review Before you begin, and then, from the server root directory, use setup with the --no-prompt option for non-interactive mode. The following example enables security using both SSL and StartTLS. It also specifies a JKS keystore and truststore that define the server certificate and trusted CA. The userRoot database contents will remain empty and the base DN entry will not be created.
```
$ ./setup --no-prompt --rootUserPassword "password" \ 
  --baseDN "dc=example,dc=com" --ldapPort 389 --enableStartTLS \ 
  --ldapsPort 636 --useJavaKeystore config/keystore.jks \ 
  --keyStorePasswordFile config/keystore.pin \
  --certNickName server-cert --useJavaTrustStore config/truststore.jks \ 
  --acceptLicense --instancename Instance1 --location Location1
```
The password to the private key with the keystore is expected to be the same as the password to the keystore. If this is not the case, the private key password can be defined with the administrative console or the dsconfig tool by editing the Trust Manager Provider standard configuration object.