Tech Tip : Switch CA SSO Administrative UI HTTP/HTTPS connection

TechTip

How to switch between HTTP/HTTPS connection for Administrative UI

 

Environment:
  • Policy Server/Administrative UI : R12.52 SP2 and above
Instruction:
  • Stop CA SSO Administrative UI service.
  • Edit <adminui_install_path>\standalone\deployments\iam_siteminder.ear\management_console.war\WEB-INF\web.xml  and update “AccessFilter” param-value as true (set as false by default).

 

     <filter>
       <filter-name>AccessFilter</filter-name>
       <filter-class>com.netegrity.ims.manage.filter.AccessFilter</filter-class>
       <init-param>
         <param-name>Enable</param-name>
         <param-value>true</param-value>
       </init-param>
     </filter>

 

  • Restart CA SSO Administrative UI service.
  • Access CA SSO Administrative UI Manager application as  http://<servername>:8080/iam/sitemindermanage/

iamtechtips siteminder

  • Select the Environments –> CA Single Sign-On

adminui_envrionment

 

  • Under Environment Properties, modify “Base URL”  as below :
    • For HTTP : http://<servername>:8080/iam/siteminder
    • For HTTPS : https://<servername>:<https_port>/iam/siteminder

e.g. https://shruj01-i1867.ca.com:8443/iam/siteminder

adminui_baseurl

 

    • Click SAVE.
    • Click Restart Environment

adminui_restart

  • Reset the AcessFilter –> Enable  to false in web.xml
         <filter>
           <filter-name>AccessFilter</filter-name>
           <filter-class>com.netegrity.ims.manage.filter.AccessFilter</filter-class>
           <init-param>
             <param-name>Enable</param-name>
             <param-value>false</param-value>
           </init-param>
         </filter>
    
  • Restart SiteMinder Administrative UI service.
  • Access Admin UI

For HTTP : http://<servername>:8080/iam/siteminder/adminui

For HTTPS : https://<servername>:8443/iam/siteminder/adminui

Other interesting reads :

Tech Tip – Web Agent Security vulnerability remediation techniques

Leave a Reply