novdocx (en) 24 March 2009 March 24 (en) novdocx AUTHORIZED DOCUMENTATION Administration Guide Novell® SecretStore® 3.4.1 May, 2009 www.novell.com Novell SecretStore 3.4.1 Administration Guide novdocx (en) 24 March 2009 March 24 (en) novdocx Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright © 2006-2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents) and one or more additional patents or pending patent applications in the U.S. and in other countries. Novell, Inc. 404 Wyman Street, Suite 500 Waltham, MA 02451 U.S.A. www.novell.com Online Documentation: To access the online documentation for this and other Novell products, and to get updates, see www.novell.com/documentation. novdocx (en) 24 March 2009 March 24 (en) novdocx Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/ trademarks/tmlist.html) Third-Party Materials All third-party trademarks are the property of their respective owners. novdocx (en) 24 March 2009 March 24 (en) novdocx 4 Novell SecretStore 3.4.1 Administration Guide novdocx (en) 24 March 2009 March 24 (en) novdocx Contents About This Guide 7 1 Novell SecretStore Overview 9 1.1 Server and Workstation Components . 9 1.1.1 Server Components. 9 1.1.2 Workstation Components . 11 1.2 SecretStore Service Objects . 12 1.2.1 SecretStore . 12 1.2.2 sssServerPolicyOverride Object . 12 1.3 How SecretStore Works. 12 1.3.1 Single Sign-On Authentication Process. 15 2 Installing SecretStore 19 2.1 Installing SecretStore on a NetWare Server . 19 2.1.1 NetWare Requirements . 19 2.1.2 SecretStore Service on NetWare. 19 2.1.3 Synchronizing Replicas . 20 2.2 Installing SecretStore on a Windows Server . 20 2.2.1 Windows Server Requirements . 20 2.2.2 Installing or Upgrading NICI. 20 2.2.3 Synchronizing Replicas . 20 2.3 Installing SecretStore on a Solaris, SLES, or AIX Server . 20 2.3.1 Requirements . 21 2.3.2 SecretStore Service on Solaris, SLES, or AIX. 21 2.3.3 Synchronizing Replicas . 22 2.4 Installing the SecretStore Client on Workstations . 22 2.4.1 Workstation Requirements . 22 2.4.2 Components . 22 2.5 Uninstalling the SecretStore Client . 24 3 Installing and Activating Novell Audit 25 3.1 Installing on NetWare. 25 3.2 Installing on Linux . 28 3.3 Installing on Solaris . 31 3.4 Installing on Windows . 34 3.5 Activating Novell Audit . 36 3.6 Activating Novell Audit Report . 37 4 Managing SecretStore 39 4.1 Managing SecretStore Objects . 39 4.1.1 SecretStore Objects. 39 4.1.2 Viewing and Changing Settings on Objects. 39 4.1.3 Customizing Settings for Groups or Users . 40 4.2 Setting Up a SecretStore Administrator . 42 4.2.1 Adding Advanced Security. 44 4.3 Sharing Secrets . 45 Contents 5 novdocx (en) 24 March 2009 March 24 (en) novdocx 4.3.1 Example Configuration: Sharing Secrets with Novell Products . 45 4.4 Managing Secrets . 46 4.4.1 Adding a Secret . 46 4.4.2 Editing a Secret . 46 4.4.3 Removing a Secret . 46 4.4.4 Unlocking a SecretStore . 47 4.4.5 Viewing a Secret . 47 4.4.6 Viewing a Secret's Status . 47 4.5 Using Enhanced Protection . 47 4.5.1 Locking SecretStore . 48 4.5.2 Setting a Master Password and Hint . 49 4.6 Using Server Commands . 50 5 Troubleshooting SecretStore 53 5.1 Where to Install . 53 5.2 Reading Preferences . 53 5.3 Merging Trees . 53 A Novell SecretStore Error Codes 55 A.1 SecretStore Return Codes . 55 B Documentation Updates 67 B.1 May, 2009 . 67 B.2 August 8th, 2008 . 67 6 Novell SecretStore 3.4.1 Administration Guide novdocx (en) 24 March 2009 March 24 (en) novdocx About This Guide This guide provides an overview of Novell® SecretStore. It includes instructions on how to install, configure, and manage SecretStore. Chapter 1, “Novell SecretStore Overview,” on page 9 Chapter 2, “Installing SecretStore,” on page 19 Chapter 4, “Managing SecretStore,” on page 39 Chapter 5, “Troubleshooting SecretStore,” on page 53 Appendix A, “Novell SecretStore Error Codes,” on page 55 Audience This guide is written primarily for network administrators. Feedback We want to hear your comments and suggestions about this manual and the other documentation included with this product. Please use the User Comment feature at the bottom of each page of the online documentation, or go to www.novell.com/documentation/feedback.html and enter your comments there. Documentation Updates For the most recent version of the Novell SecretStore 3.4.1 Administration Guide, see SecretStore 3.4.1 Administration Guide Web site (http://www.novell.com/documentation/secretstore34/ index.html). Documentation Conventions In this documentation, a greater-than symbol (>) is used to separate actions within a step and items within a cross-reference path. A trademark symbol (®, TM, etc.).