Install the CA Single Sign-On SDK for Software Gateways
This topic describes how to install the CA Single Sign-On SDK on a Software gateway running in these environments:
gateway93
This topic describes how to install the CA Single Sign-On SDK on a Software
CA API Gateway
running in these environments:- Red Hat Enterprise Linux (excluding RHEL 7–see "About Linux Compatibility" below for more details)
- Solaris
The CA Single Sign-On SDK that is provided in the distribution archives is version 12.52 SP01 CR4, which is not yet certified for RHEL 7. For more information on CA Single Sign-On compatibility, see "Identity Providers" in Requirements and Compatibility.
Installing the SDK enables the CA Single Sign-On functionality on the Gateway. The installation script will detect and install the appropriate SDK binary for your platform.
(1) The CA Single Sign-On SDK is included in the Appliance and Virtual Appliance form factors of the
API Gateway
, so separate installation is not
required. (2) Contact CA Support if you need to install the CA Single Sign-On SDK on a SUSE Linux platform.Prerequisites:
- Ensure that yourAPI Gatewayis configured and operational.
- Ensure that you have the following file:siteminder-sdk_12.52.tar.gzThis file is contained in the "CA API Gateway Software Installer Upgrader" distribution archive. For more information, see Release Notes 9.3
Installing the SDK
To install the CA Single Sign-On SDK on a RHEL/Solaris Gateway:
- Copy the appropriate tar file to the machine hosting theAPI Gateway.
- Create a new directory from the root and then change it to:# mkdir smsdk# cd smsdk
- Extract the tar file:RHEL:# tar -xzf ../siteminder-sdk_12.52.tar.gzSolaris:# gunzip ../siteminder-sdk_12.52.tar.gz# tar -xvf ../siteminder-sdk_12.52.tar
- Change to the extracted directory and run the script file:# cd /siteminder-sdk_12.52# ./sm_sdk_install.shA success message displays indicating that installation is complete.
- Enable the CA Single Sign-On SDK by setting this system property:com.l7tech.server.siteminder.enabled=true
- Restart the Gateway with these commands:# /opt/SecureSpan/Gateway/runtime/bin/gateway.sh stop# /opt/SecureSpan/Gateway/runtime/bin/gateway.sh start
The CA Single Sign-On features in the
API Gateway
are now enabled. You can remove the directory containing the extracted files (smsdk
).