Microsoft Dynamics CRM Connector > Introduction to Microsoft Dynamics CRM Connector > Administration of Microsoft Dynamics CRM Connector

Administration of Microsoft Dynamics CRM Connector

If you use Active Directory to access Microsoft Dynamics CRM data, perform the following steps before you use Microsoft Dynamics CRM connections:

1Configure Java security for a Microsoft Dynamics CRM instance that uses self-signed certificates.

2Resolve hosts.

Note: If you use Internet Facing Deployment, you can skip step 3 and step 4.

3Edit the Kerberos configuration files.

4Download Java security policy files.

After you perform the required configuration, restart the Secure Agent.

Step 1. Configuring Java Security

Configure Java security for Microsoft Dynamics CRM instances that use Active Directory and self-signed certificates.

1 Generate root and intermediate SSL certificates for HTTPS URL (.cer files).

2Use the command line to navigate to the following directory:

<Secure Agent installation directory>/jdk/jre/bin/

3Use the following command to import HTTPS certificates to the Informatica Java Runtime Environment (JRE):

keytool -importcert -alias <certificate alias name> -file " <certificate path>
\<certificate filename>" -keystore ..\lib\security\cacerts -trustcacerts

The Certificate Alias Name is any unique name and certificate file name includes the full path to the .cer files used in Step 1. The default JRE password is "changeit".

You can export certificate files from a browser after you log in to Microsoft Dynamics CRM.

Step 2. Resolving Hosts

Resolve hosts for Microsoft Dynamics CRM instances that use Active Directory authentication.

To resolve the hosts used for Microsoft Dynamics CRM deployment, add the Microsoft Dynamics CRM IP address and the name to the hosts file.

In Windows 7, you can find the hosts file in the following directory:

<Windows installation directory>\Windows\System32\drivers\etc

Step 3. Editing the Kerberos Configuration Files

Edit the Kerberos configuration files for Microsoft Dynamics CRM instances that use Active Directory authentication.

1Go to <Secure Agent installation directory>/apps/Data_Integration_Server/ext directory and create deploy_to_main/bin/rdtm-extra folder.

2Copy the msdcrm folder from the following directory:

<Secure Agent installation directory>/downloads/package-MicrosoftDynamicsConnector.<version of Microsoft Dynamics CRM Connector package>/package/rdtm/javalib

3Paste the msdcrm folder to the following directory:

<Secure Agent installation directory>/apps/Data_Integration_Server/ext/deploy_to_main/bin/rdtm-extra

4Open the krb5.conf.sample configuration file, located in the following directory:

<Secure Agent installation directory>/apps/Data_Integration_Server/ext/deploy_to_main/bin/rdtm-extra/msdcrm/conf

5Configure the following values in the configuration file:

[libdefaults]
default_realm = <fully qualified domain name>
default_tkt_enctypes = rc4-hmac
default_tgs_enctypes = rc4-hmac
permitted_enctypes = rc4-hmac
[realms]
<fully qualified domain name> = {
kdc = <domain controller hostname>.<fully qualified domain name>default_domain = <fully qualified domain name>
}
[domain_realm]
.<fully qualified domain name> = <fully qualified domain name>

6Rename the krb5.conf.sample configuration file as krb5.conf.

7Open the login.conf.sample login configuration file, located in the following directory: <Secure Agent installation directory>/apps/Data_Integration_Server/ext/deploy_to_main/bin/rdtm-extra/msdcrm/conf

- If the Microsoft Dynamics CRM server pool identity is set to a specific user account, add the serverprincipal="<user name>" entry to the file as follows:

spnego-client {
com.sun.security.auth.module.krb5LoginModule required
serverprincipal="<user name>"
storePass=true;
};

The user name is the user account used by the application pool and defined in the Active Directory properties.

- If the Microsoft Dynamics CRM server pool identity is set to a network service, add the serverprincipal="<URL>" entry to the file as follows:

spnego-client {
com.sun.security.auth.module.krb5LoginModule required
serverprincipal="<URL>"
storePass=true;
};

The URL is the HTTP SPN entry for the Microsoft Dynamics CRM instance.

8Rename the login.conf.sample login configuration file as login.conf.