Skip to main content
日本語 简体中文 繁體中文

[Access Control] Installation Procedure for Root Certificate Required for HENNGE Directory Sync Tool Operation

Target

  • Administrators who link users with Access Control and Active Directory

Purpose

  • To operate the [HENNGE Directory Sync Tool] that synchronizes users between on-premises AD and Access Control, it is necessary to have the root certificate installed on the server where the tool is installed.
    This article explains the installation procedure for the root certificate required for the operation of the [HENNGE Directory Sync Tool].

Notes

  1. Administrator account information for the server where the HENNGE Directory Sync Tool is installed is required.
  2. This procedure should be performed on a client terminal.

Procedure

Install the [Amazon Root CA 1] server certificate on the server where the HENNGE Directory Sync Tool is installed.
The server certificate to be installed is widely and commonly used worldwide, and no security issues have been reported to date.
Additionally, there will be no impact on the existing environment due to this operation, and no system downtime will occur during the operation.
(No server terminal reboot is required.)

Preparation: Certificate Download+

1. Access the Amazon Trust Services Repository web page.

URL: https://www.amazontrust.com/repository/

2. Download the server certificate for Amazon Root CA 1.
From the table labeled [Root CA s], click the link for the DER format server certificate for [Amazon Root CA 1] and download it to your terminal.

3. Confirm that a file named AmazonRootCA1.cer is downloaded.

1_edited.png

 ※ The following screenshot is for Internet Explorer. The display when saving files may differ depending on the browser you use.

2_edited.png

Certificate Installation Procedure (Windows Server 2016)+

1. Log in to the server with an administrator account. 

1_edited.png

2. Press [Windows Key] + [R Key] to open the Run dialog, enter [mmc], and click [mmc.exe] in the search results.

2_edited.png

3. Click [File] in the menu at the top of the window.

3_edited.png

4. Click [Add/Remove Snap-in].

4_edited.png

5. Select [Certificates] from the [Available snap-ins].

5_edited.png

6. Click [Add].

6_edited.png

7. Select [Computer account] and click [Next]. 

7_edited.png

8. Select [Local computer] and click [Finish]. 

8_edited.png

9. Confirm that [Certificates (Local Computer)] is added and click [OK]. 

9_edited.png10. Click [Certificates (Local Computer)] under [Console Root]. 

10_edited.png

11. Open [Trusted Root Certification Authorities]. 

11_edited.png

12. Open [Certificates]. 

12_edited.png

13. Check if [Amazon Root CA 1] exists in the displayed certificate list.
If [Amazon Root CA 1] already exists in the certificate list at this point, the action is completed.
Close the displayed Microsoft Management Console window without saving and end the operation.
※ Only if [Amazon Root CA 1] does not exist in the certificate list, proceed with the following steps. 

13_edited.png

14. Copy the certificate downloaded in the [Preparation] section of this article to the server. 

1.certification_desktop_edited.png

15. Double-click the copied certificate and click [Install Certificate] on the displayed screen. 

2.certification_install_edited.png

16. Select [Local computer] and click [Next]. 

3.certification_install_2_edited.png

17. Select [Automatically select the certificate store based on the type of certificate] and press [Next]. 

4.certification_install_3_edited.png

18. Press [Finish]. 

5.certification_install_4_edited.png

19. Confirm that [The import was successful.] is displayed and press [OK].

6.certification_install_5_edited.png

20. Repeat steps 2 to 13 and check if [Amazon Root CA 1] exists in the certificate list.

7.certification_mmc_edited.png

The certificate installation is now complete.
Close the displayed Microsoft Management Console window without saving and end the operation.