Skip to main content
日本語 简体中文 繁體中文

[Access Control] Procedure for Installing the Root Certificate Required for HENNGE Directory Sync Tool Operation

Overview

To operate the [HENNGE Directory Sync Tool], which synchronizes Users between on-premises AD and Access Control, a Root Certificate must be installed on the server where the tool is installed.
This article explains the procedure for installing the Root Certificate required to operate the [HENNGE Directory Sync Tool] when integrating Users between Access Control and Active Directory.

Notes

  1. Administrator account information for the server on which HENNGE Directory Sync Tool is installed is required.
  2. Please perform this procedure on a client device.

Procedure

Install the [Amazon Root CA 1] server Certificate on the server where HENNGE Directory Sync Tool is installed.
The server Certificate to be installed is widely used around the world, and no security issues associated with its installation have been reported to date.
In addition, this operation will not affect your existing environment and will not cause any System downtime.
(Restarting the server is not required.)

Prerequisites: Export Certificates+

  1. Access the Amazon Trust Services Repository web page.
    URL：https://www.amazontrust.com/repository/

  2. Download the server Certificate for Amazon Root CA 1.
    From the table labeled [Root CA s], click the Link for the DER-format server Certificate for [Amazon Root CA 1] and download it to your device.
  3. Confirm that a file named AmazonRootCA1.cer is downloaded.

1_edited.png

※ The following screenshots are from Internet Explorer. The display shown when saving files may differ depending on the browser you use.

2_edited.png

Certificate Installation Procedure (Windows Server 2016)+

  1. Log in to the server using an administrator account. 

  2. Press [Windows key] + [R key], enter [mmc] in the Run dialog box that appears, and then click [mmc.exe] in the Search results.
    ※ If it does not appear in the Search results, open Terminal or PowerShell, enter mmc, and press the [Enter] key to launch it.

  3. Click [File] in the menu at the top of the window.

  4. Click [Add/Remove Snap-in].

  5. Select [Certificates] under [Available snap-ins].

  6. Click [Add User].

  7. Select [Computer account], and then click [Next]. 

  8. Select [Local computer], and then click [Finish]. 

  9. Confirm that [Certificates (Local Computer)] has been added, and then click [OK]. 

  10. Click [Certificates (Local Computer)] under [Console Root]. 

  11. Open [Trusted Root Certification Authorities]. 

  12. Open [Certificates]. 

  13. Confirm whether [Amazon Root CA 1] is listed in the displayed Certificates.
    If [Amazon Root CA 1] is listed in the Certificates at this point, the procedure is complete.
    Close the displayed Microsoft Management Console window without saving, and then end the procedure.
    ※ Perform the following steps only if [Amazon Root CA 1] is not listed in the Certificates. 

  14. Copy the Certificate downloaded in advance under [Prerequisites] in this article to the server. 

  15. Double-click the copied Certificate, and then click [Install Certificate] on the displayed screen. 

  16. Select [Local Computer], and then click [Next]. 

  17. Select [Automatically select the certificate store based on the type of certificate], and then click [Next]. 

  18. Click [Finish]. 

  19. Confirm that [The import was successful.] is displayed, and then click [OK].

  20. Repeat steps 2 through 13 and confirm that [Amazon Root CA 1] is listed in the Certificates.

This completes the Certificate installation.
Close the displayed Microsoft Management Console window without saving, and then end the procedure.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.