7022445: Updating to latest iManager NetIQ Certificate Server Plug-ins in NAM to avoid security issues

This document (7022445) is provided subject to the disclaimer at the end of this document.


Access Manager 4.4

Administration Console Plugins


iManager version shipping with Access Manager 4.4 includes following plugins:

NetIQ Certificate Server Plug-ins for iManager NetIQ Certificate Management in eDirectory

There’s an update to this plugin (NetIQ Certificate Server Plug-ins for iManager NetIQ Certificate Management in eDirector) that prevents an attacker from uploading files to a temp directory on Admin Console.


Manually update Access Manager iManager certificate server plugins to the latest using the following:


Go to Admin console-> Configure Console

2. Select
iManager Server-> Configure iManager

Navigate to Plug-inDownload and enable “Query download site for new NetIQ Plug-in Modules(NPM)”

Save configuration

Go to plug-in installationand Click Available Plug-in

Select and install

7. Once install,restart admin console server

In the cases where the iManager server has no access to the public network, the following steps are required where

we download the updates from a separate host, and then update iManager manually.

1. Open the URL – https://www.netiq.com/support/imanager/plugins/

2. Search for pki.npm version, it will be listed as”NetIQ Certificate Server Plug-ins for iManager”

Download the pki.npm file.

4. Open Admin Console -> Admin -> Console Configuration -> Plug-ininstallation -> Available NetIQ Plug-in Modules.
Click Add -> Choose File -> Browse and Select “pki.npm”-> Click “OK”.

5. Select the “NetIQ Certificate Server Plug-ins for iManager”and click Install. The new plugin should be displayed in the list of ‘Available plug-ins’.

6. Click Close, when install process completed.

7. Click on Installed NetIQ Plug-in Modules, and verify that the plug-inhas been installed.

8. Restart the Admin Console Service.


This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented “AS IS” WITHOUT WARRANTY OF ANY KIND.


Leave a Reply