Pre-installation steps for Single sign-on (SSO)

Configure PowerShell

1. Open a Windows PowerShell prompt.
2. Modify the execution policy:

   Set-ExecutionPolicy Unrestricted

Install certificates

On each web server, install and configure certificates for use with SSO.

Note: The worker process for IIS needs to read the private key of the Sign-in and Cookie certificates. By default, this is the IIS_IUSRS group. The certificate installation scripts prompt you for this information at the appropriate time.

1. Open a PowerShell prompt.

   Note: If the server has User Account Control enabled, you must open the PowerShell prompt using elevated administrator permissions.

2. Navigate to the configuration directory, default:

   <cp_common>\Configuration\Common

3. Execute:

   ./InstallChangepointCookieCertificate.ps1

4. Execute:

   ./InstallChangepointSigningCertificate.ps1