DESCRIPTION: Super Admin Cannot Import CA Certificate
An administrator with Super Admin access cannot import a certificate authority (CA) certificate, although given modify access to the following categories in AMC,.
A fix is being investigated for the release code-named Grand Teton, due in 2008.
A workaround for this issue exists but requires a handedit on the appliance.
Warning SonicWall strongly recommends that users not familiar or comfortable with the "vi" command or the command line contact SonicWall product support for assistance. Always back up your configuration before performing hand edits. Use the command line at your own risk.
Please see KB item #2500 for some suggestions on enabling SSH access to the appliance and getting onto the command line.
SSH to the appliance.
Stop AMC with the following command: /etc/init.d/mgmt-server stop
Using vi, edit /usr/local/app/mgmt-server/datastore/pending/sysconf/avconfig.xml, /usr/local/app/mgmt-server/datastore/active/sysconf/avconfig.xml, and /usr/local/app/mgmt-server/conf/console.xml.
In those files, search for the following line. It will appear once in the file: <page allowedOnSlaveNode="false" id="importCert"/>
Directly underneath the found line, enter this line: <page allowedOnSlaveNode="false" id="importCaCert"/>
Again, search all of those files for this line. It will appear in the file twice: <pages_item refId="importCert"/>
Directly underneath the found line, enter this line: <pages_item refId="importCaCert"/>
Restart AMC with the following command: /etc/init.d/mgmt-server start