Install Guide - InTrust Service Connection Point (SCP) (60082)

During InTrust installation and review of the InTrust_10.1_InstallGuide.pdf it is noted InTrust requires permissions for proper creation of Service Connection Point (SCP) entries in CN=Quest InTrust, CN=System, DC=<Domain> in the Active Directory configuration partition.

There is an error in the documentation. The steps outline manual creation of these folders in the Active Directory configuration partition. These entries are to exist in the Active Directory domain partition where InTrust is installed.

The document should read as follows:

In order to provide automatic creation of Service Connection Point (SCP) by InTrust means, you should perform the following before the setup:

• Open the ADSI Edit snap-in and create CN=Quest InTrust, CN=System, DC=<Domain> in the Active Directory domain partition. You have to assign the following rights for this container for the account under which you will run the setup: Create All Child Objects, Read Permissions, Modify Permissions.
  -OR-
• Open the ADSI Edit snap-in and specify the following rights for the CN=System, DC=<Domain> in the Active Directory
  domain partition for the account under which you will run the setup: Create All Child Objects, Read Permissions, Modify Permissions, Read All Properties, Write All Properties. These permissions must be applied onto This object and all child objects scope.

What you have after you have performed all these actions and setup has finished:

• The CN=Quest InTrust container is created.
• The account under which you install the Quest InTrust Server service has sufficient rights to create child objects.
• The account under which you run the Quest InTrust Server service has sufficient rights to create child objects.
• The serviceConnectionPoint object is created