Installing on the First System

CA AuthMinder Windows Installation Guide › Deploying AuthMinder on Distributed Systems › Installing on the First System

Installing on the First System

To install (and later configure) AuthMinder on Windows successfully, the user account that you plan to use for installation must belong to the Administrators group. Else, some critical steps in the installation, such as DSN creation and configuration and AuthMinder service creation, will not go through successfully, though the installation may get completed without any errors.

In a distributed scenario, you can distribute AuthMinder, Administration Console, Java SDKs, and Web Services on different systems. Typically, you install AuthMinder Server on the first system. Custom installation allows you to install only the selected components from the package. This option is recommended for advanced users.

Note: Before proceeding with the installation, ensure that all the prerequisite software are installed and the database is set up, as described in chapter, "Preparing for Installation".

Perform the following steps to install AuthMinder and related components:

Locate the AuthMinder installer Arcot-WebFort-7.1-Windows-Installer.exe file.
Double-click the installer Arcot-WebFort-7.1-Windows-Installer.exe.
The Welcome screen appears. It may take a few minutes for this screen to appear.
Click the Next button to proceed.
The License Agreement screen appears.
Read the license agreement carefully, select the I accept the terms of the license agreement option, and click the Next button to accept the agreement.
The installer now checks if any other CA product is installed on the computer.

If it does not find an existing CA product installation, then you will be prompted for an installation directory. In this case, the Installation Location screen appears.

If the installer detects an existing CA product installation, then you will not be prompted for an installation directory. The Installation Location Screen: Previous Installation Detected screen appears when an existing ARCOT_HOME was located on the computer.
You can accept the default directory specified by the installer to install AuthMinder. You can also click Choose to navigate and to specify a different directory.
Click Next to install in the specified directory.

The Installation Type screen appears.
Select the Custom option to install the selected components and click Next.
The Component Selection screen appears.
Deselect the components that are not required. By default, all components are selected for installation.
For example, to install AuthMinder Server, Administration Console, and User Data Service (without the SDKs and the Sample Application) on the current system, you will need to:
1. Select the Arcot WebFort Authentication Server option.
2. Select the Arcot Administration Console option.
3. Select the Arcot User Data Service option.
4. Deselect the Arcot WebFort Java SDK and WS option.
5. Deselect the Arcot WebFort Sample Application option.
The following table describes all components that are installed by the AuthMinder installer:

Component	Description
Arcot WebFort Authentication Server	This option installs the core Processing engine (WebFort Server) that serves the following requests from SDKs, Administration Console, and web services: Credential Issuance Configurations Credential Authentication Configurations Server Configurations In addition, this component also enables you to access the following Web services: Authentication and Authorization Web service - Provides the programming interface for authenticating and authorizing users. Issuance SDK and Web Services - Provides the programming interface for creating, reading, and updating user credential information in the AuthMinder database. Authentication Web Service - Provides the programming interface for authenticating users. Credential Management Web Service - Provides the programming interface for creation and management of user credentials. Administration Web Service - Provides the programming interface used by the AuthMinder Administration Console. Bulk Operations Web Service: Provides the programming interface for uploading and fetching OATH tokens.
Arcot WebFort Java SDK and WS	This option provides programming interfaces (in form of APIs and Web Services) that can be invoked by your application to forward authentication and user credential issuance requests to the AuthMinder Server. This package comprises the following sub-components: Authentication Java SDK and Web Services- Provides the programming interface for authentication with AuthMinder Server. Credential Management Java SDK and Web Services - Provides the programming interface for creation and management of user credentials. Administration Web Service - Provides the programming interface for creating configurations. Bulk Operations Web Service: Provides the programming interface for uploading and fetching OATH tokens. Refer to chapter, "Configuring AuthMinder Java SDKs and Web Services" for more information on configuring these components.
Arcot WebFort Sample Application	This option provides Web-based interface for demonstrating the usage of AuthMinder Java APIs. In addition, it can also be used to verify if AuthMinder was installed successfully, and if it is able to perform credential management and authentication requests.
Arcot Administration Console	This option provides the Web-based interface for managing AuthMinder Server and authentication-related configurations.
Arcot User Data Service	This option installs UDS that acts as an abstraction layer for accessing different types of user repositories, such as relational databases (RDBMSs) and directory servers (LDAPs.)

After you have selected all the desired components for installation, click Next.
The Database Type screen appears.
Select the database type, and then click Next to proceed.
Depending on the Database you selected, the corresponding Database Details screen appears.

Depending on the database that you selected, perform one of the following steps:
1. Microsoft SQL Server Database Details
  Perform the following tasks for MS SQL database access:
  1. Enter the required information as described in the following table:

Field	Description
ODBC DSN	AuthMinder Server uses the ODBC DSN to connect to the AuthMinder database. The recommended value to enter is arcotdsn. The installer creates the DSN using this value.
Server	The host name or IP address of the database server. If SQL server is deployed in Named Instance mode, then you must also enter a slash "\" followed by the instance name, refer to vendor documentation for more information on this. Default Instance Syntax: <Server Name> Example: demodatabase Named instance Syntax: <Server Name>\<instance name> Example: demodatabase\instance1
User Name	The User Name that AuthMinder uses to access the database (SQL Server refers to this as login). This name is specified by the database administrator. Note: The User Name for the Primary and Backup DSN must be different.
Password	The password that AuthMinder uses to access the database. This password is specified by the database administrator.
Database	The name of the database that AuthMinder will access.
Port Number	The port on which the database server listens to the incoming requests.

Test for successful database connection by clicking Test Data Source.
After completing the test, click Next to proceed.
Go to Step 10.

IBM DB2 (UDB) Database Details
Perform the following tasks for IBM DB2 (UDB) database access:
1. Enter the required information as described in the following table:

Field	Description
ODBC DSN	AuthMinder Server uses the ODBC DSN to connect to the AuthMinder database. The recommended value to enter is arcotdsn. The installer creates the DSN using this value.
Server	The host name or IP address of the database server. If the database is deployed in Named Instance mode, then you must also enter a slash "\" followed by the instance name, refer to vendor documentation for more information on this. Default Instance Syntax: <Server Name> Example: demodatabase Named instance Syntax: <Server Name>\<instance name> Example: demodatabase\instance1
User Name	The User Name that AuthMinder uses to access the database. This name is specified by the database administrator. Note: The User Name for the Primary and Backup DSN must be different.
Password	The password that AuthMinder uses to access the database. This password is specified by the database administrator.
Port Number	The port on which the database server listens to the incoming requests.
Database	The name of the database that AuthMinder will access.

Click Next to proceed.
Go to Step 10.

Oracle Database Details
Perform the following tasks for Oracle database access:
1. Enter the required information as described in the following table:

Field	Description
ODBC DSN	AuthMinder Server uses the ODBC DSN to connect to the AuthMinder database. The recommended value to enter is arcotdsn. The installer creates the DSN using this value.
User Name	The User Name that AuthMinder uses to access the database. This name is specified by the database administrator. Note: The User Name for the Primary and Backup DSN should be different.
Password	The password that AuthMinder uses to access the database. This password is specified by the database administrator.
Service ID	The Oracle System Identifier that refers to the instance of the Oracle database running on the Oracle server.
Port Number	The port on which the database server listens to the incoming requests.
Host Name	The host name or the IP address of the computer where the Oracle server is available. Syntax: <Host Name or IP address> Example: demodatabase

Test for successful database connection by clicking Test Data Source.
After completing the test, click Next to proceed.

MySQL Database Details
Perform the following tasks for MySQL database access:
1. Enter the required information as described in the following table:

Field	Description
ODBC DSN	AuthMinder Server uses the ODBC DSN to connect to the AuthMinder database. The recommended value to enter is arcotdsn. The installer creates the DSN using this value.
Server	The host name or IP address of the database server. If SQL server is deployed in Named Instance mode, then you must also enter a slash "\" followed by the instance name, refer to vendor documentation for more information on this. Default Instance Syntax: <Server Name> Example: demodatabase Named instance Syntax: <Server Name>\<instance name> Example: demodatabase\instance1
User Name	The User Name that AuthMinder uses to access the database (SQL Server refers to this as login). This name is specified by the database administrator. Note: The User Name for the Primary and Backup DSN must be different.
Password	The password that AuthMinder uses to access the database. This password is specified by the database administrator.
Database	The name of the database that AuthMinder will access.
Port Number	The port on which the database server listens to the incoming requests.

Test for successful database connection by clicking Test Data Source.
After completing the test, click Next to proceed.
Go to Step 10.

The Encryption Configuration screen appears. This screen is used to select the encryption mode and set the information used for encryption.

Enter the following information in this screen:
- Master Key: Enter the master key, which will be used to encrypt the data stored in the database. By default, the value of master key is set to MasterKey. This key is stored in the securestore.enc file located at <install_location>\Arcot Systems\conf.
  If you want to change the value of the master key after the installation, then you must regenerate the securestore.enc file with a new master key value. For more information, see the CA AuthMinder Administration Guide.
- Configure HSM: Select this option only if you want to use a Hardware Security Module (HSM) to encrypt the sensitive data. If not selected, the default software mode is used to encrypt the data.
  Note: The following options are enabled only if you choose to Configure HSM.
- PIN: Enter the password that is used to connect to the HSM.
- Choose Hardware Module: Choose the HSM that you plan to use. Following are the HSMs that AuthMinder supports:
  - Luna HSM
  - nCipher netHSM
- HSM Parameters: Set the following HSM information:
  - Shared Library: The absolute path to the PKCS#11 shared library corresponding to the HSM.
    For Luna (cryptoki.dll) and for nCipher netHSM (cknfast.dll), specify the absolute path and name of the file.
- Storage Slot Number: The HSM slot where the 3DES keys used for encrypting the data are present. The default value for Luna is 0, and for nCipher netHSM the default value is 1.
Click Next to continue.

The Pre-Installation Summary screen appears. This screen lists the product name, installation folder, type of installation, and components that are selected.
If you want to change any of the installation settings, then click the Previous button or click the Install button to proceed with the installation.
The Microsoft Visual C++ 2010 x86 Redistributable Setup screen appears. This screen appears only if the current system where you are installing AuthMinder does not have Microsoft Visual C++ 2010 x86.
Select the I have read and accept the license terms option, and click Install.
The Installation Progress screen appears. This might take a few seconds. After some time the Installation Is Complete screen appears.
Click Finish to close the Microsoft Visual C++ 2010 x86 Redistributable Setup dialog box and continue with AuthMinder installation.
The Installing Arcot WebFort screen appears. This might take several minutes. After some time the Installation Complete screen appears.
Click Done to exit the installation wizard.

Installation Logs

After installation, you can access the installation log file (Arcot_WebFort_Install_<mm_dd_yyyy_hh_mm_ss>.log) in the <install_location> directory. For example, if you had specified the C:\Program Files directory as the installation directory, then the installation log file is created in the C:\Program Files directory.

If the installation fails for some reason, then error messages are recorded in this log file.