Endpoint Administration Guide for Windows › Managing Policy Models › Automatic Rule-based Policy Updates › How You Can Set Up a Hierarchy

How You Can Set Up a Hierarchy

CA ControlMinder uses the Policy Model service to propagate rule-based policy updates across the configured hierarchy. By subscribing several CA ControlMinder computers to the same PMDB, and by subscribing one PMDB to another, you create a hierarchy.

The most straightforward way to set up the PMDB hierarchy is as you install CA ControlMinder, so it is worth thinking through how you want to structure the hierarchy before you begin the installation. Make sure that all the hosts in the PMDB hierarchy are part of the same network, since the parent PMDB and its subscribers must be able to communicate with each other. That is, the parent must be able to connect with each of its subscribers by name, and every subscriber must be able to connect to the parent PMDB by name.

Note: For more information about installing CA ControlMinder, see the Implementation Guide.

If you want to change the configuration that you created during installation or if you did not create a PMDB structure during installation, you can change or create the PMDB configuration at any time. You can do this in one of the following ways:

• With CA ControlMinder Endpoint Management
• With the sepmd utility

To create a PMDB hierarchy and enable automatic rule-based policy updates after installation, do the following:

1. Create and configure the master PMDB.
2. (Optional) Create and configure subscriber PMDBs.
3. Define parent PMDBs for the subscribing computers, called endpoints.