Implementation Guide › Installing the Enterprise Management Server › Environment Architecture

Environment Architecture

An enterprise installation of CA ControlMinder lets you centrally manage policies, privileged accounts, and CA ControlMinder endpoints; view information about the policies on each endpoint; and report on the security status of endpoints. You can manage these features through web-based interfaces or through utilities.

To manage your enterprise installation of CA ControlMinder, install the Enterprise Management Server on a central computer and configure it for your enterprise.

CA ControlMinder is installed silently when you install the Enterprise Management Server. CA ControlMinder protects the Enterprise Management Server and provides core functionality that supports the applications in the Enterprise Management Server.

Once you installed the Enterprise Management Server, you install and configure the CA ControlMinder and UNAB endpoints. If you have existing CA ControlMinder endpoints, configure each endpoint for advanced policy management and reporting.

The following diagram shows the Enterprise Management Server architecture:

The previous diagram illustrates the following:

• The Enterprise Management Server uses the following ports:
  • Port 8891 for symmetric encryption and port 5249 for SSL communication with the CA ControlMinder endpoints.
  • Ports 1433 (MS SQL) or 1521 (Oracle) to communicate with the RDBMS.
  • Ports 389 or 686 for encrypted communication with Active Directory.
  • Port 20411 for encrypted communication with the Java Connector Server (JCS)
  • Port 7243 for encrypted communication with the Message Queue
• SAM communicates with the endpoints according to the endpoint type (Windows Agentless, SSH Device and more).
• Enterprise Management Server communciates with CA Business Intelligence using port 8080.
• Enterprise Management Server communicates with CA User Activity Reporting using port 5250 for encrypted communication.
• UNAB communicates with Active Directory using the following ports: 53, 88, 123, 289, 445, 464, 3268.