Installing CA ControlMinder Enterprise Management installs all the Enterprise Management Server components. You must prepare the Enterprise Management Server before you install CA ControlMinder Enterprise Management.
We recommend that you use the Prerequisite Kit installer to initiate the CA ControlMinder Enterprise Management installation. Install_PRK.exe installs required third-party software and then starts the CA ControlMinder Enterprise Management installation.
Note: You cannot install CA ControlMinder Enterprise Management by network install. Copy the entire contents of the Disk 1 directory of the CA ControlMinder Server Components DVD to your installation directory or map a drive to the DVD instead.
Important! If you install CA ControlMinder Enterprise Management for High Availability, specify the same FIPS key on the primary and secondary Enterprise Management Servers. Specify a custom FIPS key if you install CA ControlMinder Enterprise Management for High Availability with FIPS support.
Follow these steps:
Defines the Enterprise Management Server installation mode:
Important! Installation mode applies to new installations only.
Defines the full path of the installation folder.
Default: \ProgramFiles\CA\AccessControlServer\
Note: On 64 bit operating systems the default installation folder is:
\Program Files(x86)\CA\AccessControlServer\
Important: The product does not support special characters in the installation directory path.
Defines the location of an existing JDK.
Note: If you launch the CA ControlMinder Enterprise Management installation immediately after you use the CA ControlMinder Third Party Component DVDs to install the prerequisite software, this wizard page does not appear. The installation utility configures the installation settings on this page based on the values you provided in the prerequisite software installation process.
Defines the JBoss instance that you want to install the application on.
To do this, define the:
For example, C:\jboss-4.2.3.GA on Windows or /opt/jboss-4.2.3.GA on Solaris.
Note: If you launch the CA ControlMinder Enterprise Management installation immediately after you use the CA ControlMinder Third Party Component DVDs to install the prerequisite software, this wizard page does not appear. The installation utility configures the installation settings on this page based on the values you provided in the prerequisite software installation process.
(Primary Enterprise Management Server Only) Defines the password used for CA ControlMinder Enterprise Management Server inter-component communication.
Note: CA ControlMinder Enterprise Management uses the communication password to manage the Message Queue keystore and administrator account, handle communication between CA ControlMinder Enterprise Management and the endpoints and manage the Java Connection Server.
(Load Balancing Enterprise Management Server Only) Defines the Primary Enterprise Management Server host name or IP address and the full pathname to the FIPS key.
Note: By default, the FIPS key is located in the following path, where JBoss_HOME is the directory where you installed JBoss:
JBoss_HOME/server/default/deploy/IdentityMinder.ear/config/com/netegrity/config/keys
Defines the connection details to the RDBMS:
Note: You granted this user the appropriate database permissions when you prepared the database.
The installation program checks the connection to the database before it continues.
Defines the Active Directory user store settings:
Note: Set the Search Root at least one node higher in the directory tree than the Distinguished Names (DNs) for the users specified for User DN and System User. Otherwise, Enterprise Management might launch without displaying any tabs.
Note: This user issues LDAP queries against Active Directory. You can choose to define a user with read-only privileges for this parameter. However, if you define a user with read-only privileges, you cannot assign admin roles or privileged access roles to users in CA ControlMinder Enterprise Management. Instead, you modify the member policy for each role to point to an Active Directory group.
The installation program checks the connection to Active Directory before continuing.
Note: You can use the DSQUERY directory querying utility to discover the user Distinguished Name (User DN). You must run this query on the Active Directory server. For example:
dsquery user -name administrator "CN=Administrator,CN=Users,DC=lab.DC=demo"
(Active Directory only) Defines the DN of the Active Directory user who is assigned the System Manager admin role in CA ControlMinder Enterprise Management.
Example: CN=SystemUser, ou=OrganizationalUnit, DC=DomainName, DC=Com
Note: By default, a user with the System Manager admin role can perform, create, and manage all tasks in CA ControlMinder Enterprise Management. For more information about the System Manager admin role, see the Enterprise Administration Guide.
(Embedded user store only) Defines the password of superadmin, the CA ControlMinder Enterprise Management administrator. Make a note of the password so you can log in to CA ControlMinder Enterprise Management when the installation is complete.
Note: In this step you create the superadmin user in the embedded user store. The superadmin user is assigned the System Manager admin role in CA ControlMinder Enterprise Management. You log in as superadmin the first time you log in to CA ControlMinder Enterprise Management. For more information about the System Manager admin role, see the Enterprise Administration Guide.
Defines the path to a copy of the original FIPSkey.dat. The FIPS key file ensures that the encrypted database is readable after migration.
The Enterprise Management Server is installed after you complete the wizard. Reboot the computer to complete the installation.
The computer reboots. You can now configure CA ControlMinder Enterprise Management for your enterprise.
Copyright © 2013 CA Technologies.
All rights reserved.
|
|