Symptom:
When installing CA ControlMinder using a native Linux package, it fails with the following error message.:
Binary file cannot be executed Reason: The platform does not match or some necessary libraries are missing. Action: Please check that the correct system libraries are used (libc).
Solution:
The CA ControlMinder installation on Linux requires a 32-bit libc library to be installed and configured in libpath, independent of the system architecture. If your Linux system is a 64-bit minimal installation with no 32-bit version of libc, the installation fails.
Install the 32-bit version of libc, and rerun the installation.
CA ControlMinder does not support an RDP Hardening server component configuration. If a deployed hardening policy that includes the “Always prompt for password” option is selected, PUPM automatic login does not work.
When configuring Enterprise Management Server for high availability, verify that both the primary and the load balancing servers are installed on the same time zone.
To install Endpoint Management on a 64-bit Linux server, install CA ControlMinder Endpoint Management 32-bit version. The 32-bit version is required as Endpoint Management installs a 32-bit web service.
Valid on Windows
The administrative account user name must not include any special characters. For example: '-' character.
You can find supported JDK and JBoss versions on the CA ControlMinder Third Party Components DVDs.
When using the Prerequisite Kit installer utility to install CA ControlMinder Enterprise Management from the media, after you are prompted to insert the CA ControlMinder Enterprise Management DVD, you must select Done to continue. You may also need to close the ProductExplorer window that appears when you insert the DVD.
To install any of the CA ControlMinder server components (such as Endpoint Management and Enterprise Management), you must log in as the superuser (root on UNIX or a member of the Administrators group on Windows).
During CA ControlMinder Enterprise Management installation, when it tries to connect to the RDBMS, a connection failure may suggest that java.exe cannot be located.
Make sure that the full pathname to java.exe is in the system's PATH environment variable.
Valid on UNIX
Do not enter spaces in the installation path when you install the Enterprise Management Server.
If you want to work with an Active Directory that is located outside of the domain that you installed CA ControlMinder Enterprise Management on, you must change the host TCP/IP settings.
To set up CA ControlMinder Enterprise Management to work with Active Directory on another domain
On Windows
The Network Connections window appears.
The Connection Properties dialog appears with the General tab open.
The Internet Protocol (TCP/IP) Properties General tab appears.
The Advanced TCP/IP Settings DNS tab appears.
The TCP/IP Domain Suffix dialog appears.
Example: company.com
On UNIX
Verify that the DNS server name of the domain that Active Directory is located on is set to the correct value.
To verify that the DNS domain name, open the file /etc/resolv.conf and verify that the domain is set to the correct value.
The CA ControlMinder Endpoint Management installation instructions that are documented in the Installing CA ControlMinder Endpoint Management chapter of the Implementation Guide apply to both CA ControlMinder and CA ControlMinder. Non-CA ControlMinder users that want to install CA ControlMinder Endpoint Management should follow these instructions and use the non-Premium Server DVD.
By default, the CA ControlMinder Endpoint Management installer sets the shortcut to port number 8080. To change the default settings, you must run the CA ControlMinder Endpoint Management installer directly from the CA ControlMinder DVD and not from the ProductExplorer.
Use the following command line to define the port to use when installing CA ControlMinder Endpoint Management:
install_EM.exe -DJBOSS_PORT=<18080>
Alternatively, you can edit the CA ControlMinder Endpoint Management shortcut to point to a different port after the installation.
When defining the connection settings of the CA User Activity Reporting server, define the SSL connection settings. CA User Activity Reporting does not support non-SSL connection.
Note: For more information about integrating with CA User Activity Reporting, see the Implementation Guide.
To use view CA User Activity Reporting reports from the CA ControlMinder Enterprise Management interface, apply a special subscription update to your CA User Activity Reporting server.
To apply the subscription update
http://securityupdates.ca.com/CA-ELM/r12/OpenAPI/RSSFeed.xml
You can now view CA User Activity Reporting reports from CA ControlMinder Enterprise Management.
If you install the Report Portal on a separate computer to CA ControlMinder Enterprise Management, you must synchronize the system time of the computers. If you do not synchronize the system times, reports that CA ControlMinder Enterprise Management generates will remain in a pending or recurring status.
To uninstall any of the CA ControlMinder server components (such as Endpoint Management and Enterprise Management), you must log in as the superuser (root on UNIX or Administrator on Windows). If you are not logged in as the superuser, the uninstall fails.
Copyright © 2013 CA Technologies.
All rights reserved.
|
|