Content Classification Service Integration Guide › CCS Deployment › Install the CCS Servers

Install the CCS Servers

Use the CCS installer to install a primary or secondary CCS server.

Note: When you install a CCS server, the CCS web service also gets installed and runs as the NetworkService account.

To install the Content Classification Service

1. Run setup.exe to launch the CA DLP installation wizard. Find

   Find setup.exe in the root of your CA DLP distribution image.

2. Browse to the Destination Folder screen and specify the installation folder.
3. In the Setup Type screen, click CCS Server.
4. In the CCS Server Role screen, click Primary CCS Server or Secondary CCS Server:
   • The primary CCS server runs all the components necessary for external applications to use the CCS.
   • Secondary CCS servers provide additional processing capacity to maximize CCS performance. Secondary CCS servers only host the CCS web service, a policy engine, and a CA DLP database.

     If you install a secondary CCS server, enter the name or IP address of the primary CCS server.

5. In the Database Identification screen, enter details about the CA DLP database.

   Database host server

   You can install a local or remote database. In either case, specify:

   • The host server name or IP address. Type localhost to specify a database on the local server.
   • The TCP/IP port number used by the host server.

   Administrator account details

   Specify the name and password for an existing SQL Server login.

   The CCS installer uses this login to connect to SQL Server and create the necessary database accounts required by the CCS.

6. (Primary CSS server installations only) In the Administrator Account screen, enter account details (name and password) for the Primary Administrator.

   The Primary Administrator is a CA DLP user account with full administrative privileges.

7. In the Data Folder screen, specify the location of the \Data folder.

   This folder contains log files, configuration data and temporary files. The default location is:

   C:\ProgramData\CA\CA DLP\data\log
   

   If you are installing the CCS Preclassification Agent, the \Data folder also contains the scanning job definition files.

8. In the Classification Cache Settings screen, specify the cache host server and the connection method.

   Use this CA Directory server for the classification cache

   Click this check box to enable the classification cache.

   Server

   Enter the name or IP address of the server hosting the classification cache.

   This server must match the server that you specified when creating the classification cache.

   Port

   Enter the port number that the classification cache DSA listens on.

   This port must match the port that you specified when creating the classification cache. The default port is 19389.

   Connect anonymously

   Click this option to set up anonymous connections to the classification cache.

   When the CCS web service connects anonymously to the cache, it does not need to provide any account details. Anonymous connections are simple to set up. However, they are not as secure as connections that use a named user account.

   Connect with these credentials

   Click this option to connect to force the CCS Web Service to connect to the classification cache as a predefined user.

   By default, the CCS connects to the cache as ccsUser. This user account is created in CA Directory when you create the classification cache.

   Important! If you choose this connection method, change the default password for the ccsUser account! This process is described in Change the Default Password for ccsUser.

   Use SSL

   Select this check box to configure a secure connection to the classification cache based on SSL.

   If you use SSL, the certificate store on your CCS server must contain a certificate from your trusted root certificate authority.

9. In the final wizard screen, click Install to start the file transfer.
10. Verify that the following services are running on the primary CCS server:
    • CA DLP Classification Cache Maintenance Service
    • CA DLP Infrastructure
    • CA DLP Policy Engine Server
11. Verify that the application pools are listed in IIS Manager:
    • CADLPCCS (associated with the CCS web service)
    • CADLP (associated with the CCS Policy Editor)
    • iConsoleWebService (associated with the CCS Policy Editor)
12. CA DLP Policy Engine ServerAfter installing the primary CCS server, you must:
    • Confirm that the Cache Maintenance Service has started.
    • Securely store the user credentials used by the CCS web service.

    See the following references for details.

More information:

Storing User Credentials Securely in Web.Config

Network Load Balancing