Previous Topic: Create a Corresponding CA Data Protection UserNext Topic: Configure Policy Engines

Platform Deployment Guide › Policy Engines › Install Policy Engines

Install Policy Engines

You install policy engines using the CA Data Protection server installation wizard.

To install a policy engine

  1. Find setup.exe in the root of your CA Data Protection distribution image. Run setup.exe to launch the CA Data Protection installation wizard.

    The Installation Type screen opens.

  2. Click Advanced Installation.
  3. In the Advanced Install Options screen, choose CA Data Protection Platform and then click Install.

    This launches the CA Data Protection server installation wizard in a separate window.

  4. In the server installation wizard, navigate to the Customer Setup screen.
  5. In the Custom Setup screen, choose Policy Engine and, optionally, the Socket API.

    The Socket API is automatically set up to listen on port number 8538. Using socket connections enables you to call the External Agent API from a remote location, including from a non‑Windows system. For example the CA Data Protection Network Boundary Agent uses the Socket API to analyze traffic leaving or entering the corporate network from the internet.

  6. In the Server Type screen, choose Gateway.
  7. In the subsequent screens, specify the parent server (typically the CMS), the location of the \Data folder, plus details about the local CA Data Protection database.
  8. In the Service Accounts screen, specify the logon accounts used by the local CA Data Protection infrastructure service and the policy engine service.

    The policy engine service must run as the PE domain user. Click the Browse button for the Policy Engine service, then enter the domain, name and password of the PE domain user .

    Note: The PE domain user must belong to the local Administrators group.

  9. In the final wizard screen, click Install to start the file transfer.
  10. When the installation is complete, the CA Data Protection Policy Engine service starts automatically.

    Now you must manually configure the local machine policy—see the following section.

More information:

Specify a PE Domain User