Previous Topic: Linux RequirementsNext Topic: Provisioning Server Registration


Install CA IAM CS

To host, route to, and manage Java connectors, install CA IAM CS. If you plan to install more than one CA IAM CS, see the chapter on High Availability Provisioning Installation for additional guidelines.

Important! We recommend that you disable all antivirus software before installing CA IAM CS or its SDK. If anti-virus software is enabled while installation processes are taking place problems can occur. Remember to reenable your antivirus protection after you complete installation.

Follow these steps:

  1. Log into the system as a Windows administrator or a UNIX or Linux root user.
  2. Ensure that the time settings on all computers that will host connector servers match.
  3. For Linux systems, ensure that the prerequisite packages are installed.
  4. Launch the installer.

    You can install CA IAM CS using the main installer that installs all CA IdentityMinder components, or you can navigate to the following subfolder and run the setup file.

    Provisioning\ConnectorServer
    
  5. Select the setup type (Typical or Custom). If you choose Typical, you cannot change the installation location, but you can change everything else.
  6. Enter an installation path (Custom setup type only).
  7. Configure Connector Server C++ Management:
  8. (Recommended) Register the CA IAM CS installation with a provisioning server. For more information, see Provisioning Server Registration.

    Use the following information:

    Domain

    Defines the Provisioning Server domain.

    Server Host

    Defines the Provisioning Server.

    Server Port

    Defines the port on which the Provisioning Server runs.

    Username

    Specifies the Provisioning Server administrator.

    Password

    Defines the Provisioning Server administrator password.

  9. (Optional) Register with the Cloud CA IAM CS. When you connect a cloud version of the connector server with an on-premises version, the two connector servers can communicate to manage connections to cloud and on-premises endpoints.
  10. Configure a password and the following ports:
    Message broker ports

    The message broker sends messages between instances of CA IAM CS on different computers:

    • HTTP port (default 22001)
    • HTTPS port (default 22002)
    Web ports

    You can log in to CA IAM CS though a web interface, using these ports:

    • HTTP port (default 20080)
    • HTTPS port (default 20443)
    RMI Registry port

    You can use this port to view information about the running Java process (default 1099).

  11. (Optional) Configure an HTTP Proxy. The details of this proxy can be used for the following applications:

    Note: If your organization has a direct connection to the internet, we recommend that you do not set up an HTTP proxy.

    Use the following information to set up the HTTP proxy:

    Host

    Specifies the name of the HTTP proxy server that you want to use to connect to endpoints.

    Port

    Specifies the port on which CA IAM CS can access the HTTP proxy.

    Domain

    Specifies the domain of the HTTP proxy.

    Username

    Specifies the user name you want to use to log in to the proxy server.

    Note: We recommend that you specify a user name and password if your organization's proxy server requires authentication.

    Password

    Specifies the domain password for the HTTP proxy.

  12. (Optional) Activate FIPS 140-2 Compliance Mode.
  13. Click Next.

    The installation program installs CA IAM CS, and then creates a new service. On Windows this is added to Services, and on UNIX it is a script.