New Features › CA Process Automation Release 04.2.00 › CA EEM Release 12.51 Support

CA EEM Release 12.51 Support

Summary

If you plan to upgrade CA EEM to Release 12.x, do this upgrade before upgrading or installing CA Process Automation. Then all the new CA EEM features are immediately available. If you upgrade CA EEM after installing CA Process Automation, you can easily reinstall or configure the existing installation to take advantage of the new CA EEM features.

• CA EEM SDK r12 support.
  • Formerly, CA Process Automation supported CA EEM Release 8.4 and used the CA EEM SDK major version 8. Certificates used 1024-bit keys.
  • Now, if you are using CA EEM Release 12.x, the CA Process Automation installation processes loads CA EEM SDK major version 12 when you register the application with CA EEM. If you do not register, the CA Process Automation installation process provides prompts that help you choose the SDK version to load. The certificates that CA Process Automation uses to connect to the CA EEM server are generated with the same key lengths as CA EEM certificates (1024, 2048, or 4096).
• CA EEM multiple Microsoft Active Directory domains support.
  • Formerly, you could reference users from a single Microsoft Active Directory domain when you configured CA EEM to use an external user store.
  • Now, if you are using CA EEM Release 12.51, you can reference users from multiple AD domains.

Details for CA EEM SDK 12 Support

Interactive installation process selects, or prompts the user to select, the appropriate CA EEM SDK

CA Process Automation uses a CA EEM release-specific SDK to communicate with CA EEM.

When you install CA Process Automation Release 4.2 or upgrade from a previous release, you can register the CA Process Automation application with CA EEM (recommended) or you can bypass registration (not recommended).

• If you register the application, CA Process Automation determines the release of your CA EEM and chooses the appropriate CA EEM SDK version.
• If you do not register the application, CA Process Automation presents a prompt with guidelines on how to select the SDK version based on the CA EEM version.

Silent installation process includes new CA EEM SDK value

• New variable in response.varfile: eiamSDKLevel
• New Installation and Upgrade
  • No EEM application registration

    Uses value in eiamSDKLevel to choose the EEM SDK

    If eiamSDKLevel value is not set to 8 or 12 then the installation fails with the following log message:

    "Please set the variable 'eiamSDKLevel' in the response.varfile to either 8 or 12".

  • EEM application registration

    The silent installation process automatically retrieves the CA EEM server version and chooses the EEM SDK to use in CA Process Automation.

CA Process Automation supports three certificate lengths (1024, 2048, and 4096) for CA EEM SDK major version 12

Communication between CA Process Automation and CA EEM is secured with CA EEM certificates and with CA Process Automation certificates. CA Process Automation certificates must have the same key length as CA EEM certificates. During registration, the CA Process Automation certificates are generated with key lengths that match CA EEM certificates. By default, CA EEM certificates have 1024-bit keys.

If, after installation, new CA EEM certificates are generated with longer key lengths, you must regenerate CA Process Automation certificates. For details, see "Example Scenario: Configure the Existing Installation to Regenerate CA Process Automation Certificates" in the Installation Guide.

Details for Multiple Microsoft Active Directory Domains Support

The Domain Orchestrator installation process lets you connect to your active CA EEM server. CA Process Automation Release 4.2 supports CA EEM Release 8.4 through CA EEM Release 12.51. When using CA EEM Release 12.51 and you reference an external user store, you can add multiple Microsoft Active Directories.

New Installation

The CA Process Automation installation process prompts you to configure how to store the global information for CA Process Automation users. You can store global users in the internal data store or you can reference users from one or more external LDAP directories. To reference users, you select one of the following configuration types:

• Basic LDAP Directory
• Multiple Microsoft Active Directory Domains
• Microsoft Active Directory Forest

If you reference multiple ADs or an AD forest, CA Process Automation users must log in with their principal name (domain-name\user-name) and password. You can configure one of the domains as the Default AD Domain; users in this AD domain can log in with just their user name and password.

Microsoft NTLM pass-through authentication enables CA Process Automation users to login the CA Process Automation without entering credentials in the login dialog. To provide users with direct access to CA Process Automation, configure Microsoft NTLM.

Note: The CA EEM administrator grants CA Process Automation permissions to selected AD users. The administrator enters the user name as query criteria in CA EEM. When the user record is returned by AD, the administrator associates a CA Process Automation default group (for example, Designers) with that record.

Upgrade Installation

If your CA EEM Release 8.4 used an external AD directory and you upgrade to CA EEM Release 12.51, you can select Basic LDAP Directory as your option for "reference from an external LDAP directory." In this case, your application group assignments, custom policies, and ownership of Library automation objects are retained.

If your CA EEM Release 8.4 used an external AD directory and you upgrade to CA EEM Release 12.51, you can select Multiple Microsoft Active Directory Domain or a Microsoft Active Directory Forest as your option for "reference from an external LDAP directory." In this case, application group assignments, custom policies, and ownership of Library automation objects are not retained.

Important! If you previously referenced users from an Active Directory and you now want to reference users from multiple ADs that include this original AD, take the following actions to reinstate user permissions and object ownership:

• CA EEM Requirement: You must reassign application groups to existing users. If you created custom policies or custom groups, you must reassign the users with their principal names.
• CA Process Automation Library Requirement: Users must set the ownership of their objects. Ownership is then displayed with the principal name of the owner.

During the upgrade installation, you identify the AD to use as the default domain. You can identify the Active Directory to which the current CA Process Automation users belong, but that is not a requirement. Users belonging to the default domain can log in to CA Process Automation with an unqualified user name. Users belonging to other AD domains must specify their principal name at login.

Note: For the details, see the Installation Guide and the Content Administrator Guide.