Install the Domain Orchestrator › Prerequisites to Installing the Domain Orchestrator › CA EEM Prerequisites › Set Up CA EEM

Set Up CA EEM

CA Process Automation requires CA EEM to manage authorization to the CA Process Automation UI. A suitable CA EEM instance must be available prior to installing or upgrading CA Process Automation. CA Process Automation can use any version of CA EEM from 8.4 SP04 CR10 through 12.51, but certain CA EEM features that CA Process Automation can use are not supported in all CA EEM versions. For example:

• Support of 2048- and 4096-bit security certificates requires CA EEM Release 12.5 or later (English) and Release 12.51 (other supported languages).
• Support of multiple Microsoft Active Directory Domains requires CA EEM version 12.0 or later.
• If your site has an existing CA EEM instance that is not at the required version, consult with your site administrator to see if the CA EEM instance can be upgraded to the desired level. Version support limitations for other products using the CA EEM instance can preclude upgrading the instance.

New CA EEM Installation

A new CA EEM installation is required if no CA EEM instance at the desired version is available.

Follow these steps:

1. Download installers for CA EEM 12.51 from the CA Process Automation installation media location.
2. Follow the instructions provided in the CA EEM documentation when deploying or upgrading your CA EEM instance.

CA EEM Configuration Considerations

• When you configure CA EEM to use the internal user store or an external user store, consider the following implications for CA Process Automation:
  • If you select the default internal user store, you create user accounts for CA Process Automation users. User credentials defined in CA EEM are used for authentication at login.
  • If you point to an external user store, then user accounts from that store are loaded into CA EEM as global users. User credentials defined in the referenced LDAP-based directory are used for authentication.

    See Reference Global Users and Global Groups from Microsoft Active Directory. (CA EEM 8.4)

    See Reference Global Users from Multiple Active Directories. (CA EEM 12.51)

  • If your CA EEM is configured to use multiple active directories, verify that the ID of the person who who installs or upgrades CA Process Automation is included in each of the referenced active directories.

    Important! If absent, add your administrator ID to each referenced Active Directory before installing or upgrading CA Process Automation. You use this ID to test connectivity between CA Process Automation and CA EEM during installation or upgrade.

• When you configure CA EEM to use FIPS mode, CA Process Automation must be configured to use FIPS-compliant algorithms for communication between CA Process Automation and CA EEM. During CA Process Automation installation, you select Use FIPS-Compliant Certificate to use FIPS-compliant algorithms. CA Process Automation and CA EEM encrypt the data that is transported between them using a FIPS-compliant algorithm.