Previous Topic: Pre-Installation StepsNext Topic: Post-Installation Configuration


Installing and Configuring CA SSO Agent for Oracle PeopleSoft

This section contains the following topics:

Gather Information for the Installation Wizard

Run the Installation Wizard on Windows

Run the Installation Wizard on UNIX

Gather Information for the Configuration Wizard

Run the Configuration Wizard

Gather Information for the Installation Wizard

Important! Install this product on the computer that has the PeopleSoft Application Server installed.

The installation wizard requires the following information:

Install Folder

Specifies the directory where the product files are installed.

Default:

Windows:

C:\Program Files\CA\peoplesoft

UNIX:

<home-dir>/CA/peoplesoft
PeopleSoft Application Server Home Directory

Specifies the PeopleSoft Application Server home directory.

Default:

Windows:

drive:\peoplesoft_application_server_folder\

UNIX:

/peoplesoft_application_server_folder/

Run the Installation Wizard on Windows

The installation wizard installs the agent on your PeopleSoft server.

Follow these steps:

  1. Double-click the following file:
    ca-erp-peoplesoft-<version>-<operating_environmentprocessor_type>.exe
    

    Note: To install using console, open a console window and then run the previous command with the -i console option.

    Note: To install unattended, open a console window and then run the previous command with the “-i silent –f <installer_properties_file>” options. The installer properties file (ca-peoplesoft-installer.properties) is located in the install_config_info directory of the product.

    Important! To install unattended, you must install the product using wizard or console once. The installer properties file is required for unattended installation. Before you perform the unattended installation, verify that the installer properties file is updated based on the host where you install the product.

  2. Follow the prompts in the wizard.
  3. (Optional) Run the configuration wizard when the installation wizard finishes.

More information:

Gather Information for the Configuration Wizard

Run the Installation Wizard on UNIX

The installation wizard installs the product on your PeopleSoft server.

Follow these steps:

  1. Execute the following file:
    ca-erp-peoplesoft-<version>-<operating_environmentprocessor_type>.bin
    

    Note: To install using console, open a console window and then run the previous command with the -i console option.

    Note: To install unattended, open a console window and then run the previous command with the “-i silent –f <installer_properties_file>” options. The installer properties file (ca-peoplesoft-installer.properties) is located in the install_config_info directory of the product.

    Important! To install unattended, you must install the product using wizard or console once. The installer properties file is required for unattended installation. Before you perform the unattended installation, verify that the installer properties file is updated based on the host where you install the product.

  2. Follow the prompts to complete the installation.

Gather Information for the Configuration Wizard

Before you run the PeopleSoft agent configuration wizard, gather the following information:

Gather Configuration Information for Host Registration

To establish a connection between CA SSO Agent for Oracle PeopleSoft host and the Policy Server, you need to register the host with the Policy Server. After registration is complete, the registration tool creates the SmHost.conf file. After this file is created successfully, the client computer becomes a trusted host.

Admin User Name

Specifies the name of a Policy Server administrator allowed to register the host with the Policy Server. This administrator should already be defined at the Policy Server and have the permission to register trusted hosts.

Admin Password

Specifies the Policy Server administrator account password.

Enable Shared Secret Rollover

Specifies that the Policy Server generates a new shared secret periodically, which is used to encrypt the communication to this product.

Trusted Host Name

Specifies a unique name that represents the trusted host to the Policy Server. This name does not have to be the same as the physical client system that you are registering; it can be any unique name, for example, mytrustedhost.

Note: This name must be unique among trusted hosts and not match the trusted host name of any other Agent.

Host Configuration Object

The name of the Host Configuration Object in the Policy Server that defines the connection between the trusted host and the Policy Server. For example, to use the default, enter DefaultHostSettings. In most cases, you will have created your own Host Configuration Object.

Note: This value must match the Host Configuration Object entry preconfigured on the Policy Server.

Policy Server IP Address

The IP address, or host name, and authentication port of the Policy Server where you are registering the host. The default port is 44442. If you do not provide a port, the default is used.

You can specify a non-default port number, but if your Policy Server is configured to use a non-default port and you omit it when you register a trusted host, the following error is displayed:

Registration Failed (bad ipAddress[:port] or unable to connect to Authentication server (-1)

Note also that if you specify a non-default port, that port is used for the Policy Server’s authentication, authorization, and accounting ports; however, the unified server responds to any Agent request on any port. The entry in the SmHost.conf file will look like:

policyserver="ip_address,5555,5555,5555"

FIPS Encryption Mode

Determines whether the Agent communicates with the Policy Server using certified Federal Information Processing Standard (FIPS) 140-2 compliant cryptographic libraries.

FIPS Compatibility Mode (Default)

Specifies non-FIPS mode, which lets the Policy Server and the Agents read and write information using the existing CA SSO encryption algorithms. If your organization does not require the use of FIPS-compliant algorithms, the Policy Server and the Agents can operate in non-FIPS mode without further configuration.

FIPS Only Mode

Specifies full-FIPS mode, which requires that the Policy Server and Web Agents read and write information using only FIPS 140-2 algorithms.

Important! A CA SSO installation that is running in Full FIPS mode cannot interoperate with, or be backward compatible to, earlier versions of CA SSO, including all agents, custom software using older versions of the Agent API, and custom software using PM APIs or any other API that the Policy Server exposes. You must re-link all such software with the corresponding versions of the respective SDKs to achieve the required support for Full FIPS mode.

Gather Configuration Information for Resource URI & Action

Specify the resource & action used in CA SSO policies.

Resource

Specifies a resource protected with an authentication scheme.

Example:
/psp/ps/?cmd=start
Action

Specify the action configured for the above resource in CA SSO policies.

Values: GET, POST

Gather Configuration Information for Agent Name

Specify the agent object name used for protecting the above resource in CA SSO policies.

The agent object need not have 4.x capability because this product uses trusted host communication instead of 4.x communication.

Gather Configuration Information for Log Configuration

Specify the Agent log file path and log level for configuring the agent logging.

0

Disables logging. Log files are not kept.

1

Records errors in initialization and communication only. These messages appear with ERR in the log file.

Important! The highest logging level we recommend for production environments is 1. Higher levels quickly produce large log files.

2

Records informational errors, possibly suggesting the cause of the problem. The specific cause is not always shown. These messages appear with INF in the log file.

3

Records debugging information. These messages appear with DBG in the log file.

4

Records extra information designed to locate problems in the library code. Use this setting only if directed to by CA Technical Support. These messages appear with XXX in the log file.

The configured settings are saved in the peoplecode.txt file.

Run the Configuration Wizard

Use the configuration wizard to configure the product.

Follow these steps:

  1. Run the appropriate file for your operating environment:

    In Windows:

    <agent_install_dir>\install_config_info\ca-peoplesoft-config.exe
    

    In UNIX:

    <agent_install_dir>/install_config_info/ca-peoplesoft-config.bin
    

    Note: To configure using console, open a console window and then run the previous command with the -i console option.

    Note: To configure unattended, open a console window and then run the previous command with the “-i silent –f <configuration_properties_file>” options. The configuration properties file (ca-peoplesoft-configuration.properties) is located in the install_config_info directory of the product.

    Important! To configure unattended, you must configure the product using wizard or console once. The configuration properties file is required for unattended configuration. Before you perform the unattended configuration, verify that the configuration properties file is updated based on the host where you configure the product.

  2. Provide the required information that was gathered before to complete the wizard.