Release Notes › Web Agent Release Notes › Installation and Upgrade Considerations

Installation and Upgrade Considerations

System Locale Must Match the Language of Installation and Configuration Directories

To install and configure a CA SiteMinder® component to a non-English directory, set the system to the same locale as the directory. Also, make sure that you installed the required language packages so the system can display and users can type localized characters in the installer screens.

For the details on how to set locale and required language packages, refer to respective operating system documents.

Local Fonts and Packages Required to Support International Language Versions of CA SiteMinder® Installers

To type local characters in international language versions of CA SiteMinder® installation and configuration programs in GUI mode, install fonts for that language on your operating environment.

For the RedHat Linux operating environment, download the packages shown in this document.

Java Virtual Machine Installation Error on Solaris can be Ignored (149886)

Symptom:

You are doing a console mode installation of a CA SiteMinder® product on a Solaris platform. The following error message displays: "Unable to install the Java Virtual Machine included with this installer."

Solution:

Ignore this error message. The error is a third-party issue and it has no functional impact.

Forms Credential Collector (FCC) Does Not Allow Windows Authentication By Default

The FCC can authenticate users against any authentication scheme. However, the FCC no longer authenticates against Windows authentication schemes by default. This behavior prevents an attacker from exploiting the FCC to generate a CA SiteMinder® session for any valid Windows user in certain configurations.

If your environment requires the FCC to authenticate against the Windows authentication scheme, you can enable it by specifying the EnableFCCWindowsAuth agent configuration parameter. However, before you enable FCC support for Windows authentication, review the risks of doing so and be aware of configurations that expose the vulnerability.

Windows Server 2008 System Considerations

For Windows Server 2008, the User Account Control feature helps prevent unauthorized changes to your system. When the User Account Control feature is enabled on the Windows Server 2008 operating environment, prerequisite steps are required before doing any of the following tasks with a CA SiteMinder® component:

• Installation
• Configuration
• Administration
• Upgrade

Note: For more information about which CA SiteMinder® components support Windows Server 2008, see the CA SiteMinder® Platform Support matrix.

To run CA SiteMinder® installation or configuration wizards on a Windows Server 2008 system

1. Right–click the executable and select Run as administrator.

   The User Account Control dialog appears and prompts you for permission.

2. Click Allow.

   The wizard starts.

To access the CA SiteMinder® Policy Server Management Console on a Windows Server 2008 system

1. Right–click the shortcut and select Run as administrator.

   The User Account Control dialog appears and prompts you for permission.

2. Click Allow.

   The Policy Server Management Console opens.

To run CA SiteMinder® command–line tools or utilities on a Windows Server 2008 system

1. Open your Control Panel.
2. Verify that your task bar and Start Menu Properties are set to Start menu and not Classic Start menu.
3. Click Start and type the following in the Start Search field:

   Cmd
   

4. Press Ctrl+Shift+Enter.

   The User Account Control dialog appears and prompts you for permission.

5. Click Continue.

   A command window with elevated privileges appears. The title bar text begins with Administrator:

6. Run the CA SiteMinder® command.

More information:

Contact CA Technologies

Console Mode not Supported on Windows Operating Environments (CQ143654, 152120)

Valid on Agents for IIS

Symptom:

I want to configure a CA SiteMinder® Agent for IIS using console mode.

Solution:

Console mode is not supported for configuring Agents for IIS.

SiteMinder Web Agent for z/OS Limitations

The CA SiteMinder® Web Agent on the z/OS operating system has the following limitations:

• Advanced Password Services (APS) is not supported.
• Only FIPS-compatibility mode is supported.