How to Configure Agents on z/OS Systems

Installation and Upgrade Guides › Web Agent Installation Guide for Apache-based servers › Install and Configure Apache-based Agents on UNIX/Linux › How to Configure Agents on z/OS Systems

How to Configure Agents on z/OS Systems

Configure the CA SiteMinder® agent after installation by performing the procedures described in the following process.

Graphic showing the Web Agent configuration process on z/OS

Gather the Information that the Configuration Program Requires on z/OS

Gather the following information about your CA SiteMinder® environment before running the configuration program for the CA SiteMinder® agent:

Register Host

Indicates whether you want to register a trusted host. This registration creates a trusted host object in the CA SiteMinder® Policy Server and an SmHost.conf file on the web server. The agent uses this information to make an initial connection to CA SiteMinder® Policy Servers when it starts. Register each agent instance as a trusted host only once.

Default:Yes

Limits: Yes, No

Admin User Name

Specifies the name of a CA SiteMinder® user with Administrative privileges that is already defined in the CA SiteMinder® Policy Server. This CA SiteMinder® user account requires privileges to register trusted hosts.

Admin Password

Specifies a password for the Admin User Name that is already defined in the CA SiteMinder® Policy Server.

Confirm Admin Password

Repeats the password entered in the Admin Password field. This value verifies the password for the Admin User Name already defined in the CA SiteMinder® Policy Server.

Enable Shared Secret Rollover

Select this check box to change the shared secret that the CA SiteMinder® Policy Server uses to encrypt communications to the Web Agents.

Trusted Host Object Name

Specifies a unique name for the trusted host you are registering. This trusted host object is stored on the CA SiteMinder® Policy Server.

Host Configuration Object

Specifies the name of a Host Configuration Object that is already defined in the CA SiteMinder® Policy Server. After the agent initially connects to a Policy Server (using the SmHost.conf file settings), subsequent connections use the settings from the Host Configuration Object.

Policy Server IP Address

Specifies the Internet Protocol address of the Policy Servers to which the agent attempts to connect upon startup. If your Policy Server is behind a firewall, specify a port number also.

If a hardware load balancer is configured to expose Policy Servers in your environment through a single Virtual IP Address (VIP), enter the VIP. For more information, see the Policy Server Administration Guide.

Example: (IPV4) 192.168.1.105

Example: (IPV4 with the port number) 192.168.1.105:44443

Example: (IPV6) 2001:DB8::/32

Example: (IPV6) [2001:DB8::/32]:44443

Name

Specifies the name of the SmHost.conf file which contains the settings the Web Agent uses to make initial connections to a CA SiteMinder® Policy Server.

Default: SmHost.conf

Location

Specifies the directory where the SmHost.conf file is stored.

Default: web_agent_home/config

Select Servers

Indicates the web server instances that the configuration program finds on the computer. Select the check boxes of the instances you want to configure. Clear the check boxes of those instances from which you want to remove CA SiteMinder® protection.

IBM HTTP Server for z/OS Path

Specifies the path of the IBM HTTP Server httpd.conf configuration file.

Default: The home directory of the account that is used to run the configuration wizard.

Agent Configuration Object Name

Specifies the name of an agent configuration object (ACO) already defined on the Policy Server.

Default: AgentObj

Advanced Authentication Scheme Dialog

Specifies the advanced authentication scheme for the web server instances you selected previously.

Set the Library Path Variable on z/OS

Set the library path variable on z/OS systems before running the agent configuration program.

export LIBPATH=web_agent_home/bin

web_agent_home

Indicates the directory where the CA SiteMinder® Agent is installed.

Default: /opt/ca/webagent

Run the CA SiteMinder® Agent Configuration Program on z/OS

After gathering the information for your agent configuration, run the agent configuration program. This program creates an agent runtime instance for the web servers running on your computer.

This configuration program is wizard or console based, depending on the option you select. Running the configuration program in the wizard or console mode once creates a properties file. Use the properties file to run unattended configurations on other z/OS systems in the future.

Note: Verify that you have executable permissions. To add executable permissions to the installation media, run the following command:

chmod +x installation_media

installation_media: Specifies the CA SiteMinder® agent installer executable.

Follow these steps:

Log in as a root user.
Exit all applications that are running.
Open a shell and navigate to the following directory:
```
web_agent_home/install_config_info
```
web_agent_home

Indicates the directory where the CA SiteMinder® Agent is installed.

Default (UNIX/Linux installations): /opt/ca/webagent
Run the configuration program in GUI or console mode by entering one of the following commands:
GUI Mode:
```
ca-wa-config.sh
```
Console Mode:
```
ca-wa-config.sh -i console
```
Follow the prompts shown in the configuration program. Provide the requested values from your agent configuration worksheet.
The agent runtime instance is created for your web servers.

(Optional) Run the Unattended or Silent Installation and Configuration Programs for CA SiteMinder® Agents on z/OS

The unattended or silent installation option can help you automate the installation and configuration process. This method saves time if you have a large CA SiteMinder® environment that uses many agents with identical settings.

For example, suppose the Agents in your environment use the same web server version, installation directory, Agent Configuration Object and Policy Servers. Use the installation wizard or console-based installation program for your first installation. Afterwards, you could create your own script to run the installation program with the .properties file the wizard or console-based installation program created.

Follow these steps:

Run the following wizards on your first web server (in the order shown):
1. The CA SiteMinder® agent Installation wizard.
2. The CA SiteMinder® agent configuration wizard.
Locate the following file on your first web server:
```
web_agent_home/install_config_info/ca-wa-installer.properties
```
Note: If the path contains spaces, surround it with quotes.

web_agent_home

Indicates the directory where the CA SiteMinder® Agent is installed.

Default (UNIX/Linux installations): /opt/ca/webagent
Perform each of the following steps on the subsequent web server:
Note: To automate this process, create your own customized script to execute these files on your systems. Use any scripting language that you want.
1. Create a temporary directory on the subsequent web server.
2. Copy the following files from the web server where you ran the wizards (from Steps 1 and 2) to the temporary directory on your subsequent web server:
  - The CA SiteMinder® Agent Installation executable file.
  - The ca-wa-installer properties file.
3. Open a Command Prompt window with root privileges in the temporary directory.
4. Run the following command:
```
java -jar installation_media -f ca-installer.properties -i silent
```
  installation_media
  
  Specifies the CA SiteMinder® Agent installer executable.
  
  The CA SiteMinder® agent is installed and configured on the web server silently.
5. (Optional) Delete the temporary directory from your web server.
Repeat Step 3 for each additional web server in your CA SiteMinder® environment that uses the configuration that the settings in your ca-wa-installer.properties file specify.