This section contains the following topics:
System Locale Must Match the Language of Installation and Configuration Directories (169863)
Java Virtual Machine Installation Error on Solaris can be Ignored (149886)
Forms Credential Collector (FCC) Does Not Allow Windows Authentication By Default
Windows Server 2008 System Considerations
Console Mode not Supported on Windows Operating Environments (CQ143654, 152120)
SiteMinder Web Agent for z/OS Limitations
To install and configure a CA SiteMinder® component to a non-English directory, set the system to the same locale as the directory. Also, make sure that you installed the required language packages so the system can display and users can type localized characters in the installer screens.
For the details on how to set locale and required language packages, refer to respective operating system documents.
To type local characters in international language versions of CA SiteMinder® installation and configuration programs in GUI mode, install fonts for that language on your operating environment.
For the RedHat Linux operating environment, download the packages shown in this document.
Symptom:
You are doing a console mode installation of a CA SiteMinder® product on a Solaris platform. The following error message displays: "Unable to install the Java Virtual Machine included with this installer."
Solution:
Ignore this error message. The error is a third-party issue and it has no functional impact.
The FCC can authenticate users against any authentication scheme. However, the FCC no longer authenticates against Windows authentication schemes by default. This behavior prevents an attacker from exploiting the FCC to generate a CA SiteMinder® session for any valid Windows user in certain configurations.
If your environment requires the FCC to authenticate against the Windows authentication scheme, you can enable it by specifying the EnableFCCWindowsAuth agent configuration parameter. However, before you enable FCC support for Windows authentication, review the risks of doing so and be aware of configurations that expose the vulnerability.
For Windows Server 2008, the User Account Control feature helps prevent unauthorized changes to your system. When the User Account Control feature is enabled on the Windows Server 2008 operating environment, prerequisite steps are required before doing any of the following tasks with a CA SiteMinder® component:
Note: For more information about which CA SiteMinder® components support Windows Server 2008, see the CA SiteMinder® Platform Support matrix.
To run CA SiteMinder® installation or configuration wizards on a Windows Server 2008 system
The User Account Control dialog appears and prompts you for permission.
The wizard starts.
To access the CA SiteMinder® Policy Server Management Console on a Windows Server 2008 system
The User Account Control dialog appears and prompts you for permission.
The Policy Server Management Console opens.
To run CA SiteMinder® command–line tools or utilities on a Windows Server 2008 system
Cmd
The User Account Control dialog appears and prompts you for permission.
A command window with elevated privileges appears. The title bar text begins with Administrator:
Valid on Agents for IIS
Symptom:
I want to configure a CA SiteMinder® Agent for IIS using console mode.
Solution:
Console mode is not supported for configuring Agents for IIS.
The CA SiteMinder® Web Agent on the z/OS operating system has the following limitations:
|
Copyright © 2013 CA.
All rights reserved.
|
|