Web Services Security Guides › CA SiteMinder® Web Services Security Agent Guide for IIS Web Servers › Preparation

Preparation

This section contains the following topics:

Only IIS Web Server Procedures in this Guide

Hardware Requirements for CA SiteMinder® Agents

Multiple Agent for IIS Directory Structures According to Operating Environment

How to Prepare for a WSS Agent for IIS Installation on Your Web Server

Only IIS Web Server Procedures in this Guide

This guide only contains procedures for installing or configuring the CA SiteMinder® Agent for IIS on the Windows operating environment.

To install or configure a CA SiteMinder® agent on any other type of web server or operating environment, see one of the following guides:

• Web Agent Installation Guide for Apache-based servers.
• Web Agent Installation Guide for Domino.
• Web Agent Installation Guide for Oracle iPlanet.

Hardware Requirements for CA SiteMinder® Agents

Computers hosting CA SiteMinder® agents require the following hardware:

Windows operating environment requirements

CA SiteMinder® agents operating on Windows operating environments require the following hardware:

• CPU: x86 or x64
• Memory: 2-GB system RAM.
• Available disk space:
  • 2-GB free disk space in the installation location.
  • .5-GB free disk space in the temporary location.

Multiple Agent for IIS Directory Structures According to Operating Environment

The directory structure added to your IIS web server for your Agent files varies according to the operating environment of your IIS web server. The following directory structures exist:

• CA SiteMinder® Web Agents and SiteMinder WSS Agents for IIS use the directory structure shown in the following illustration:

  

• CA SiteMinder® Agents for IIS installed on 64-bit operating environments use the directory structure shown in the following illustration:

  

More information:

Run the Installation Wizard to Upgrade your Agent for IIS

How to Prepare for a WSS Agent for IIS Installation on Your Web Server

To prepare for an SiteMinder WSS Agent for IIS installation on a Windows operating environment, use the following process:

1. Set the JRE in the Path variable.
2. Verify that you have an account with Administrative privileges for the computer on which you want to install the agent.
3. Verify that the IIS role, the related role services and features are installed on your Windows operating environment.
4. Locate the CA SiteMinder® Platform Support Matrix. Confirm that your IIS web server meets the requirements for the agent version you want to install.
5. Verify that the Windows operating environment for your IIS web server has the proper service packs and updates installed.
6. For 64-bit Windows operating environments, verify that the Microsoft C++ redistributable package is installed.
7. Confirm that your Policy Server has the prerequisites for an agent Installation.
8. Review the CA SiteMinder® Web Services Security Release Notes for known issues.

Set the JRE in the Path Variable

Set the Java Runtime Environment (JRE) in the Windows path variable.

Follow these steps:

1. Open the Windows Control Panel.
2. Double-click System.
3. Add the location of the JRE to the Path system variable in the Environment Variables dialog.

Verify that you have an Account with Administrative Privileges on the Windows Computer Hosting your IIS Web Server

To install or configure a SiteMinder WSS Agent on an IIS web server, you need an account with Administrator privileges.

On Windows 2008 systems, do one of the following actions to install or configure a SiteMinder WSS Agent:

• If you are using Windows Explorer, right-click the .exe file. Then select Run as Administrator.
• If you are using a command line, open a new console window with administrative privileges. Then run the command that you want.

Note: For more information about installing or configuring SiteMinder WSS Agents on Windows 2008 systems, see the CA SiteMinder® Web Services Security Release Notes.

Verify that the IIS Role, and the Related Role Services are Installed

The IIS (web server) role is not enabled by default. Verify that the IIS role is installed and enabled on each Windows system, before installing the Agent for IIS.

Follow these steps:

1. Click Start, All Programs, Administrative Tools, Server Manager.

   The Server Manager appears.

2. Verify that IIS appears in the Roles list.
3. If the Web Server (IIS) role is not shown, add it using the Add Roles wizard. If you decide to use the ISAPI-filter functions of the Agent for IIS, add the following role services too:
   • ASP.NET
   • CGI
   • ISAPI Extensions
   • ISAPI Filters
   • IIS Management Console
   • Windows Authentication (for the CA SiteMinder® Windows Authentication Scheme)

Locate the Platform Support Matrix

Use the Platform Support Matrix to verify that the operating environment and other required third-party components are supported.

Follow these steps:

1. Log in to the CA Support site.
2. Locate the Technical Support section.
3. Enter CA SiteMinder® in the Product Finder field.

   The CA SiteMinder® product page appears.

4. Click Product Status, CA SiteMinder® Family of Products Platform Support Matrices.

Note: You can download the latest JDK and JRE versions at the Oracle Developer Network.

Verify that the Windows Operating Environment for your IIS Web Server has the Proper Service Packs and Updates Installed

We recommend using Windows Update to verify that your Windows operating environment contains the latest Service Packs and updates, before installing a CA SiteMinder® Agent for IIS.

Verify that the Microsoft Visual C++ 2005 Redistributable Package (x64) is Installed

Before installing an 12.52 CA SiteMinder® Agent on a Windows 64-bit platform, download and install the Microsoft Visual C++ 2005 Redistributable Package (x64). Go to the Microsoft downloads page, and then search for "Microsoft Visual C++ 2005 Redistributable Package (x64)."

Review the Policy Server Prerequisites for Agent for IIS Installations

Your CA SiteMinder® Agent for IIS needs the following information about the Policy Servers to which it connects:

• The IP addresses of the Policy Servers
• Certain CA SiteMinder® object names in the Policy Server

The Administrative UI creates these CA SiteMinder® objects in the Policy Server. We recommend creating them before installing your agent to avoid going between your web server and the Administrative UI interfaces later.

CA SiteMinder® Agents for IIS require the names of the following CA SiteMinder® objects stored the Policy Server:

Host Configuration Object

Contains the settings that the agent uses for subsequent connections to a Policy Server following the initial connection that the agent made.

Admin User Name

Identifies the name of a CA SiteMinder® user with the following privileges:

• Administrative privileges
• Trusted host registration privileges

Admin Password

Identifies a password that is associated with the Admin User Name in the CA SiteMinder® Policy Server.

AgentName

Defines the identity of the Web Agent. This identity establishes a mapping between the name and the IP address of each web server instance hosting an Agent.

When no matching value exists, the agent uses the value of from the DefaultAgentName parameter instead.

Note: This parameter can have more than one value. Use the multivalue option when setting this parameter in an Agent Configuration Object. For local configuration files, add the parameter name and a value to separate lines in the file.

Default: No default

Limit: Multiple values are allowed, but each AgentName parameter has a 4,000 character limit. Create additional AgentName parameters as needed by adding a character to the parameter name. For example, AgentName, AgentName1, AgentName2.

Limits: Must contain 7-bit ASCII characters in the range of 32-127, and include one or more printable characters. Cannot contain the ampersand (&) and asterisk (*) characters. Not case-sensitive. For example, the names MyAgent and myagent are treated the same.

Example: myagent1,192.168.0.0 (IPV4)

Example: myagent2, 2001:DB8::/32 (IPV6)

Example: myagent, www.example.com

Review the CA SiteMinder® Web Services Security Release Notes for Known Issues

The most-recent versions of the CA SiteMinder® Web Services Security Release notes are available from the CA Support website. We recommend reviewing them before installing or configuring a SiteMinder WSS Agent.

Follow these steps:

1. Open a web browser and navigate to the Technical Support website.
2. Click Enterprise/Small and Medium Business.

   The Support for Businesses and Partners page appears.

3. Under the Get Support tab, click Product Documentation.

   The documentation page appears.

4. Click the field under Select a Bookshelf.
5. Type siteminder.

   A list of CA SiteMinder® bookshelves appears.

6. Click the bookshelf that you want from the list, and then click Go.

   The bookshelf opens (in a new window or tab, depending on your browser settings).

7. Click Release Notes.

   A list of release notes appears.

8. Click one of the following links to display the Release Notes in format you want:
   • View HTML
   • Download PDF

   Note: You need the Adobe Reader software to view PDF documents. Click the Download Adobe Reader link in the bookshelf.