Installation and Upgrade Guides › Web Agent Installation Guide for IIS › Install a Web Agent on a Windows System › Web Agent for IIS Installation Roadmap

Web Agent for IIS Installation Roadmap

For SiteMinder r12.0 SP3, the Web Agent for IIS offers several installation options. These options depend on the version of IIS that you use, and the Integrated Pipeline mode of your web applications.

Use the following illustration to select the proper Web Agent for IIS installer for your situation:

IIS 7.x Web Server Shared Configuration and the SiteMinder Agent for IIS

IIS 7.x web servers support shared configurations that streamline the configuration process for an IIS a server farm.

Starting with SiteMinder r12.0 SP3, the Agent for IIS can protect resources on IIS server farms that use the shared configuration feature of IIS 7.x.

Note: This feature works only with the SiteMinder r12.0 SP3 Agent for IIS 7. Older versions of the SiteMinder Web Agent do not support this feature.

IIS 7.x uses network shares to propagate the configuration information across the server farm. The SiteMinder r12.0 SP3 Agent for IIS, however, cannot operate on network shares. Using a SiteMinder r12.0 SP3 Agent for IIS on an IIS server farm involves several separate procedures.

For example, suppose you have three IIS 7.x web servers, with all of them using a shared configuration. Web server number one is your primary web server, which contains the configuration information for the farm. Web servers 2 and 3 are nodes that connect to the network share on web server one to read the configuration information.

The entire installation and configuration process for using the SiteMinder Agent for IIS on all three IIS 7.x web servers is described in the following illustration:

How Web Agent Logs and Trace Logs Work with IIS 7.x Web Server Shared Configuration

For SiteMinder Agents for IIS running on an IIS server farm, create duplicate log and trace file directories on each node if all the following conditions are true:

• Your Agent for IIS log and trace log directories are specified in an Agent Configuration Object on the Policy Server (not in a local configuration file).
• Any of the SiteMinder Agents for IIS in your IIS 7.x web servers in the server farm share the same Agent Configuration object
• Your Agent for IIS log file and trace log directories specified in the shared Agent Configuration Object are different than the following default settings:
  • web_agent_home\win32\log (for Windows IIS 7.x 32-bit)
  • web_agent_home\win64\log (Windows IIS 7.x 64-bit)

If all of the previous conditions exist in your server farm, use the following process to enable your Web Agent logs and trace logs:

1. Create a custom log directory on the IIS 7.x web server that contains the shared configuration for the farm.
2. Grant the application pool identities associated with your protected resources the following permissions to the custom directory on the previous IIS 7.x web server.
   • Read
   • Write
3. Create the same custom log directory on a IIS 7.x web server node in the farm.
4. Grant the application pool identities associated with your protected resources the following permissions to the custom directory on the a IIS 7.x web server node in the farm.
   • Read
   • Write
5. Repeat steps 3 and 4 on all other nodes in your server farm.

For example, suppose you have three IIS 7.x web servers, with all of them using a shared configuration. Web server number one is your primary web server, which contains the configuration information for the farm. Web servers 2 and 3 are nodes that connect to the network share on web server one to read the configuration information.

The entire process for configuring these logs is described in the following illustration:

Gather the Information for the Agent Installation Program for the Windows Operating Environment

Before running the installation program for the SiteMinder Agent for IIS on the Windows operating environment, gather the following information about your web server:

Installation Directory

Specifies the location of the SiteMinder agent binary files on your web server. The web_agent_home variable is set to this location.

Limit: SiteMinder requires the name "webagent" for the bottom directory in the path.

Shortcut Location

Specifies the location in your Start menu for the shortcut for the Web Agent Configuration wizard.