Previous Topic: How to Configure a SiteMinder Web Agent or Agent for IIS SilentlyNext Topic: Manual Web Agent Configuration Roadmap


Configure a SiteMinder Web Agent or Agent for IIS Silently

If your IIS web server already has a Web Agent or Agent for IIS installed, you can change any of the configuration settings the Agent uses. The SiteMinder Web Agent Configuration program supports a silent or unattended mode that requires no interaction from the end user.

This section is meant for configuring a SiteMinder Agent that has already been installed on a web server. Simultaneous Installation and configuration of a SiteMinder Agent is also supported.

To configure a SiteMinder Web Agent or Agent for IIS silently

  1. Run the following wizards on your first IIS web server (in the order shown):
  2. Locate the following file on your first web server:
    web_agent_home\install_config_info\ca-wa-installer.properties
    

    Note: In this context, the first server refers to the IIS web server in a farm where the shared configuration information is stored. A node refers to any other IIS web servers in the farm which read the shared configuration from the first server.

    web_agent_home

    Indicates the directory where the SiteMinder Agent is installed on your web server.

    Default (Windows 32-bit installations of SiteMinder IIS Web Agents only): C:\Program Files\CA\webagent

    Default (Windows 64-bit installations [SiteMinder Web Agents for IIS only]): C:\Program Files\CA\webagent\win64

    Default (Windows 32-bit applications operating on 64-bit systems [Wow64 with SiteMinder Web Agents for IIS only]): C:\Program Files (x86)\webagent\win32

  3. Perform each of the following steps on the other IIS web server nodes in your environment:

    Note: To automate this process, create your own customized script to execute these files on your systems. Use any scripting language that you want.

    1. Create a temporary directory on an IIS web server node.
    2. Copy the following files from your first IIS web server (from Steps 1 and 2) to the temporary directory on your IIS web server node:
      • SiteMinder Web Agent Configuration executable file (ca-wa-config.exe).
      • SiteMinder ca-wa-installer properties file.
    3. Open a command prompt window with Administrative privileges in the temporary directory.

      Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges.

    4. Run the following command:
      agent_configuration_executable -f properties_file -i silent
      

      Example: ca-wa-config.exe -f ca-wa-installer.properties -i silent

      The SiteMinder Web Agent for IIS is installed and configured on the node automatically.

    5. (Optional) Delete the temporary directory from your web server node.
  4. Repeat Step 3 for each additional IIS web server node in your SiteMinder environment that uses the configuration specified by the settings in your ca-wa-installer.properties file.
Add SiteMinder Protection to Additional Virtual Sites on IIS Web Servers Silently

If your IIS web server already has a Web Agent for IIS installed, you can protect any additional virtual websites on the web server. For example, if you add two new virtual sites named Example2 and Example3 to your IIS server, you can protect them with SiteMinder.

If you do not want to run configuration wizard, or if you have many IIS web servers in a server farm, use the silent mode.

The SiteMinder Web Agent Configuration program supports a silent or unattended mode that requires no interaction from the end user.

To add SiteMinder protection to additional virtual sites on IIS web servers silently

  1. Locate the following file on your first IIS web server.
    web_agent_home\install_config_info\ca-wa-installer.properties
    
    Note: In this context, the first server refers to the IIS web server in a farm where the shared configuration information is stored. A node refers to any other IIS web servers in the farm which read the shared configuration from the first server.web_agent_home

    Indicates the directory where the SiteMinder Agent is installed on your web server.

    Default (Windows 32-bit installations of SiteMinder IIS Web Agents only): C:\Program Files\CA\webagent

    Default (Windows 64-bit installations [SiteMinder Web Agents for IIS only]): C:\Program Files\CA\webagent\win64

    Default (Windows 32-bit applications operating on 64-bit systems [Wow64 with SiteMinder Web Agents for IIS only]): C:\Program Files (x86)\webagent\win32

  2. Perform each of the following steps on the IIS web servers to which you want to protect the additional virtual sites:

    Note: To automate this process, create your own customized script to execute these files on your systems. Use any scripting language that you want.

    1. Create a temporary directory on an IIS web server node.
    2. Copy the following files from your first IIS web server (from Steps 1 and 2) to the temporary directory on your IIS web server node:
      • SiteMinder Web Agent Configuration executable file (ca-wa-config.exe).
      • SiteMinder ca-wa-installer properties file.
    3. Open the SiteMinder ca-wa-installer properties file with a text editor.
    4. Locate the following parameter:
      CONFIGURE_SITES=

      Specifies the names of IIS 7.x web sites to protect on an IIS 7.x web server. Verify that these names match those names shown in under the Sites folder in the Internet Information Services (IIS) Manager of your web server. Separate multiple website names with commas.

      For more information, see the comments in the ca-wa-installer.properties file.

      Example: Default Web Site,Example1,Example2

    5. Add the names of the web sites you want to configure to the previous parameter. Remove the names of any other sites on the web server that you want to leave unchanged.
    6. Locate the following parameter:
      HOST_REGISTRATION_YES=

      Specifies if the agent configuration program registers the agent with a Policy Server. Each web server requires only one trusted host registration is required. Set the value of this parameter to 0 if you have previously registered a web server with the Policy Server as a trusted host.

      Default: 1 (yes)

      Limits: 0 (no registration), 1 (registration)

    7. If the IIS web server is already registered as a trusted host with the SiteMinder Policy Server, change the value of the previous parameter to 0. Otherwise, the configuration program registers the web server as a trusted host.
    8. Open a Command Prompt window with Administrative privileges in the temporary directory.
    9. Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges.
    10. Run the following command:
      agent_configuration_executable -f properties_file -i silent
      

      Example: ca-wa-config.exe -f ca-wa-installer.properties -i silent

      The SiteMinder Web Agent for IIS is installed and configured on the node automatically.

    11. (Optional) Delete the temporary directory from your web server node.
  3. Repeat Step 2 for each additional IIS web server node in your environment that uses the configuration specified by the settings in your <flilename>-wa-installer.properties file.
Remove a SiteMinder Web Agent Configuration from an IIS Web Server Silently

To remove the SiteMinder protection from all the websites on an IIS web server without the Web Agent Configuration wizard, use silent or unattended mode. This mode requires no interaction from the end user.

To remove a SiteMinder Web Agent configurations from an IIS web server silently

  1. Locate the following file on your first IIS web server.
    web_agent_home\install_config_info\ca-wa-installer.properties
    

    Note: In this context, the first server refers to the IIS web server in a farm where the shared configuration information is stored. A node refers to any other IIS web servers in the farm which read the shared configuration from the first server.

    web_agent_home

    Indicates the directory where the SiteMinder Agent is installed on your web server.

    Default (Windows 32-bit installations of SiteMinder IIS Web Agents only): C:\Program Files\CA\webagent

    Default (Windows 64-bit installations [SiteMinder Web Agents for IIS only]): C:\Program Files\CA\webagent\win64

    Default (Windows 32-bit applications operating on 64-bit systems [Wow64 with SiteMinder Web Agents for IIS only]): C:\Program Files (x86)\webagent\win32

  2. Perform each of the following steps on the IIS web servers to which you want to remove protection from virtual sites:

    Note: To automate this process, create your own customized script to execute these files on your systems. Use any scripting language that you want.

    1. Open the following directory on an IIS web server node.
      web_agent_home\install_config_info
      
    2. Copy the SiteMinder ca-wa-installer properties file from your first IIS web server (from Step 1) to the install_config_info directory on your IIS web server node.
    3. Open the SiteMinder ca-wa-installer properties file with a text editor.
    4. Locate the following parameter:
      UNCONFIGURE_SITES=

      Specifies the names of IIS 7.x web sites from which to remove SiteMinder protection on an IIS 7.x web server. Verify that these names match those names shown in under the Sites folder in the Internet Information Services (IIS) Manager of your web server. Separate multiple website names with commas.

      Removing the SiteMinder Web Agent configuration from a website leaves its resources unprotected.

      For more information, see the comments in the ca-wa-installer.properties file.

      Example: Default Web Site,Example4,Example5

    5. Enter the names of the websites you want to unconfigure in the previous parameter.
    6. Locate the following parameter:
      CONFIGURE_SITES=

      Specifies the names of IIS 7.x web sites to protect on an IIS 7.x web server. Verify that these names match those names shown in under the Sites folder in the Internet Information Services (IIS) Manager of your web server. Separate multiple website names with commas.

      For more information, see the comments in the ca-wa-installer.properties file.

      Example: Default Web Site,Example1,Example2

    7. Verify that the previous parameter contains no website names.
    8. Open a command prompt window with Administrative privileges.

      Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges.

    9. Run the following command:
      agent_configuration_executable -f properties_file -i silent
      

      Example: ca-wa-config.exe -f ca-wa-installer.properties -i silent

      The websites are unconfigured on the node automatically.

  3. Repeat Step 2 for each additional IIS web server node in your environment that uses the configuration specified by the settings in your <flilename>-wa-installer.properties file.
Remove SiteMinder Protection From Some Virtual Sites on IIS Web Servers Silently

If your IIS web server already has a Web Agent for IIS installed, you can remove protection from some virtual websites on the web server. For example, suppose you want to remove protection from only two of the virtual sites named Example4 and Example5 from to your IIS server. Modify the ca-wa-installer.properties file to remove the configuration from those two virtual websites while leaving the protection for the other websites unchanged.

If you do not want to run the configuration wizard, or if you have many IIS web servers in a server farm, use the silent mode.

The SiteMinder Web Agent Configuration program supports a silent or unattended mode that requires no interaction from the end user.

To remove SiteMinder protection from additional virtual sites on IIS web servers silently

  1. Locate the following file on your first IIS web server.
    web_agent_home\install_config_info\ca-wa-installer.properties
    
    Note: In this context, the first server refers to the IIS web server in a farm where the shared configuration information is stored. A node refers to any other IIS web servers in the farm which read the shared configuration from the first server.web_agent_home

    Indicates the directory where the SiteMinder Agent is installed on your web server.

    Default (Windows 32-bit installations of SiteMinder IIS Web Agents only): C:\Program Files\CA\webagent

    Default (Windows 64-bit installations [SiteMinder Web Agents for IIS only]): C:\Program Files\CA\webagent\win64

    Default (Windows 32-bit applications operating on 64-bit systems [Wow64 with SiteMinder Web Agents for IIS only]): C:\Program Files (x86)\webagent\win32

  2. Perform each of the following steps on the IIS web servers from which you want to remove the protection of the additional virtual sites:

    Note: To automate this process, create your own customized script to execute these files on your systems. Use any scripting language that you want.

    1. Copy the SiteMinder ca-wa-installer properties file from your first IIS web server (from Step 1) to the install_config_info directory on your IIS web server node:
    2. Open the SiteMinder ca-wa-installer properties file with a text editor.
    3. Locate the following parameter:
      UNCONFIGURE_SITES=

      Specifies the names of IIS 7.x web sites from which to remove SiteMinder protection on an IIS 7.x web server. Verify that these names match those names shown in under the Sites folder in the Internet Information Services (IIS) Manager of your web server. Separate multiple website names with commas.

      Removing the SiteMinder Web Agent configuration from a website leaves its resources unprotected.

      For more information, see the comments in the ca-wa-installer.properties file.

      Example: Default Web Site,Example4,Example5

    4. Add the names of the web sites from which you want to remove the configuration to the previous parameter. Remove the names of any other sites on the web server that you want to leave unchanged.
    5. Locate the following parameter:
      HOST_REGISTRATION_YES=

      Specifies if the agent configuration program registers the agent with a Policy Server. Each web server requires only one trusted host registration is required. Set the value of this parameter to 0 if you have previously registered a web server with the Policy Server as a trusted host.

      Default: 1 (yes)

      Limits: 0 (no registration), 1 (registration)

    6. If the IIS web server is already registered as a trusted host with the SiteMinder Policy Server, set the previous parameter to 0. Otherwise, the configuration program registers the web server as a trusted host.
    7. Open a Command Prompt window with Administrative privileges in the temporary directory.
    8. Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges.
    9. Run the following command:
      agent_configuration_executable -f properties_file -i silent
      

      Example: ca-wa-config.exe -f ca-wa-installer.properties -i silent

      The SiteMinder configuration is removed from the selected virtual sites on the node automatically.

  3. Repeat Step 2 for each additional IIS web server node in your environment that uses the configuration specified by the settings in your <flilename>-wa-installer.properties file.