CA Cloud Service Delivery Platform

Transcription

1 CA Cloud Service Delivery Platform Platform Implementation Guide Release 1.1

2 This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation ) is for your informational purposes only and is subject to change or withdrawal by CA at any time. This Documentation is proprietary information of CA and may not be copied, transferred, reproduced, disclosed, modified or duplicated, in whole or in part, without the prior written consent of CA. If you are a licensed user of the software product(s) addressed in the Documentation, you may print or otherwise make available a reasonable number of copies of the Documentation for internal use by you and your employees in connection with that software, provided that all CA copyright notices and legends are affixed to each reproduced copy. The right to print or otherwise make available copies of the Documentation is limited to the period during which the applicable license for such software remains in full force and effect. Should the license terminate for any reason, it is your responsibility to certify in writing to CA that all copies and partial copies of the Documentation have been returned to CA or destroyed. TO THE EXTENT PERMITTED BY APPLICABLE LAW, CA PROVIDES THIS DOCUMENTATION AS IS WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT WILL CA BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION, LOST PROFITS, LOST INVESTMENT, BUSINESS INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF CA IS EXPRESSLY ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH LOSS OR DAMAGE. The use of any software product referenced in the Documentation is governed by the applicable license agreement and such license agreement is not modified in any way by the terms of this notice. The manufacturer of this Documentation is CA. Provided with Restricted Rights. Use, duplication or disclosure by the United States Government is subject to the restrictions set forth in FAR Sections , , and (c)(1) - (2) and DFARS Section (b)(3), as applicable, or their successors. Copyright 2014 CA. All rights reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.

3 Contact CA Technologies Contact CA Support For your convenience, CA Technologies provides one site where you can access the information that you need for your Home Office, Small Business, and Enterprise CA Technologies products. At you can access the following resources: Online and telephone contact information for technical assistance and customer services Information about user communities and forums Product and documentation downloads CA Support policies and guidelines Other helpful resources appropriate for your product Providing Feedback About Product Documentation If you have comments or questions about CA Technologies product documentation, you can send a message to techpubs@ca.com. To provide feedback about CA Technologies product documentation, complete our short customer survey which is available on the CA Support website at

4 CA Technologies Product References This documentation set references the following products that constitute the CA Cloud Service Delivery Platform. Foundation Products: CA Service Catalog CA Business Intelligence CA Embedded Entitlements Manager (CA EEM) CA Process Automation CA SiteMinder CA Service Desk Manager (CA SDM) Monitoring Service Products: CA Service Operations Insight CA Spectrum CA Nimsoft Monitor

5 Contents Chapter 1: Introduction 7 Implementation Overview... 7 Chapter 2: Deployment Prerequisites 9 Infrastructure... 9 Networking Requirements Prerequisites to Deploy CA CSDP into an ESX Cluster Create a Private Heartbeat Network Download the Appliances Chapter 3: Deployment 13 Deploy Appliances Configure SQL Server Disks Verify Deployment Verify Microsoft SQL Deployment Verify CA EEM Deployment Verify CA SiteMinder Deployment Verify CA Process Automation Deployment Verify CA Service Catalog Deployment Test the Connectivity Verify CA Service Desk Manager Deployment Chapter 4: Post Deployment 37 Password Management Set the Password for Bulk Upload of Users Change and Update Passwords Location of Global Data Sets and Password Change Password Synchronize Appliance Dates, Times, and Time Zones Add Touchpoints to the Domain Orchestrator Configure Settings Review Prerequisites Configure CA Service Catalog Settings Configure CA Process Automation Settings Update Settings and Addresses in CA Service Desk Manager Contents 5

6 Chapter 5: Onboard Service Offerings 109 Install OVF Tool Entry Points Types of Payloads Methods to Deploy the OVF Restrict Access to SDK Allow the Service Developer to Add Request Chapter 6: Uninstall CA CSDP Appliances 115 Chapter 7: Troubleshooting 117 Configure SQL Server from Command Prompt CA Remote Engineer Appendix A: Deployment and Server Credentials Worksheet 121 Glossary Platform Implementation Guide

7 Chapter 1: Introduction CA CSDP is an integrated, automation solution that is designed for service providers to automate the provisioning, fulfillment, and assurance of their Services Offerings (SOs). This platform is supported on a virtual infrastructure environment for fast and efficient deployment. This guide helps the system administrator deploy and configure the CSDP platform. Implementation Overview The implementation of CA CSDP consists of the following two stages: 1. Deploy and configure the CSDP platform. This step includes common, self-service capabilities to fulfill and provision a service. 2. Deploy and configure the service. This step includes capabilities specific to the service. Monitoring-as-a-Service (MaaS) is offered as the default service with this release. For more information about MaaS, see the Monitoring Service Implementation Guide. CA CSDP is deployed as a set of appliances on preconfigured machines with minimal configuration tasks. This deployment process reduces the time that is required to make the CSDP platform operational. Chapter 1: Introduction 7

8

9 Chapter 2: Deployment Prerequisites This section provides information about the system requirements for deploying the CSDP platform components. More information: Infrastructure (see page 9) Networking Requirements (see page 10) Download the Appliances (see page 11) Infrastructure The solution requires a VMware environment with VMware vcenter 4.1 or above, or VMware ESX 4.1 or above, servers for deploying virtual machines. Before you install the appliances, work with your administrator to ensure that the VMware ESX resources meet the following minimum requirements: Number of vcpus: 22 Total RAM: 80 GB Total Storage: 700 GB Number of Static IP addresses: 14 The following table lists the requirements for each appliance: Appliance vcpus RAM Storage Network OSS-SQL 6 x vcpus 20 GB 200 GB Five IP addresses OSS-EEM 6 x vcpus 16 GB 160 GB Five IP addresses OSS-SC 4 x vcpus 16 GB 115 GB Two IP addresses OSS-PAM 4 x vcpus 16 GB 140 GB Two IP addresses OSS-SDM 4 x vcpus 16 GB 145 GB Two IP addresses Important! ESX password must include only alphanumerical characters. Chapter 2: Deployment Prerequisites 9

10 Networking Requirements Networking Requirements Ensure that your network meets the following requirements: CA CSDP requires a name resolution. It uses preconfigured hostnames and name resolution to communicate between components. A name resolution is required for both FQDNs and short host names. Use a static IP address for CA CSDP, configure the IP addresses and host names before bringing up the servers. Important! Avoid conflict by deploying only one instance on a network. The solution has preconfigured host names. If more than one instance of a host is deployed, the host must be on separate networks. The CA Process Automation server must be able to communicate with the mail server to send and receive messages from the solution. Note: Ensure that port 25 is open on the firewall. Create a separate private heartbeat network for the SQL cluster on the host. Prerequisites to Deploy CA CSDP into an ESX Cluster Ensure that your network meets the following requirements when you deploy CA CSDP into an ESX cluster: Both the ESX servers must be physically connected through a network cable. A virtual network must exist with the same name in both the ESX servers, and must share the same physical adapter. Create a Private Heartbeat Network Create a private heartbeat network for the SQL cluster on the host. 1. Click ESX, and then click the Configuration tab. 2. Click Networking on the left pane. 3. Click Add Networking to open the Add Network wizard. 4. Select default of Virtual Machine and click Next. 5. Select Create a vsphere standard switch, and click Next. Important! Ensure that all check boxes are cleared. 6. Provide a name for the Network Label. For example, SQL Heartbeat. 7. Click Next. 10 Platform Implementation Guide

11 Download the Appliances 8. Review Setup and click Finish. A private heartbeat network for the SQL cluster is created on the host. Download the Appliances Virtual Appliances are preconfigured application stacks that are prebuilt to provide the solution. The following appliances are comprised of virtual machines that are packaged as a unit and managed in Open Virtualization Format (OVF). OVF is an open standard for packaging and distributing the appliances. Important! Before you download, verify that the system to which you are downloading the appliances has a minimum of 200 GB of free disk space (120 GB for the CSDP platform and 70 GB for MaaS). Ensure that 100 GB of free disk space is available to extract and deploy the appliances. Go to download the following appliances (ZIP files), and extract them to a local drive. You do not require to download and unzip in any particular order. OSS-SQL.zip Retrieves the data from the SQL Server cluster virtual appliance that provides the back-end database functionality for some CA CSDP components. OSS-EEM.zip Defines the user authentication, authorization, and audit capability. OSS-PAM.zip Defines the capability to design, deploy, and administer the automation of manual, resource-intensive, and operational procedures in the solution. Provides work flows that respond to calls made to the service workflow Interface. The CA CSDP calls the service workflow Interface. OSS-SDM.zip Defines the capability for viewing real-time incidents and problem identification. OSS-SC.zip Displays the CA CSDP offerings to the users and provides forms to request to initiate the process flows. The process flow includes the interface for CA CSDP that exposes offerings to users. After you download and extract the appliances to the local drive, specify the location of the virtual appliances in the virtual environment. Each extracted appliance contains Open Virtualization Format (OVF) files that you use while deploying the CSDP platform. Chapter 2: Deployment Prerequisites 11

12

13 Chapter 3: Deployment As a service provider administrator, you are responsible to plan the implementation and prepare a worksheet as a reference through the implementation. You deploy and configure the appliances, and then verify the implementation. Important! Do not re-deploy a service that is active. Deploy Appliances Deploying the appliances creates preconfigured virtual machines on your VMware ESX Server. To deploy the CSDP platform, use the OVF templates that are provided in each appliance. Appliances include: Microsoft SQL Server 2008 Cluster CA Embedded Entitlements Manager CA Process Automation CA Service Catalog CA Service Desk Manager Note: To enter the specific values that are required during the deployment process, use the Server Access Credentials worksheet. Deploy the OVF templates in the following sequence: Important! Install the templates in the order that is specified in this guide because the deployment and configuration are interdependent. We do not support any deviations from the following deployment and configuration procedures. These procedures also assume that you have the required infrastructure and non-ca Technologies software installed. 1. OSS-SQL 2. OSS-EEM 3. OSS-PAM 4. OSS-SC 5. OSS-SDM Important! We recommend that you verify appliances in the order you deployed them during the implementation process. Chapter 3: Deployment 13

14 Deploy Appliances 1. Log in to the VMware vcenter Server as an administrator using VMware vsphere Client. 2. Disregard the security warning or view and install the certificate and continue. 3. Click File, Deploy OVF Template. 4. Browse for the OVF template, and click Next. Example: Failover Cluster\Microsoft SQL Server 2008 r2 Failover Cluster.ovf The OVF Template Details page displays the details that are stored in the OVF template such as the download size, available disk size, and vendor name. 14 Platform Implementation Guide

15 Deploy Appliances 5. Verify the template details, and click Next. The Name and Inventory Location page lets you add a name to identify the OVF and specify the datacenter where you want to provision the server. 6. Enter the vapp name in the Name field, select the Inventory Location, and then click Next. Note: The default name that is displayed in the Name field is from the OVF Template Details page. We recommend using the default name for the template. The Host / Cluster page displays the available clusters. 7. Select a host or cluster on which you want to deploy the OVF template, and then click Next. The Resource Pool page opens. Note: If the vsphere Client is connected to an ESXi host, the Resource Pool page does not appear. 8. Select the resource pool on which you want to deploy the OVF templates, and click Next. The Disk Format page opens. 9. Select Thick Provision Eager Zeroed for SQL Server cluster (OSS-SQL) and click Next. Important! For the SQL Server cluster, if you are not able to select Thick Eager Zeroed then, select Thin Provision when deploying the database. For more information on how to update the drives, see section Configure SQL Server Disks (see page 17). Chapter 3: Deployment 15

16 Deploy Appliances Note: If you are using the earlier versions of VMware vsphere Client, select Thick provisioned format. The Network Mapping page opens. 10. Select the network for the solution with all the servers in CA CSDP. When deploying the SQL Server cluster you are prompted to enter a second network. Select the private network (the network name, as given by your VM administrator) for the SQL Servers in the SQL Cluster. For more information, see Create a Private Heartbeat Network (see page 10). The Private Network must be accessible only to the SQL servers in the SQL cluster. Do not use this network for any other deployment. 11. Click Next. The Properties page opens to customize the vapp parameter for this OVF template. This page contains the Host settings. 12. Enter the values for each field using the information that you gathered in the Deployment Worksheet (see page 121), and then click Next. Note: You can specify the values after you deploy the appliances and before you power it on. The Ready to Complete page opens and displays a summary of the details you entered in the previous pages. 13. Verify the deployment settings. Important! Do not select Power on after deployment. Click Finish. 14. When you deploy the SQL Server cluster (OSS-SQL) you must stop and configure the virtual machines to ensure that the Windows cluster is set up correctly before you continue with the other deployments. Configure the SQL Server cluster properly before you can start any virtual machines. Note: For more information about configuring Microsoft SQL Server, see Configure SQL Server Disks (see page 17). 16 Platform Implementation Guide

17 Deploy Appliances 15. Repeat steps 1 through 13 to deploy the remaining templates. The deployment of CA CSDP is complete. 16. Power on the appliances in the following order: Important! Verify that the appliance is up and running before you power on the next appliance. OSS-SQL. For more information on verifying that the appliance is up and running, see Verify Microsoft SQL Deployment (see page 28). OSS-EEM. For more information on verifying that the appliance is up and running, see Verify CA EEM Deployment (see page 29). OSS-SC. For more information on verifying that the appliance is up and running, see Verify CA Service Catalog Deployment (see page 33). OSS-PAM. For more information on verifying that the appliance is up and running, see Verify CA Process Automation Deployment (see page 31). OSS-SDM. For more information on verifying that the appliance is up and running, see Verify Service Desk Manager Deployment (see page 34). Note: While you log in for the first time if, you see a message asking to reboot the server click Yes on the message box. Configure SQL Server Disks To configure the SQL Server Disks, do the following actions: Inflate the hard disks Share the virtual disk Chapter 3: Deployment 17

18 Deploy Appliances Inflate Hard Disks If you are using vcenter version lower than v5.x or could not select ZeroEager for the SQL server cluster while deploying the OVFs, configure the SQL Server using the interface. Note: For the steps to configure the SQL Server using the command prompt, see the section Configure SQL server from command prompt. (see page 117) Configure the disks on the host VMware ESX server. Note: Skip this section if you could deploy using Thick ZeroEager. Important! Complete the following process before you power on the Microsoft SQL Cluster vapp for the first time. Perform the following steps to inflate hard disk 2 and hard disk 3, in the VMware vsphere Client. 1. Right-click the OSS-SQL1 virtual machine and select Edit Settings. The virtual machine Properties window opens. 2. Select Hard Disk 2 and 3 from the hardware list and write down the Disk File name. Note: Make sure that the names are readily available for the further steps. Example: [Intermountain6] OSS-SQL1/OSS-SQL1_1.vmdk. e [Datastore name] Folder name/disk file name.vmdk (ends in vmdk) 3. Click Cancel. 4. Click the Summary tab on OSS-SQL1. 5. Right-click the Datastore, and select Browse Datastore. The datastore name displays. 18 Platform Implementation Guide

19 Deploy Appliances 6. To open the folders, double-click the folder name, for example, OSS-SQL1,. 7. Select and right-click the hard disk2 name, for example, OSS-SQL1_1.vmdk. 8. Click Inflate. 9. Repeat steps 4 through 8 for hard disk 3. Chapter 3: Deployment 19

20 Deploy Appliances Sharing the Virtual Disk The Microsoft SQL Cluster requires shared disks between the two Virtual Machines that are the nodes of the cluster. 1. Right-click the OSS-SQL1 virtual machine, and select Edit Settings. The OSS-SQL1-Virtual Machine Properties page opens. 2. From the Hardware list, select SCSI controller Set SCSI Bus Sharing to Virtual. 4. Repeat steps 2 through 3 for SCSI controller Platform Implementation Guide

21 Deploy Appliances 5. Select Hard Disk 2 and 3 from the device list and write down the Disk File name. Keep the names readily available for the steps ahead. Example: [Intermountain6] OSS-SQL1/OSS-SQL1_1.vmdk Chapter 3: Deployment 21

22 Deploy Appliances 6. Click OK. 7. Repeat steps 1 through 4 of this procedure for the OSS-SQL2 virtual machine. Note: If you could not select Thick EagerZero, when deploying the OVF, you must add the disks for OSS-SQL2. Note: If you do not see Hard disk 2 and Hard disk 3, skip step 7 and In the OSS-SQL2 virtual machine select Hard disk 2, click Remove. 9. Select Remove from virtual machine and delete files from disk, in the Removal Options. 22 Platform Implementation Guide

23 Deploy Appliances 10. Repeat step 7 for Hard disk Click Add on the top of the window. The Add Hardware wizard opens. Adding the hard disk also adds the SCSI Controller. 12. Select Hard Disk and click Next. 13. Select Use an existing virtual disk and click Next. Chapter 3: Deployment 23

24 Deploy Appliances 14. Click Browse to navigate to the Disk File location you noted in step 5 and then click Next. Note: Ensure that you navigate to the location for Disk 2 first. 24 Platform Implementation Guide

25 Deploy Appliances 15. Set the Virtual Device Node to SCSI (1:0) and click Next. 16. Review the options and click Finish on the Ready to Complete dialog. Chapter 3: Deployment 25

26 Deploy Appliances 17. Repeat steps 9 to14 using the Disk File location noted earlier for Disk 3 and set the Virtual Device Node to SCSI (2:0). The New SCSI controller is added. 18. Select the new SCSI controllers and ensure that the SCSI bus sharing is set to Virtual. 19. Click OK. The virtual disk configuration is complete. 20. Right-click the Microsoft SQL Server vapp and select Power On. Note: Ignore the warning about starting from the vapp, and click OK. 26 Platform Implementation Guide

27 Verify Deployment Verify Deployment After you deploy the appliances, verify that you can successfully log in to the deployed components. When you verify, be sure to: Access the URLs of the components from a system other than the host. Power on machines in the order you deployed them and listed in this section. Power on and verify the vapp for each component before advancing to the next. Important! After you deploy each appliance, ensure the following points: Do not deploy the next OVF template until you are able to access (ping) the machines having a proper IP address. For each virtual machine that is deployed, it is a good practice to ping the machines by the hostname from an outside box. This practice ensures that each box was able to connect to the network and register with the DNS. For any virtual machine with a static IP address, run the ipconfig (Windows) to validate that the IP address was properly assigned. We recommend that you verify the appliances in the order you deployed them during the implementation process. Note: To enter the specific values that are required during the verification process, use the Server Access Credentials for CA CSDP worksheet from the Implementation Checklist. Verify the following components: Verify Microsoft SQL Deployment (see page 28) Verify CA EEM Deployment (see page 29) Verify CA SiteMinder Deployment (see page 29) Verify CA Process Automation Deployment (see page 31) Verify CA Service Catalog Deployment (see page 33) Verify CA SDM Deployment (see page 34) Test the Connectivity (see page 34) Chapter 3: Deployment 27

28 Verify Deployment Verify Microsoft SQL Deployment Deploy the SQL server in a cluster on OSS-SQL1 and OSS-SQL2. Power on the Microsoft SQL Server after you deploy it. The following steps verify that the SQL cluster is deployed correctly. 1. Log in to the server (OSS-SQL1) with oss\administrator credentials. 2. Navigate to the Failover Cluster Manager page from Start, Administrative Tools, Failover Cluster Manager. 3. Verify that the status of the following clusters is set to Online, which indicates that the SQL Cluster is running. OSS-SQLCLUSTER IP Address 28 Platform Implementation Guide

29 Verify Deployment You have verified that the Microsoft SQL Server is deployed successfully. Note: If the cluster fails, see Validate Cluster. Verify CA EEM Deployment After you deploy the CA EEM OVF template, start the virtual application to verify that CA EEM and CA SiteMinder are deployed correctly. To verify the deployment, log in to the virtual machine where CA EEM is deployed. 1. Log in to the virtual machine OSS-EEM1 with administrator credentials. 2. Click Start, All Programs, CA Embedded Entitlements Manager, and then click Admin UI. The CA EEM Log In page opens. 3. Verify that the Application is set to <Global>. 4. Log in to the application with administrator credentials. If you can log in and access CA EEM, the deployment was successful. Verify CA SiteMinder Deployment Verify that CA SiteMinder is deployed with one of the following methods: SSO Admin Interface (see page 30) CA EEM integration with SSO (see page 30) Chapter 3: Deployment 29

30 Verify Deployment Verify the SSO admin UI You verify the SSO administrator user interface. Verify CA EEM integration with SSO 1. Log in to the SSO admin user interface with the following URL with administrator credentials: Note: See the System Credentials section for the credentials corresponding to each system. If the URL is not accessible or login fails, and Siteminder is not configured properly. Before, you verify CA EEM integration with SSO ensure that you update the license file (see page 31). 1. Log in to the CA EEM web UI through the following URL with administrator credentials: 2. Click Configure, and select EEM Server and SSO Server. The Connector Status shows the online symbol. If you can log in and access CA EEM, the deployment is successful. Note: Configure SSO manually if any of the previous method fails. 30 Platform Implementation Guide

31 Verify Deployment Update the License File Before, you verify CA EEM integration with SSO ensure that you update the license file. 1. Log in to OSS-EEM2 server with administrator credentials. 2. Navigate to C:\Program Files (x86)\ca\siteminder\license and copy the license.dat file. 3. Log in to OSS-EEM1 server and navigate to C:\Program Files (x86)\ca\siteminder\license. 4. Paste the license.dat file. 5. Go to Services.msc from the Run command. 6. Stop the SiteMinder Policy Server and SiteMinder Administrative UI services. 7. Start SiteMinder Policy Server service. 8. Start SiteMinder Administrative UI service. Note: After the license update, SiteMinder takes about 15 minutes to come online. Verify the CA EEM integration with SSO after 15 minutes. Verify CA Process Automation Deployment After you deploy the CA Process Automation OVF, start the virtual application to verify that PAM is deployed correctly. To verify the deployment, log in the virtual machine where CA Process Automation is deployed. 1. Log in to the virtual machine OSS-PAM1 with the following URL with administrator credentials: with oss\ Chapter 3: Deployment 31

32 Verify Deployment 2. Click Start, All Programs, CA, CA Process Automation 4.1 SP01, and then click Start CA Process Automation. The CA Process Automation Login page opens. 3. Log in to the application with administrator credentials. If you can log in and access CA Process Automation, the deployment was successful. Verify CA Process Automation Service Log on Configuration Log in to PAM Orchestrator nodes or machines one at a time, and perform the following procedure for all nodes. 1. Navigate to Windows services. 2. Right-click the service CA Process Automation Manager Orchestrator and click Properties. 3. Click the Log On tab. 4. Ensure that the option This Account is selected and the administrator credentials are set. 5. If the credentials are not set, do the following actions: Select the option This Account. Provide the administrator credentials, and click OK. Note: The administrator credentials must be as it is for all the servers. For more information, see Password Management. 6. Restart the service. Note: If the option This Account is already selected and the administrator credentials are set, you need not restart the service. 32 Platform Implementation Guide

33 Verify Deployment Verify CA Service Catalog Deployment After you deploy the CA Service Catalog OVF, start the virtual application to verify that the service catalog is deployed correctly. To verify the deployment, log in to the virtual machine where the CA Service Catalog is deployed. 1. Log in to the virtual machine OSS-SC1 with administrator credentials. 2. Click Start, All Programs, CA, Service Catalog, and click the Service Catalog Web Client. The CA CSDP Login page opens. 3. Log in to the application with administrator credentials. 4. Log in to CA Service Catalog through the SiteMinder secure proxy URL: using the same credentials. Note: Ensure that the Service Catalog is the same once you log in through SiteMinder Secure Proxy. If you can log in and access CA CSDP, the deployment was successful. Chapter 3: Deployment 33

34 Verify Deployment Test the Connectivity Test the connectivity between CA Service Catalog and CA Process Automation. Note: If your initial connectivity test fails, restart the CA Process Automation services and run the test again. 1. Log in to the service portal ( ) with administrator credentials. 2. Click Administration, Configuration on the home page. The Configuration page opens with the list of Options. 3. Select CA Process Automation from the Options. 4. Click Test. The connection status is displayed. You have tested the CA Service Catalog and CA Process Automation connectivity successfully. Verify CA Service Desk Manager Deployment After you deploy the CA Service Desk Manager OVF, start the virtual application to verify that SDM is deployed correctly. To verify the deployment, log in the virtual machine where CA Service Desk Manager is deployed. 1. Log in to the virtual machine OSS-SDM1 with administrator credentials. 34 Platform Implementation Guide

35 Verify Deployment 2. Click Start, All Programs, CA, and then click CA Service Desk Manager. The CA Service Desk Manager Login page opens. 3. Log in to the application with administrator credentials. 4. Log in to CA Service Desk Manager through the SiteMinder secure proxy URL: using the same credentials. Note: Ensure that the Service Desk is the same once you log in through SiteMinder Secure Proxy. If you can log in and access CA Service Desk Manager, the deployment was successful. Chapter 3: Deployment 35

36

37 Chapter 4: Post Deployment After you complete deploying, and verifying the appliances, perform the following tasks: 1. Password Management (see page 37) 2. Synchronize Appliance Dates, Times, and Time Zones (see page 93) 3. Add Touchpoints to the Domain Orchestrator (see page 94) 4. Configure Settings (see page 95) Note: We recommend that you to download and install the latest VMware tools on all the appliances. Important! Ensure that you install an anti-virus software. Password Management To ensure all the deployed servers communicate with each other, the administrator account credentials must be same on all the servers. Note: After you deploy CA CSDP, ensure that all machines and nodes in the environment have a common administrator account. Set the Password for Bulk Upload of Users To upload users in bulk, set the right password. 1. Log in to CA Process Automation Manager. 2. Click the Library tab. 3. Expand Project Austin, Util. 4. On the right-hand side, right-click Bulk_Upload_UserDS and click Edit. 5. Click Check Out. 6. Enter Austin@123 as the Value for PAM_Host_Password. 7. Click Check In. The password is set and you can upload users in bulk. Chapter 4: Post Deployment 37

38 Change and Update Passwords Change and Update Passwords You can update the service provider administrator password in various components in CA CSDP. After you update the service provider administrator password any of the devices mentioned in the following table, update the service provider administrator password in the components that require a password change. Device from which you change the password Active Directory (see page 43)-You can change the password of the following components from Active Directory: Component that you change the password of CA Service Catalog (see page 44) Component that requires a password change as a result Update CA Process Automation password in the following global datasets: Project Austin, Austin CA_Monitoring_Service_1. 1 CA SDM CA Nimsoft Monitor (see page 47) CA SLCM Update the password in CA Nimsoft Infrastructure Manager. Update the password in the CA_Monitoring_Service_1.1 global dataset in CA Process Automation 38 Platform Implementation Guide

39 Change and Update Passwords CA Spectrum (see page 49) After you change CA Spectrum password from AD, restart the CA Spectrum service from the CA Spectrum Control Panel. Ensure that you save the database before you restart. Update CA Process Automation password in the following global datasets: CA_Monitoring_Service_1. 1 Project Austin, Austin CA Service Desk Manager (see page 52) CA Process Automation (see page 55) CA_Alarm_Service_1.0 Restart the CA SDM system service. Update the password in CA Service Catalog. Update CA Process Automation password in the following global datasets: Project Austin, Austin CA_Monitoring_Service_1. 1 Update the password in CA SDM configuration domain in CA Process Automation. Update the CA Service Operations Insight password. Update CA SDM password. Update the SDK global dataset password in CA Process Automation. Update CA Service Catalog password. Chapter 4: Post Deployment 39

40 Change and Update Passwords Windows NT (see page 57)-If you change the password of a system that has the following components installed, do the following: CA Service Desk Manager (see page 57) Update CA Process Automation password in the CA_Alarm_1.0 global dataset. CA Spectrum (see page 58) Restart the CA Spectrum process Daemon service. CA Process Automation (see page 61) CA Embedded Entitlements Manager (see page 63) Active Directory (see page 64) Update CA Process Automation password in the following global datasets: CA_Monitoring_Service_1. 1 Project Austin, Austin Restart the service after changing the password in PAM1 and PAM2. Click Start, Administrative Tools, Services, CA Process Automation Orchestrator, right click, properties, Log on tab, provide the new password, click OK. Right click and click Start. Update CA Process Automation password in the following global datasets: CA_Monitoring_Service_1. 1 Project Austin, Austin Update CA Process Automation password in the Project Austin, Austin global dataset. Update CA Process Automation password in the Project Austin, Austin global dataset. Update AD machine password from CA Siteminder Admin Console 40 Platform Implementation Guide

41 Change and Update Passwords Database (see page 66) Application Level (see page 78) (UI level) CA Service Catalog (see page 78) CA Embedded Entitlements Manager (see page 81) CA Spectrum (see page 87) Update CA Process Automation, CA Nimsoft Infrastructure Manager, CA Siteminder, CA Service Operations Insight, CA Business Intelligence, CA Catalyst Update CA Process Automation password in the following global datasets: Project Austin, Austin CA_Monitoring_Service_1. 1 CA SDM CA SLCM Upadate CA Service Catalog, CA EEM, and CA Spectrum Update CA Process Automation password in the Project Austin global dataset. Unin stall and reins tall the conn ecto rs that are relat ed to CA Spec trum in CA SOI. Chapter 4: Post Deployment 41

42 Change and Update Passwords CA SiteMinder (see page 91) Reco nfig ure the SSO pass wor d. Rege nera te the SSL certi ficat e Location of Global Data Sets and Password The following table provides information on the location of global data sets and password parameters by CA CSDP component: Component Global Data Set Location Parameter CA Service Catalog CA Process Automation CA Service Desk Manager CA Spectrum Project Austin> Austin > EntMon_GlobalDataset MaaS > EntMon_GlobalDataset CA SDM > SDM_GlobalDataset CA SLCM > SLCM_GlobalDataset MaaS > EntMon_GlobalDataset Project Austin > Util > Bulk_Upload_UserDS Project Austin > Austin > EntMon_GlobalDataset MaaS > EntMon_GlobalDataset Project Austin > Austin > EntMon_GlobalDataset MaaS > EntMon_GlobalDataset Catalog Configuration > CAT_Password Catalog Configuration > CAT_Password Login Parameters > password Login Parameters > password PAM Configuration > ServerLoginPassword PAM_Host_Password SDM Configuration > SDM_Password SDM Configuration > SDM_Password spectrum > Spectrum_RESTFul_Password spectrum > Spectrum_RESTFul_Password 42 Platform Implementation Guide

43 Change and Update Passwords Component Global Data Set Location Parameter Microsoft Active Directory Project Austin > Austin > EntMon_GlobalDataset AD Configuration > LDAP_UserPassword Change Password You can update the passwords from the configuration screens of CA CSDP and its connecting systems. The password can be changed from the following: Active Directory (see page 43) Windows NT (see page 57) Database (see page 66) Application (see page 78) Change Password from Active Directory Active Directory lets you change the service provider administrator password of the following components: CA Service Catalog (see page 44) CA Nimsoft Monitor (see page 47) CA Spectrum (see page 49) CA Service Desk Manager (see page 52) Chapter 4: Post Deployment 43

44 Change and Update Passwords Change CA Service Catalog Password in Active Directory Change the CA Service Catalog password of the the service provider administrator in the Active Directory. 1. Log in to the LDAP server. 2. Navigate to Active Directory Users and Computers. 3. Expand the host server directory. 4. Select Users. 5. Locate and right-click the CA Service Catalog user name of the service provider administrator. 6. Select Reset Password and update the password. The service provider administrator password is updated in Active Directory. 44 Platform Implementation Guide

45 Change and Update Passwords (Active Directory) Update CA Service Catalog Password in CA Process Automation Global Datasets After you change the service provider administrators password for CA Service Catalog in the Active Directory, update the following global datasets in CA Process Automation: Project Austin Global Dataset (see page 45) CA_Monitoring Service_1.1 Global Dataset (see page 45) CA SDM Global Dataset (see page 46) CA SLCM Global Dataset (see page 46) The global datasets are updated to enable the communication between CA Process Automation and CA Service Catalog and initiate the transaction process. (Active Directory) Update CA Service Catalog Password in Project Austin Global Dataset Update the CA Service Catalog password in the EntMon Global Dataset in the Project Austin folder. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the Catalog Configuration folder and select CAT_Password. 7. Update the Value field to change the password and click Save. Password is updated in EntMon_GlobalDataset. (Active Directory) Update CA Service Catalog Password in CA_Monitoring Service_1.1 Chapter 4: Post Deployment 45

46 Change and Update Passwords Update the CA Service Catalog password in the EntMon Global Dataset that is located in the CA_Monitoring_Service_1.1 folder. 1. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 2. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 3. Expand the Catalog Configuration folder and select CAT_Password. 4. Update the Value field to change the password and click Save. Password is updated in CA_Monitoring Service_1.1 global dataset. (Active Directory) Update CA Service Catalog Password in CA SDM Global Dataset Update the CA Service Catalog password in the CA SDM global dataset in the CA SDM folder. 1. Select the CA SDM folder. Note: If the list of folders is too long, type CA SDM in the search field under Orchestrator. 2. Right-click SDM_GlobalDataset and select Edit. The SDM_GlobalDataset content opens in a new window. 3. Expand the Login Parameters CHANGE ME folder, select password. 4. Update the Value field to change the password and click Save. The password is updated in the SDM_GlobalDataset. (Active Directory) Update CA Service Catalog Password in SLCM Global Dataset 46 Platform Implementation Guide

47 Change and Update Passwords Update the CA Service Catalog password in the SLCM global dataset from the CA SLCM folder. 1. Select the CA SLCM folder. Note: If the list of folders is too long, type CA SLCM in the search field under Orchestrator. 2. Right-click SLCM_GlobalDataset and select Edit. The SLCM_GlobalDataset content opens in a new window. 3. Expand the Login Pararmeters CHANGE ME folder, select password. 4. Update the Value field to change the password and click Save. SLCM_GlobalDataset password is updated. Change CA Nimsoft Monitor Password in the Active Directory Change the CA Nimsoft Monitor service provider administrator password in the Active Directory. 1. Log in to the LDAP server. 2. Navigate to Active Directory Users and Computers. 3. Expand the host server directory. 4. Select Users. Chapter 4: Post Deployment 47

48 Change and Update Passwords 5. Locate and right-click the user name whose password you want to update. 6. Click Reset Password and update accordingly. (Active Directory) Update CA Nimsoft Monitor Password in CA Nimsoft Infrastructure Manager After you change CA Nimsoft Monitor password in the Active Directory, update the password in CA Nimsoft Monitor Infrastructure Manager. 1. Log in to the system where CA Nimsoft Monitor Infrastructure Manager is installed. 2. Click Start, All Programs, Nimsoft Monitoring, Infrastructure Manager. 3. Expand the MaaS-Central-Domain, MaaS-Central-Hub. 4. Select MaaS-Central-Robot. 5. Select hub from the Probes list, right-click and select Configure. 6. Click Settings. 7. Update the password, click Test. 8. Click OK, Apply, Click Yes to restart the system. The password is updated in CA Nimsoft Infrastructure Manager. (Active Directory) Update CA Nimsoft Infrastructure Manager Password in CA Process Automation After you have updated the service provider administrator password in CA Nimsoft Infrastructure Manager, update the password in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Monitoring_Service 1.1 folder. Note: If the folders list is too long, type CA_Monitoring_Service 1.1 in the search field under Orchestrator. 4. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 5. Expand the Nimsoft folder and select NimsoftPassword. 6. Update the Value field to change the password and click Save. Service provider administrator CA Nimsoft Monitor Infrastructure Manager password is updated in CA Process Automation 48 Platform Implementation Guide

49 Change and Update Passwords Change CA Spectrum Password in Active Directory 1. Log in to the LDAP server. 2. Navigate to Active Directory Users and Computers. 3. Expand the host server directory. 4. Select Users. 5. Locate and right-click the service provider administrator user name whose password you want to update. 6. Click Reset Password and update accordingly. 7. After you have updated the service provider administrator CA Spectrum password in Active Directory, update the password in CA Spectrum. 8. Restart the CA Spectrum service from the CA Spectrum Control Panel. Note: Ensure that you backup the database before you restart. Chapter 4: Post Deployment 49

50 Change and Update Passwords (Active Directory) Update CA Spectrum Password in CA Process Automation After you have updated the service provider administrator password in CA Spectrum, update the following global datasets in CA Process Automation: Project Austin Global Dataset (see page 50) CA_Monitoring Service_1.1 Global Dataset (see page 50) Alarm Service Global Dataset (see page 51) (Active Directory) Update CA Spectrum Password in Project Austin Global Dataset Update the service provider administrator CA Spectrum password in EntMon Global Dataset 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the Spectrum folder and select Spectrum_Perl_Password. 7. Update the Value field to change the password and click Save. The password is updated in Project Austin global dataset. (Active Directory) Update CA Spectrum Password in CA_Monitoring Service_1.1 Global Dataset 50 Platform Implementation Guide

51 Change and Update Passwords Update the CA Spectrum password in the CA Monitoring Service global dataset in CA Process Automation. 1. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 2. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 3. Expand the Spectrum folder and select Spectrum_Perl_Password. 4. Update the Value field to change the password and click Save. Password is updated in CA_Monitoring_Service_1.1 global dataset. (Active Directory) Update CA Spectrum Password in Alarm Service Global Dataset Update the Alarm Service global dataset in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Alarm Service_1.0 folder. Note: If the folders list is too long, type CA_Alarm Service_1.0 in the search field under Orchestrator. 4. Right-click Global_Dataset and select Edit. The Global_Dataset content opens in a new window. 5. Expand the Spectrum Configuration folder and select Spectrum_Password. 6. Update the Value field to change the password and click Save. The service provider administrator CA Spectrum password is updated in Alarm Service Global Dataset. Chapter 4: Post Deployment 51

52 Change and Update Passwords Change CA Service Desk Manager Password in Active Directory Active Directory lets you change the service provider CA Service Desk Manager password. 1. Log in to the LDAP server. 2. Navigate to Active Directory Users and Computers. 3. Expand the host server directory. 4. Select Users. 5. Locate and right-click the service provider administrator CA SDM user name. 6. Click Reset Password and update accordingly. 7. Restart CA SDM services. To restart CA SDM services 1. Go to the server that has CA SDM1 installed in it. 2. Click Start, Administrative Tools, Services, CA Service Desk Manager, right click, properties, Log on tab, provide the new password, and click OK. 3. Restart the CA SDM machine service. 4. Restart CA Service Desk Manager server. 5. Restart CA Process Automation Agent. 52 Platform Implementation Guide

53 Change and Update Passwords (Active Directory) Update CA Service Desk Manager Password in CA Service Catalog After you have updated the CA Service Desk Manager password in Active Directory, update the password in the CA Service Catalog. 1. Log in to CA Catalog Service as an administrator. 2. Click Administration, Configuration, CA Service Desk. 3. Update the password in the User Password field. 4. Click Test and click Save. (Active Directory) Update CA Service Desk Manager Password in CA Process Automation After you update service provider administrators CA Service Desk Manager password in the Active Directory, update the password in the following locations in CA Process Automation: Project Austin Global Dataset (see page 53) CA_Monitoring Service_1.1 Global Dataset (see page 53) CA SDM Configuration (see page 54) (Active Directory) Update CA Service Desk Manager Password in Project Austin Global Dataset After you have updated the CA Service Desk Manager password in Active Directory, update the password in the EntMon global dataset in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the SDM Configuration folder and select SDM_Password. 7. Update the Value field to change the password and click Save. CA_Monitoring_Service_1.1 password is updated. (Active Directory) Update CA Service Desk Manager Password in CA_Monitoring Service_1.1 Global Dataset Chapter 4: Post Deployment 53

54 Change and Update Passwords Update the CA Service Desk Manager password in the CA Monitoring Service global dataset in CA Process Automation. 1. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 2. Right-click EntMon_GlobalDataset and select Edit. 3. EntMon_GlobalDataset content opens in a new window. 4. Expand the SDM Configuration folder and select SDM Password. 5. Update the Value field to change the password and click Save. 6. Password is updated in CA_Monitoring_Service_1.1 global dataset. (Active Directory) Update CA SDM Configuration in CA Process Automation After you have updated the global dataset, update the CA SDM configuration in CA Process Automation. 1. Click Configuration 2. Select Domain, click the Modules tab. 3. Right-click CA Service Desk Manager, select Edit. CA Service Desk Manager Module Properties wizard opens. 4. Update the Default User's Password field with the new password. 5. Click Save and Close. The CA SDM configuration is updated in CA Process Automation. (Active Directory) Update CA Service Desk Manager Password in CA Service Operations Insight After you update the service provider administrator CA SDM password and configuration in CA Process Automation update the CA Service Operations Insight password: 1. Log in to CA Service Operations Insight as an administrator. 2. Click Administration, CA Service Operations Insight Manager Configuration, MaaS-SOI, and Help Desk Configuration. 3. Update the password in the Password field. 4. Click Test and click Save. The service provider administrator CA SDM password is updated in CA Service Operations Insight. 54 Platform Implementation Guide

55 Change and Update Passwords Change CA Process Automation Manager Password in Active Directory Active Directory lets you change the service provider administrator CA Process Automation password. 1. Log in to the LDAP server. 2. Navigate to Active Directory Users and Computers. 3. Expand the host server directory. 4. Select Users. 5. Locate and right-click the service provider administrator CA Process Automation user name. 6. Click Reset Password and update accordingly. Chapter 4: Post Deployment 55

56 Change and Update Passwords (Active Directory) Update CA Process Automation Password in CA SDM After you change the service provider administrator CA Process Automation password in the Active Directory, update the password in CA SDM. 1. Log in to CA Service Desk manager as an administrator. 2. Click Administration. 3. Expand the Options Manager folder and select CA IT PAM WorkFlow. 4. Click on caextwf_ws_password in the options list section. 5. Click Edit in the caextwf_ws_password update options window. 6. Update the changed password in Option Value field. The password is updated in CA Service Desk Manager. (Active Directory) Update CA Process Automation Password in CDK Global Dataset Update the service provider administrators CA Process Automation password in CDK global dataset. 1. Select the CDK folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 2. Right-click CDK_GlobalDataset and select Edit. CDK_GlobalDataset content opens in a new window. 3. Expand the PAM Configuration folder, select PAM_Admin_PWD. 4. Update the Value field to change the password and click Save. Password is updated in CDK global dataset. 56 Platform Implementation Guide

57 Change and Update Passwords (Active Directory) Update CA Process Automation Password in CA Service Catalog Update the CA Process Automation service provider administrator password in CA Service Catalog. 1. Log in to CA Service Catalog. 2. Navigate to Administration, Configuration, CA Process Automation. 3. Click the edit icon beside User Password. 4. Update the password and click Update Configuration. 5. Click Test and click OK. Change Password from Windows NT The CA Process Automation service provider administrator password is updated in CA Service Catalog. Windows NT lets you change service provider administrator password of the following components: CA Service Desk Manager (see page 57) CA Spectrum (see page 58) CA Process Automation Manager (see page 61) CA Embedded Entitlements Manager (see page 63) Active Directory (see page 64) Change CA Service Desk Manager Password in Windows NT Update the administrator password of the Windows NT computer where you have installed CA Service Desk Manager. Note: Perform these steps in both CA SDM1 and CA SDM2. 1. Log in to the Windows system where CA SDM is configured as an administrator. 2. Click Start, Windows Security, Change Password. 3. Provide the old password and the new password. 4. Confirm the new password. The CA SDM service provider administrator password is changed in Windows NT. Chapter 4: Post Deployment 57

58 Change and Update Passwords (Windows NT) Update CA SDM Password in CA_Alarm_1.0 Global Dataset Update the service provider administrators CA SDM password in the CA Alarm Service global dataset in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Alarm Service_1.0 folder. Note: If the folders list is too long, type CA_Alarm Service_1.0 in the search field under Orchestrator. 4. Right-click Global_Dataset and select Edit. The Global_Dataset content opens in a new window. 5. Expand the SDM Configuration Folder and select SDM_Server_Password. 6. Update the Value field to change the password and click Save. Change CA Spectrum Password in Windows NT The service provider CA SDM password is updated in the CA Alarm Service Global Dataset. Change the Windows NT password of the system, where you have installed CA Spectrum. 1. Log in to the Windows system where CA Spectrum is configured as an administrator. 2. Click Start, Windows Security, Change Password. 3. Provide the old password and the new password. 4. Confirm the new password. 5. Click Start, Administrative Tools, Services, select CA Spectrum Process Daemon, right-click, select Restart. The service provider administrators Windows NT password is updated for CA Spectrum. 58 Platform Implementation Guide

59 Change and Update Passwords (Windows NT) Install the Spectrum Process Daemon Service After you update the service providers CA Spectrum password in Windows NT, install the CA Spectrum Process Daemon service. 1. Open the command prompt change the working directory using the following command: cd%specroot%vib\sdpm 2. Install the CA Spectrum Process Daemon service by entering the following command: processd.exe -start 3. Use the username and password of the Windows administrator account for the values of <user> and <password>: processd.exe -install -username <user> -password <password> 4. Start the Spectrum Process Daemon service by entering the following command: processd.exe - start A confirmation message appears. The service is installed. (Windows NT) Update CA Spectrum Password in CA Process Automation After you have updated the service provider administrator password in CA Spectrum, update the following global datasets in CA Process Automation: Project Austin Global Dataset (see page 59) CA_Monitoring Service_1.1 Global Dataset (see page 60) (Windows NT) Update CA Spectrum Password in Project Austin Global Dataset Chapter 4: Post Deployment 59

60 Change and Update Passwords Update the service provider administrator CA Spectrum password in EntMon Global Dataset 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the Spectrum folder and select Spectrum_Perl_Password. 7. Update the Value field to change the password and click Save. The password is updated in Project Austin global dataset. (Windows NT)Update CA Spectrum Password in CA_Monitoring Service_1.1 Global Dataset Update the CA Spectrum password in the CA Monitoring Service global dataset in CA Process Automation. 1. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 2. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 3. Expand the Spectrum folder and select Spectrum_Perl_Password. 4. Update the Value field to change the password and click Save. Password is updated in CA_Monitoring_Service_1.1 global dataset. 60 Platform Implementation Guide

61 Change and Update Passwords Change CA Process Automation Password in Windows NT Change the Windows NT password in the system where you have installed CA Process Automation. Note: Ensure that you change the password for both PAM1 and PAM2. 1. Log in to the Windows machine where CA Process Automation is configured as an administrator. 2. Click Start, Windows Security, Change Password. 3. Provide the old password and the new password. 4. Confirm the new password. The Windows NT password is changed for CA Process Automation. 5. Restart the service for the changes to take effect. Click Start, Administrative Tools, Services CA Process Automation Orchestrator, right-click, and click Restart. (Windows NT) Update CA Process Automation Global Dataset After you change the NT password for CA Process Automation, update the password in the following datasets: CA_Monitoring_Service_1.1 Global Dataset (see page 61) Project Austin Global Dataset (see page 62) After the global datasets are updated restart the PAM1 and PAM2 orchestrators. 1. Click Start, Administrative Tools, Services, CA Process Automation Orchestrator, right click, Restart. The orchestrator is restarted. (Windows NT) Update CA_Monitoring Service_1.1 Global Dataset Chapter 4: Post Deployment 61

62 Change and Update Passwords Update the CA Process Automation password in the EntMon Global Dataset that is located in the CA_Monitoring_Service_1.1 folder. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 4. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 5. Expand the PAM Configuration folder and select ServerLoginPassword. 6. Update the Value field to change the password and click Save. 7. Expand the OVF Deployment details folder and select PAMPerlPassword. 8. Update the Value field to change the password and click Save. Password is updated in CA_Monitoring_Service_1.1 global dataset. (Windows NT) Update Project Austin Global Dataset Update the CA Process Automation password in the EntMon Global Dataset that is located in the CA_Monitoring_Service_1.1 folder. 1. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 2. Select the Austin folder. 3. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 4. Expand the PAM Configuration folder and select ServerLoginPassword. 5. Update the Value field to change the password and click Save. The service provider administrators CA Process Automation password is updated in EntMon global dataset. 62 Platform Implementation Guide

63 Change and Update Passwords Change CA Embedded Entitlements Manager Password in Windows NT Change the Windows NT password in the system where you have installed CA Embedded Entitlements Manager. 1. Log in to the Windows system where CA Embedded Entitlements Manager is configured with administrator user. 2. Click Start, Windows Security, Change Password. 3. Provide the old password and the new password. 4. Confirm the new password. The CA Embedded Entitlements Manager password is updated in Windows NT. (Windows NT) Update CA EEM Password in EntMon Global Dataset in Project Austin Update the CA EEM password in the EntMon Global Dataset that is located in the Project Austin folder in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the EEM Configuration folder and select EEM_EIAM AdminPassword. 7. Update the Value field to change the password and click Save. Password is updated in EntMon_GlobalDataset. Chapter 4: Post Deployment 63

64 Change and Update Passwords Change Windows Active Directory Password in Windows NT Change the Windows NT system password where you have installed Active Directory. 1. Log in to the Windows machine where Active Directory is configured with administrator user. 2. Click Start, Windows Security, Change Password. 3. Provide the old password and the new password. 4. Confirm the new password. The Windows NT password is changed for Active Directory. (Windows NT) Update Active Directory Password in Project Austin Global Dataset Update the Active Directory password in the EntMon global dataset in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the AD Configuration folder and select LDAP_UserPassword. 7. Update the Value field to change the password and click Save. Password is updated in EntMon_GlobalDataset. 64 Platform Implementation Guide

65 Change and Update Passwords (Windows NT) Update Active Directory Password from CA Site Minder Console After you update the CA Process Automation Global Dataset, update the Active Directory password from CA Site Minder Console. 1. Access Siteminder Admin Console from the following link as an administrator: 2. Navigate to CSDP Dir directory and click the edit icon. 3. The Modify User Directory: CSDPDir page opens. 4. Type the updated Active Directory password and click Update. The password is updated in CA Site Minder Console. Chapter 4: Post Deployment 65

66 Change and Update Passwords Change Database Administrator Password Change the Database administrator password. After you change the database administrator password, change the password in the following components: CA Process Automation (see page 67) CA Nimsoft Infrastructure Manager (see page 72) CA SiteMinder Policy (see page 73) CA Service Operations Insight (see page 74) SA Store Connection Password in all CA Catalyst Files (see page 75) SA Store Connection for CA Business Intelligence (see page 77) 1. Log in to the system where Microsoft SQL Server Management Studio is installed. 2. Click Start, All Programs, Microsoft SQL Server 2008 R2. Microsoft SQL Server Management Studio opens. 3. Expand the Security folder, and then expand the Logins folder under Object Explorer. 4. Select the username sa, right-click, and select Properties. 5. Type the password in the Password field and confirm the password. The password is updated. Close and reopen the instance by providing the new password. Note: After you have changed the database password, updated the password in the following components for the database: CA SOI CA SDM2 for CABI CA Process Automation CA EEM CA Nimsoft 66 Platform Implementation Guide

67 Change and Update Passwords (Database) Update Database Password in CA Process Automation Update the database password in CA Process Automation. Note: Ensure that you perform these steps in both PAM1 and PAM2. 1. Stop the orchestrator services. Click Start, Administrative Tools, Services CA Process Automation Orchestrator, right-click, and click Stop. 2. Navigate to the path where PAM installation files are located. For example, C:\\Temporary\ 3. Open the folder and double-click Third Party Installation. 4. Click Next, Select I Accept, Configure Existing Installation, and keep clicking Next. 5. Provide the location of the second PAM CD when prompted. 6. Retain the default settings and keep clicking Next until the Verify EEM Settings wizard appears. 7. Type the CA Process Automation user name and password. Note: This login lets you test whether CA EEM is up and running. 8. Click Next. CA Process Automation Domain Database Settings wizard appears. 9. Type the updated database password in the Password field. 10. Click Test Database Settings. The test runs and a success message appears. If the test fails, then the password change was unsuccessful in the database. 11. Click Next. 12. CA Process Automation Domain Runtime Database wizard appears. 13. Type the updated database password in the Password field. 14. Click Test Database Settings. The test runs and a success message appears. If the test fails, then the password change was unsuccessful in the database. 15. Click Next. 16. CA Process Automation Reporting Database Settings wizard appears. 17. Type the updated database password in the Password field. 18. Click Test Database Settings. The test runs and a success message appears. If the test fails, then the password change was unsuccessful in the database. 19. Keep clicking Next and click Finish. Chapter 4: Post Deployment 67

68 Change and Update Passwords 20. Restart the orchestrator services from Administrative Tools and log in using the new password. The database password is updated in CA Process Automation. (Database) Update Database Password in CA Process Automation Global Datasets Update the following global datasets in CA Process Automation for the database password change to take effect: CA_Monitoring_1.1 Global Dataset (see page 68) Project Austin Global Dataset (see page 68) SDK global dataset (see page 69) CA_Database Service_1.0 global dataset (see page 69) CA_CRM Service_1.0 global dataset (see page 70) ITCM MSO global dataset (see page 70) NFA MSO global dataset (see page 71) (Database) Update CA_Monitoring Service_1.1 Global Dataset To update CA_Monitoring_Service_1.1 follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. The contents of the CA_Monitoring Service_1.1 folder appear in the right-hand pane. 4. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 5. Expand the MDB Details folder. 6. Select mdb_dbpassword. 7. Update the Value field to change the password and click Save. Password is updated in CA_Monitoring_Service_1.1 global dataset. (Database) Update Project Austin Global Dataset 68 Platform Implementation Guide

69 Change and Update Passwords To update EntMon GlobalDataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. The contents of the Austin folder appear in the right-hand pane. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the SDM Configuration folder. 7. Select SDM_DB_User_PWD. 8. Update the Value field to change the password and click Save. Password is updated in EntMon_GlobalDataset. (Database) Update CDK Global Dataset To update CDK global dataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CDK folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. The contents of the CDK folder appear in the right-hand pane. 4. Right-click CDK_GlobalDataset and select Edit. CDK_GlobalDataset content opens in a new window. 5. Expand the Catalog Configuration folder. 6. Select CAT_DB_User_PWD. 7. Update the Value field to change the password and click Save. Password is updated in CDK global dataset. (Database) Update CA_Database Service_1.0 Global Dataset Chapter 4: Post Deployment 69

70 Change and Update Passwords To update DaaS global dataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Database Service_1.0 folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. The contents of the CA_Database Service_1.0 folder appear in the right-hand pane. 4. Right-click DaaS_GlobalDataSet and select Edit. DaaS_GlobalDataSet content opens in a new window. 5. Expand the mdb_details folder. 6. Select mdb_password. 7. Update the Value field to change the password and click Save. Password is updated in DaaS global dataset. Update CA_CRM Service_1.0 Global Dataset To update CRM global dataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_CRMService_1.0 folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. The contents of the CA_CRMService_1.0 folder appear in the right-hand pane. 4. Right-click Global_Dataset and select Edit. Global_Dataset content opens in a new window. 5. Expand the MdbConfiguration folder. 6. Select db_password. 7. Update the Value field to change the password and click Save. Password is updated in CRM global dataset. (Database) Update ITCM MSO Global Dataset 70 Platform Implementation Guide

71 Change and Update Passwords To update ITCM MSO global dataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_ITCM Service_1.0 folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. The contents of the CA_ITCM Service_1.0 folder appear in the right-hand pane. 4. Right-click ITCM_GlobalDataset and select Edit. ITCM_GlobalDataset content opens in a new window. 5. Expand the Database Configuration folder. 6. Select db_password. 7. Update the Value field to change the password and click Save. Password is updated in ITCM MSO global dataset. (Database) Update NFA MSO Global Dataset To update NFA MSO global dataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_NFA Service_1.0 folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. The contents of the CA_NFA Service_1.0 folder appear in the right-hand pane. 4. Right-click NFA_GlobalDataset and select Edit. NFA_GlobalDataset content opens in a new window. 5. Expand the Database Configuration folder. 6. Select db_password. 7. Update the Value field to change the password and click Save. Password is updated in NFA MSO global dataset. Chapter 4: Post Deployment 71

72 Change and Update Passwords (Database) Update Database Password in CA Nimsoft Infrastructure Manager Update the database password in CA Nimsoft Infrastructure Manager. 1. Log in to the system where CA Infrastructure Manager is installed. 2. Click Start, All Programs, Nimsoft Monitoring, Infrastructure Manager. 3. Expand MaaS-Central-Domain under Console and select MaaS-Central-Robot. 4. Select data_engine from the probes column, right-click, and select Configure. 5. Click the Database tab, update the password in the Password field. 6. Click OK. 7. Select the selfservice _cm probe, right-click, select Deactivate, and then select Activate. 8. Select the nas probe, press the Ctrl key and right-click, select Raw Configure. The Raw Configure wizard appears. 9. Expand the enrichment-source folder, and then expand the cmdbs folder. 10. Select the following configuration parameters, select password from the Key column, click Edit Key, and click OK to change the password: by_profile by_metid SuppKeyStandard UseSuppKeyTable UseSubSysTable The database password is updated in CA Nimsoft Infrastructure Manager. 72 Platform Implementation Guide

73 Change and Update Passwords (Database) Update Database Password in CA Nimsoft Infrastructure Manager Processor After you have updated the database password in CA Nimsoft Infrastructure Manager, update the password in CA Nimsoft Infrastructure Manager Processor folder. 1. Log in to the system NMS1 as an administrator. 2. Navigate to F:\Nimsoft\probes\slm\qos_processor 3. Open the dbcredentials text file, update the password, and save the file. The database password is updated in CA Nimsoft Infrastructure Manager Processor. (Database) Update CA Site Minder Policy in CA EEM Update the CA Site Minder policy in CA EEM for the database password change to take effect. 1. Click Start, All Programs, CA, SiteMinder, SiteMinder Policy Server Management Console. Policy Server Management Console window opens. 2. Click the Data tab and update the password in the Password field. 3. Click Test Connection. A success message appears. 4. Click Apply. 5. (Optional) If the test is unsuccessful, verify the password and retry. 6. Click the Status tab. 7. Click Stop and then click Start. 8. Restart the system, reopen SiteMinder Policy Server Management Console, Data, and then click Test Connection to ensure the password change is successful. 9. The password is updated in CA Site Minder Policy. Chapter 4: Post Deployment 73

74 Change and Update Passwords (Database) Update Database Password in CA Service Operations Insight Update the database password in CA Service Operation Insight. 1. Log in to the system where you have installed CA Service Operations Insight. 2. Update the SA Store Connection password in all CA Service Operations Insight files by using the EncryptSAMCreds.bat utility. a. Shut down the CA SAM Application Server and CA SAM User Interface Server services on the SA Manager system. b. Open the command prompt, navigate to SOI\Tools, and run the following command: EncryptSAMCreds <old password> <new password> Database This command updates the database password in all the necessary configuration files on the SA Manager system. The following screen shot is an example: Equation 1: This screen shows how the batch file executes. c. Restart the CA SAM Application Server and CA SAM User Interface Server services. The database password is updated in CA Service Operations Insight. 74 Platform Implementation Guide

75 Change and Update Passwords (Database) Change the SA Store Connection Password in all CA Catalyst Files Change the SA Store connection password in all the CA Catalyst files using the encrypter.bat utility for the change to occur in the CA Catalyst Registry. 1. Stop the CA SAM Application Server service on the SA Manager. 2. Open the command prompt, navigate to SOI_HOME\Tools\CatalystEncrypt on the SA Manager system, and run the following command: encrypter <new password> An encrypted password appears. 3. Open the following files located at SOI_HOME\tomcat\registry\topology\physical\node0\sor, paste the new encrypted password in the listed sections, and save the files: a. restserver.xml b. sorapp.xml c. ssaserver.xml d. ssaweb.xml <tns:datasource inj:injid="dbconfig"> <tns:username>sa</tns:username> <tns:password>password</tns:password> 4. Open the SOI_HOME\ServiceDiscovery\connectivityContext.xml file, paste the new encrypted password into the password property value in the '<!-- connectivity to the persistence store database -->' and '<!-- connectivity to the SSA database -->' sections, and save and close the file. All CA Catalyst configuration files contain the new encrypted password. 5. Start the CA SAM Application Server service from Administrative Tools. 6. Run the registryloader.bat file that is located at SOI_HOME\tomcat\registry. Ignore any "log4j:warn" messages. The Registry loads an updated record of all files in which you changed the password. 7. Restart the CA SAM Application Server service from Administrative Tools The Registry reconnects to all product components using the new password. 8. Access the following files located at SOI_HOME\wso2registry\repository\conf directory, paste the new encrypted password into the listed sections, and save the changes: registry.xml <dbconfig name="wso2registry"> <username>sa</username> <password> password</password> user-mgt.xml Chapter 4: Post Deployment 75

76 Change and Update Passwords <Configuration> <Property name="username">sa</property> <Property name="password">password</property> The password is changed in all CA Catalyst files. If the UI Server is installed with the SA Manager, the password change is complete. If you installed the UI Server on a separate system, continue with Step (Standalone UI Server only) Repeat Step 8 in the same files on the UI Server, pasting the encrypted password from the SA Manager. The password change is complete in all CA Catalyst files. 76 Platform Implementation Guide

77 Change and Update Passwords (Database) Update SA Store Connection for CA Business Intellignce 1. Shut down the CA SAM Application Server and CA SAM User Interface Server services on the SA Manager system(soi machine) 2. Open Reports designer in oss-sdm2 3. Login using administrator / Austin@ Select Tools, Connections from the menu bar Note: Perform the following steps in both CA_SAM and CSDP connections in Connection wizard. 5. Select CA_SAM name and click Edit. 6. Update sa user password in the Password field and test connection and proceed further 7. Select Start, Programs, BusinessObjects XI 3.1, BusinessObjects Enterprise, Central Configuration Manager. 8. The Central Configuration Manager dialog opens. 9. Select Apache Tomcat and Server Intelligence Agent, click Stop, and then click Start when the services stop. The database password is changed on the report server. 10. Access the Control Panel on the report server and double-click Administrative Tools, then Data Sources (ODBC). (OR ) The ODBC Data Source Administrator dialog opens. 1. Navigate to Windows syswow64, double-click the odbcad32 file. 2. Click the System DSN tab, select SAMStore, and click Configure. The Microsoft SQL Server DSN Configuration dialog opens. 3. Click Next, enter the new password in the Password field, and click Next again. The connection is verified with the new password. 4. Click Finish. The password is changed for report server communication. 5. Open the SOI_HOME\Reports\samreports.xml file on the report server, enter the new password in the <password> attribute, and save and close the file. 6. Start the CA SAM Application Server and CA SAM User Interface Server services in SOI machine. The report redeployments that happen in future use the new database connection password. Chapter 4: Post Deployment 77

78 Change and Update Passwords Change Password from Application You can change the password from application level for the following components: CA Service Catalog (see page 78) CA Embedded Entitlements Manager (see page 81) CA Spectrum (see page 87) CA SiteMinder (see page 91) Change Password from CA Service Catalog You can change the password from CA Service Catalog. 1. Log in to CA Service Catalog as an administrator. 2. Click Requests, Manage Users, Change Password. 3. Type the new password in the Password and the Retype Password fields. 4. Click Submit. Note: If the password change is for a service provider administrator, ensure that you update the password in CA Process Automation. (Application) Update CA Service Catlog Password in CA Process Automation After you change the password in CA Service Catalog, update the password in CA Process Automation in the following global datasets: CA SLCM Global Dataset (see page 80) CA SDM Global Dataset (see page 79) Project Austin Global Dataset (see page 78) (Application) Update CA Service Catalog Password in Project Austin Global Dataset 78 Platform Implementation Guide

79 Change and Update Passwords To update EntMon GlobalDataset follow these steps: 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. The contents of the Austin folder appear in the right-hand pane. 5. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 6. Expand the Catalog Configuration folder. 7. Select CAT_Password. 8. Update the Value field to change the password and click Save. Password is updated in EntMon_GlobalDataset. (Application) Update CA Service Catalog Password in CA SDM Global Dataset Update the changed password in CA SDM global dataset. 1. Log in to CA Process Automation. 2. Select the CA SDM folder. Note: If the list of folders is too long, type CA SDM in the search field under Orchestrator. The contents of the CA SDM folder appear in the right hand pane. 3. Right-click SDM_GlobalDataset and select Edit. The SDM_GlobalDataset content opens in a new window. 4. Expand the Login Parameters CHANGE ME folder, select password. 5. Update the Value field to change the password and click Save. The password is updated in the SDM_GlobalDataset. (Application) Update CA Service Catalog Password in CA_Monitoring Service_1.1 Global Dataset Chapter 4: Post Deployment 79

80 Change and Update Passwords Update the CA Service Catalog password in the EntMon Global Dataset that is located in the CA_Monitoring_Service_1.1 folder. 1. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 2. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 3. Expand the Catalog Configuration folder and select CAT_Password. 4. Update the Value field to change the password and click Save. Password is updated in CA_Monitoring Service_1.1 global dataset. (Application) Update CA Service Catalog Password in SLCM Global Dataset Update the CA Service Catalog password in the SLCM global dataset from the CA SLCM folder. 1. Select the CA SLCM folder. Note: If the list of folders is too long, type CA SLCM in the search field under Orchestrator. 2. Right-click SLCM_GlobalDataset and select Edit. The SLCM_GlobalDataset content opens in a new window. 3. Expand the Login Pararmeters CHANGE ME folder, select password. 4. Update the Value field to change the password and click Save. SLCM_GlobalDataset password is updated. 80 Platform Implementation Guide

81 Change and Update Passwords Change Password in CA EEM You can change the CA EEM password from the application. 1. Log in to CA EEM. 2. Navigate to Self Administration and click Change Password. 3. Update the password and click Save. 4. To reflect the password change, restart the services in the computers where you have installed EEM. Note: Ensure that you perform the steps in both EEM1 and EEM2. 5. Click Start, Administrative Tools, Services, CA EEM, right-click, select Restart. Restart the following CA EEM services in the following sequence: a. (CA EEM1) CA Directory -itechpoz b. (CA EEM2) CA Directory-itechpoz c. (CA EEM1) CA itechnology igateway 4.7 d. (CA EEM2) CA itechnology igateway 4.7 Chapter 4: Post Deployment 81

82 Change and Update Passwords (Application) Stop all Services Related to CA EEM After you change the password in CA EEM, stop all the services that connect to EEM. To stop the services Click Start, Administrative Tools, Services, CA Process Automation Orchestrator, right click, select Stop. Stop the services in the following applications: CA Service Catalog (SC1 & SC2) CA Process Automation Agent CA Service Accounting CA Service Catalog CA Process Automation (PAM1 & PAM2) CA Process Automation Agent CA Process Automation Orchestrator Apache 2.2 CA Service Operation Insight CA SAM Application Server CA SAM Event Management CA SAM Integration Services CA SAM Store Indexer CA SAM User Interface Server CA UCF Proker 82 Platform Implementation Guide

83 Change and Update Passwords (Application) Update CA EEM Password in CA Service Catalog Start the CA Service Catalog service and update the new password in CA Service Catalog. Note: Ensure that you perform these steps in both SC1 and SC2. 1. Click Start, Administrative Tools, Services, right-click the following components, select Start. CA Service Catalog CA Service Accounting 2. Log in with the default password to the following utility to set up CA Service Catalog: 3. Type the new password that you updated in CA EEM in the Admin password field. 4. Click Save and log out from the utility. 5. Log in to CA Service Catalog with the new password. The password is updated in CA Service Catalog. Chapter 4: Post Deployment 83

84 Change and Update Passwords (Application) Update CA EEM Password in CA Process Automation Update the CA EEM service provider administrator password in CA Process Automation server. Note: Ensure that these steps are performed in both PAM1 and PAM 2 systems. 1. Log in to the system and ensure CA Process Automation installation DVD is inserted. Note: Ensure that both the CA Process Automation installation DVDs are present. 2. Open the DVD01 folder, select Third_Party_Installer_windows.exe. 3. Keep clicking next and select I Accept. 4. Select Configure existing installation and click Next. 5. Provide the path to the second DVD when prompted and keep clicking Next. 6. Type the new password. 7. Test the CA EEM settings by using CA Process Automation user name and password. 8. Keep clicking Next and click Finish. 9. Start the CA Process Automation services, click Start, Administrative Tools, Services, CA Process Automation Orchestrator, right click, select Start. 10. Log in to CA Process Automation from the web browser. The password update is successful in CA Process Automation. Note: Start Apache 2.2 Service in PAM1 system after you have updated the password in PAM Click Start, Administrative Tools, Services, select CA Process Automation Agent service, right-click, and select Start in all the following systems: SC1 PAM1 PAM2 (Application) Update CA EEM Password in Project Austin Global Dataset 84 Platform Implementation Guide

85 Change and Update Passwords After you update CA EEM password in CA Process Automation server, update the password in Project Austin global dataset. 1. Log in to CA Process Automation. 2. Click Configuration, expand Agents. Note: Verify that all the Agents are up and running, indicating Green colour. 3. Click Library. 4. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 5. Select the Austin folder. 6. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 7. Expand the EEM Configuration folder and select EEM_EIAMAdminPassword. 8. Update the Value field to change the password and click Save. Password is updated in Project Austin global dataset. (Application) Update the password in CA Service Operations Insight Chapter 4: Post Deployment 85

86 Change and Update Passwords Update the password in CA Service Operations Insight Manager Configuration and UI Server Configuration. 1. Start the following CA Service Operations Insight services in the system where CA Service Operations Insight is installed. CA SAM Application Server CA SAM Event Management CA SAM Integration Services CA SAM Store Indexer CA SAM User Interface Server CA UCF Broker 2. Log in to CA Service Operations Insight. 3. Click Administrator. 4. Expand CA Service Operations Insight Manager Configuration, Expand the MaaS SOI folder, select EEM Configuration. 5. Type the new password in the Password field. 6. Click Save, and click Test. A confirmation message appears, the password is now updated in CA Service Operations Insight Manager Configuration. 7. Expand CA Service Operations Insight UI Server Configuration folder, expand the MaaS SOI folder, select EEM Configuration. 8. Type the new password in the Password field. 9. Click Save, and click Test. A confirmation message appears, the password is now updated in CA Service Operations Insight UI Server Configuration. 86 Platform Implementation Guide

87 Change and Update Passwords Change CA Spectrum Password CA Spectrum lets you to update the password from the user interface. Note: The CA Spectrum password change is effective if the following conditions are satisfied: After you change the password in CA Spectrum, change the CA Spectrum password in Active Directory (see page 49). Ensure that CA EEM is not running when you change CA Spectrum password. 1. Log in to CA Spectrum One Click. 2. Click Users. 3. Select spectrum. 4. Navigate to Component Detail portlet, type the password in the New Password, and in the Confirm New Password fields. 5. Backup the database. 6. Click Start, Administrative Tools, Services, CA Spectrum, right click, select Restart. The password is updated in CA Spectrum. Chapter 4: Post Deployment 87

88 Change and Update Passwords (Application) Update CA Spectrum Password in CA SOI After you change CA Spectrum password in the application, you update the password in SOI. 1. Log in to SOI. 2. Click the Administration tab. 3. Go to Administration Pages Column, Expand the Connector Configuration folder. 4. Select MaaS-SOI. The list of connectors appears in the Administration Pages section. 5. Perform the following steps for all the spectrum connectors that are installed on SOI: a. Select the connectors that mention spectrum. b. Go to the Connection Details section. c. Update the Spectrum password in the Password field. d. Click Save. e. Click Stop and then click Start. 6. Restart SOI services, go to Administrative tools,services, select the following services, right-click, and then click Restart. CA SAM Event Management CA SAM Integration Services If all the connectors turn Green, the password change is successful. Important! If you have performed regional deployment of MaaS, the list of connectors corresponding to the regions appears with the list of connectors under Administration Pages. Ensure that you update the Spectrum password in the Regional connectors. If you enter a wrong password, the connectors that correspond to the regions that are listed in SOI do not turn red to indicate that a wrong password is used. If you enter a wrong password the connector must turn red indicating the connector has stopped working. (Application) Update Spectrum Password in SOI from SOI Related Configuration Files 88 Platform Implementation Guide

89 Change and Update Passwords You can also change CA Spectrum password in SOI from the SOI related configuration files. To change the Spectrum password in SOI from the configuration files you must first encrypt the password. 1. Log in to the computer that has SOI installed. 2. Go to SOI_Home, Tools, EncryptSAMCreds.bat 3. Open the command prompt, enter EncryptSAMCreds.bat <password> The command generates the encrypted password. 4. Copy and save the encrypted password in a notepad. 5. Go to the following path: \SOI\resources\Configurations\ Spectrumxxx.xml configuration file The list of XML files that are related to the Spectrum connectors are listed. 6. Open the XML files that begin with spectrum as a txt file. 7. Replace the password value with the newly generated encrypted password. 8. Click File and select Save. 9. Restart the following CA SOI services, go to Administrative tools, Services: CA SAM Event Management CA SAM Integration Services CA SAM Application Server CA SAM Store Indexer CA SAM User Interface Server CA UCF Broker. Update CA Process Automation Datasets If all the connectors turn green in the Administration Pages section, the password change is successful. After you update the CA Spectrum Password, update the password in the following global datasets: CA_Alarm_Service_1.0 Global Dataset (see page 89) CA_Monitoring Service_1.1 Global Dataset (see page 90) Project Austin Global Dataset (see page 90) (Application) Update CA_Alarm Service_1.0 Global Dataset Chapter 4: Post Deployment 89

90 Change and Update Passwords Update the Alarm Service global dataset in CA Process Automation. 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Alarm Service_1.0 folder. Note: If the folders list is too long, type CA_Alarm Service_1.0 in the search field under Orchestrator. 4. Right-click Global_Dataset and select Edit. The Global_Dataset content opens in a new window. 5. Expand the Spectrum Configuration Folder. 6. Update the Value field for Spectrum_RESTFul_Password and Spectrum_Password, and click Save. The password is updated in the CA_Alarm Service_1.0 Global Dataset. (Application) Update CA_Monitoring_Service_1.1 Global Dataset 1. Log in to CA Process Automation as an administrator. 2. Click Library. 3. Select the CA_Monitoring Service_1.1 folder. Note: If the folders list is too long, type CA_Monitoring Service_1.1 in the search field under Orchestrator. 4. Right-click EntMon_GlobalDataset and select Edit. EntMon_GlobalDataset content opens in a new window. 5. Expand the Spectrum folder. 6. Update the Value field for Spectrum_Perl_Password and Spectrum_RESTFul_Password, and click Save. Password is updated in CA_Monitoring_Service_1.1 global dataset. (Application) Update CA Spectrum Password in Project Austin Global Dataset 90 Platform Implementation Guide

91 Change and Update Passwords Update the service provider administrator CA Spectrum password in Project Austin Global Dataset 1. Log in to CA Process Automation as an administrator. 2. Click Library. Change CA SiteMinder Password 3. Expand the Project Austin folder. Note: If the folders list is too long, type Project Austin in the search field under Orchestrator. 4. Select the Austin folder. 5. Right-click EntMon_GlobalDataset and select Edit. 6. EntMon_GlobalDataset content opens in a new window. 7. Expand the Spectrum folder and select Spectrum_Perl_Password and Spectrum_restful_password. 8. Update the Value field to change the password and click Save. The CA Spectrum password is updated in Project Austin global dataset. 1. Log in to EEM2 computer as an administrator. 2. Click Start, All Programs, CA, SiteMinder, SiteMinder Policy Server Management Console. 3. Click the Super User tab. 4. Change the password. 5. Click Apply, OK. 6. Click the Status tab. 7. Click Stop and then click Start in the Policy Server section. 8. Click Start, Administrative Tools, Services, SiteMinder Policy Server. Chapter 4: Post Deployment 91

92 Change and Update Passwords (Application) Reconfigure the SSO After you change the CA SiteMinder password, reconfigure the SSO. 1. Log in to the OSS-SSO computer as an administrator 2. Click Start, All Programs, CA, SiteMinder, Secure Proxy Configuration Wizard. 3. Provide the version number of the Policy server, click Next. 4. Click Yes, and click Next. 5. Update the password in the password fields and click Next. 6. Enter the following values: Trusted Host Name OSS-SSO2.oss.ca Host Configuration Object SecureProxySvrHostConfigObj 7. Enter the policy server IP address, click Next. 8. Select FIPS Compatibility Mode, click Next. 9. Enter the following values and click Next: File name SmHost.conf Select a Location Select a location as appropriate. 10. The SSO is reconfigured. (Application) Regenerate the SSL 92 Platform Implementation Guide

93 Synchronize Appliance Dates, Times, and Time Zones After you reconfigure the SSO you regenerate the SSL. 1. Create the server key bin\openssl genrsa -des3 -out server.key Create a self-signed certificate bin\openssl req -config bin\openssl.cnf -new -x509 -key keys\server.key -out certs\spscert.crt 3. Open the httpd-ssl conf file at..\httpd\conf\extra\httpd-ssl.conf 4. Modify or verify that the directives of the server key and certs are correct. 5. Modify or verify that the value of the SSLPassPhraseDialog variable is custom. If not, set the value to custom. 6. Mosify or verify that the value of the SSLCustomPropertiesFile variable is <sps_home>\httpd\conf\spsapachessl.properties. If not, set the value. 7. Change the SSL Cache from shmcb to dbm (uncomment dbm, comment shcm 8. Save the conf file 9. Execute the following command from the command prompt: cd..\httpd\bin configssl.bat enable "Austin@123" cd..\secure-proxy\ssl 10. To verify, try the following URLs: Synchronize Appliance Dates, Times, and Time Zones For proper functioning of CA CSDP, synchronize the dates, times, and time zones of your Windows. Chapter 4: Post Deployment 93

94 Add Touchpoints to the Domain Orchestrator Add Touchpoints to the Domain Orchestrator Touchpoint definitions allow CA Process Automation to refer to agents so they can interact during a process execution. The following instructions describe how to add the four required touchpoints. Note: Ensure that the CA Process Automation agents are active before you add the touchpoints. Log in to the specific server and navigate from Administrative Tools, to Services, to ensure that the CA Process Automation Agent service is running on each box. 1. Open the CA Process Automation user interface with the URL: 2. Log in with the pamadmin credentials. 3. Click Configuration. 4. From the left-side pane, expand Domain, right-click Default Environment, and select Lock. 5. Right-click Default Environment and select Add Touchpoint. The Add Touchpoint Default Environment window opens. 6. Highlight the row with the corresponding hostname entry for the following touchpoints. OSS-SDM1.oss.ca and specify the value SDM in the Touchpoint Name field. OSS-PAM1.oss.ca and specify the value PAMClusterAgtsTC in the Touchpoint Name field. OSS-PAM2.oss.ca and specify the value PAMClusterAgtsTC in the Touchpoint Name field. OSS-SC1.oss.ca and specify the value CATALOG in the Touchpoint Name field. OSS-PAM1.oss.ca and specify the value OSS-PAM1 in the touchpoint name field. OSS-PAM2.oss.ca and specify the value OSS-PAM2 in the touchpoint name field. OSS-PAM1.oss.ca and specify the value PAM in the touchpoint name field. 7. Click Save. 94 Platform Implementation Guide

95 Configure Settings 8. Repeat steps from 5 through 7 to create all touchpoints. 9. From the left-side pane, right-click Default Environment and select Unlock. The touchpoints are added and you exit the CA Process Automation interface. Configure Settings A service provider configures settings so that requests can automatically send alerts. To send notifications, configure CA CSDP with your server and sender information. Chapter 4: Post Deployment 95

96 Configure Settings The following diagram illustrates how to configure settings for CA Service Catalog, CA Process Automation, and CA Service Desk Manager (CA SDM). To configure settings, perform the following tasks: 1. Review Prerequisites (see page 97). 2. Configure CA Service Catalog Settings (see page 97). Edit Administrator ID in CA Service Catalog (see page 98). 3. Configure CA Process Automation Settings (see page 99). Configure the Administrator in CA Process Automation (see page 101). Configure the Administrator in CA Service Catalog Global Dataset (see page 102). Configure the CA Process Automation Global Dataset (see page 105). 4. Update Settings and Addresses in CA Service Desk Manager (see page 107). 96 Platform Implementation Guide

97 Configure Settings Review Prerequisites Before you configure the settings, ensure that you perform the following tasks: Deploy the following products: CA Service Catalog. CA Service Desk Manager. CA Process Automation. Test the connectivity between CA Service Catalog and CA Process Automation. You can now configure settings for CA Service Catalog, CA Process Automation, and CA SDM. Configure CA Service Catalog Settings Automatic notifications require an update to the mail server settings in CA Service Catalog. Settings include an address, port, hostname, and user credentials. Note: A firewall can block port 25, which is typically the default SMTP, and block notification. Your IT staff can supply your mail server settings. 1. Log in to the service portal with administrator credentials. 2. Click Administration, Configuration. The Configuration page opens with a list of Options. 3. Select Mail Server. The list of properties you edit opens. 4. To update the configurations for the following properties, click the edit icon in the Modify column: From Address Defines the address that appears in the sender information. Chapter 4: Post Deployment 97

98 Configure Settings Host Name Defines the IP address of your server the service portal uses to relay s. The service portal sends directly to the server of the recipient using SMTP. Port Number User Id Defines the port number of the server that CA CSDP can use to send s with success or failure messages to recipients. Defines a user ID that can send from the designated server. User Password Defines the password of the user ID that can send from the designated server. 5. Enter the required configuration value, and click Update Configuration. 6. After you update the configurations, click Test. Edit Administrator ID in CA Service Catalog You receive a test successful message and the address that is used in the From Address field receives an from CA Service Catalog. You have configured and tested the mail server configuration. The following procedure details how you can update the spadmin ID in CA Service Catalog. 1. Log in to the service portal with administrator credentials. 2. Click Administration, Users. A page opens with an option to search by User ID. 3. Type spadmin in the User ID field, and click Search. The Users page opens. 98 Platform Implementation Guide

99 Configure Settings 4. Select the User ID. 5. Click the edit icon in the Actions column. The Edit User Profile page opens. 6. Edit the field and click OK. You have edited the administrator address. Configure CA Process Automation Settings Configuring the settings in CA Process Automation is part of the implementation and deployment process. 1. Log in to the CA Process Automation with administrator credentials. Chapter 4: Post Deployment 99

100 Configure Settings 2. Click Configuration, Domain, and Lock. A page opens displaying the domain settings. 3. Click the Modules tab. 4. Double-click from the Name list. The Default Properties page opens. 5. Provide the details in the Default Properties page. Note: Change the Mail Server port as per your set-up environment. 6. Click Save and Close. 100 Platform Implementation Guide

101 Configure Settings 7. Click Unlock. 8. To save the changes, click Yes on the confirmation message. Note: Ensure that you see the changes that you made in the Contents of Domain page. You have configured CA Process Automation . Configure Catalog Administrator in CA SDM dataset The configuration process includes setting a value for the administrator in CA SDM. 1. Log in to the CA Process Automation with administrator credentials. 2. Click Library, CA SDM to display the contents. Chapter 4: Post Deployment 101

102 Configure Settings 3. Double-click SDM_GlobalDataset. 4. Click Check Out. 5. Expand the Parameters folder. 6. Provide the address for Administrator_ , and FromAddress for catalog administrator. 7. Click Save and Close, Check In. You have configured the administrator addresses. Configure Catalog Administrator in CA Service Catalog Global Dataset The configuration process includes setting a value for the administrator in CA Service Catalog. If you do not set the value, the tenant onboarding request remains in the Unicenter Service Desk (USD) Change Order Created state. 1. Log in to the CA Process Automation with administrator credentials. 102 Platform Implementation Guide

103 Configure Settings 2. Click Library, CA SLCM to display the contents. Chapter 4: Post Deployment 103

104 Configure Settings 3. Double-click SLCM_GlobalDataset. 4. Click Check Out. 5. Expand the Misc Parameters CHANGE ME folder. 6. Provide the address for Administrator_ and FromAddress. 7. Click Save and Close, Check In. You have configured the administrator addresses. 104 Platform Implementation Guide

105 Configure Settings Configure CA Process Automation Global Dataset Configure the setting in the CA Process Automation global dataset. 1. Log in to the CA Process Automation with administrator credentials. 2. Click Library, double-click Project Austin. The Contents of Project Austin page opens. Chapter 4: Post Deployment 105

106 Configure Settings 3. Double-click Austin, EntMon_GlobalDataset. The EntMon_GlobalDataset page opens. 4. Expand PAM Configuration. 5. Click Check Out. 6. Provide the address for Administrator_ , and FromAddress for CA Process Automation Administrator. 106 Platform Implementation Guide