Chapter 1: Product Requirements and Specifications

Size: px

Start display at page:

Download "Chapter 1: Product Requirements and Specifications"

George Sharp
5 years ago
Views:

1 1 Chapter 1: Product Requirements and Specifications This chapter describes the product requirements for the Access Assurance Suite: Access Assurance Suite on page 2 Ticketing (Audit) and Authentication on the Classic Platform on page 10 Target Requirements For the current target requirements for PMMs and Connectors, refer to the following document on the Courion Customer Support Site: Support.Courion.Com>Downloads>Version Support>Current>Targets

2 2 Product Requirements and Specifications Access Assurance Suite This section describes the requirements for the Access Assurance Suite. For requirements that are specific to the Access Intelligence Engine or the Access Insight Solution, refer to the manual Installing the Access Intelligence Engine or the Access Insight Solution. Access Assurance Suite Hardware and Software Requirements Table 1 describes the Access Assurance Suite server requirements. These requirements apply to each server in a distributed installation with the exception of memory, as noted in the table. Table 1: Access Assurance Suite Requirements Microsoft Windows 2008 or 2008 R2 or 2012 (Standard, Enterprise, and Data Center editions) Note: If you are using Microsoft Windows 2008 or 2012, refer to Roles and Features Required for Windows 2008 and 2012 s (32-bit or 64- bit versions) on page 3. Note: The Windows Core installation only option is not supported. Microsoft.NET 3.5 Framework * Microsoft Chart Controls for Microsoft.NET Framework 3.5 * Microsoft Windows Identity Foundation * Microsoft XML 6.0 * and Microsoft XML 3.0 * Microsoft Visual C++ (x86) Redistributable * Microsoft ASP.Net MVC 3* Microsoft ASP.Net MVC 4* Microsoft.NET 4.0 Framework * Microsoft Message Queuing Note: If you use the distributed installation feature to install components of the Access Assurance Suite on different servers in the network, and you replicate Access Assurance Suite servers in your environment using cloning or virtualization, you must install Microsoft Message Queuing after you have replicated the servers. If you installed Microsoft Message Queuing first and subsequently replicated the servers, please contact Courion customer support for more information. See Problem Reports on page 141 for instructions on how to do this. Apache Tomcat * Java Runtime Environment *

3 Access Assurance Suite 3 Table 1: Access Assurance Suite Requirements (Continued) Enable the Microsoft Distributed Transaction Coordinator (MS DTC) service on any server that hosts one or more of the following: the Connector Framework, the Connector Framework Manager, or the Publisher Service. For information about how to enable MS DTC, refer to: Minimum of 4 GB of memory for single-server or distributed installations (8+ GB recommended) Minimum of 2.0 GHz processing speed (2.70+ recommended) Minimum of 2 CPUs (4+ CPUs recommended) NTFS formatted disk drive, 80 GB minimum * Included with the Access Assurance Suite installation executable. If not already installed, they are installed at the beginning of the installation process. Notes on Hardware and Software Requirements Support for Microsoft Windows 2008 and 2008 R2 includes support for the Microsoft Active Directory Transparent Synchronization Listener on Windows 2008 and 2008 R2. Insure that ASP.NET is enabled for IIS support. The requirements in this section assume that the Access Assurance Suite is the only application installed on the server. Please adjust the memory, CPU, and disk space requirements if other applications are installed on the server. For installations involving a virtual machine, each virtual machine must meet the requirements above. The virtual machine requirement is in addition to the requirements that must be met by the server running the virtual machines. The Access Assurance Suite should not be installed on an enterprise-critical server such as a Microsoft SharePoint server, a Microsoft Exchange server, or a domain controller. Supported Browsers The Access Assurance Suite supports Microsoft Internet Explorer versions 9 and 10. Roles and Features Required for Windows 2008 and 2012 s (32-bit or 64-bit versions) The following sections list the minimum set of roles and features that you need to install on Windows 2008 and 2012 servers for the Access Assurance Suite server, for Connector Framework-only servers, and for Connector Framework Manager-only servers. Requirements for Connectors and Password Management Modules (PMMs) Connectors and PMMs may require additional roles and features depending on the connector or PMM.

4 4 Product Requirements and Specifications Application Role for the Access Assurance Suite The Access Assurance Suite requires the Application Role with the role services and features shown in Table 2. The Application Role is not required for CF-only and CFM-only servers. Table 2: Application Role for the Access Assurance Suite Role Services and Features Access Assurance Suite CF-Only CFM-Only Application Foundation Web (IIS) Support COM+ Network Access Windows Process Activation Service Support HTTP Activation Message Queuing Activation TCP Activation Named Pipes Activation Web IIS Role for the Access Assurance Suite and CF-Only and CFM-Only s The Access Assurance Suite server as well as CF-only and CFM-only servers require the Web IIS Role with various role services and features. Table 3 lists these roles services and features and indicates if they apply to the Access Assurance Suite server, a CF-only server, or a CFM-only server. Table 3: Web IIS Role Services and Features Role Services Features Access Assurance Suite CF-Only CFM-Only Common HTTP Features Static Content Yes Yes Yes Default Document Yes Yes Yes Directory browsing Yes Yes Yes HTTP Errors Yes Yes Yes HTTP Redirection Application Development ASP.NET.NET Extensibility

5 Access Assurance Suite 5 Table 3: Web IIS Role Services and Features Role Services Features Access Assurance Suite CF-Only CFM-Only ASP Health Diagnostics HTTP Logging Yes Yes Yes Logging Tools Request Monitor Yes Yes Yes Tracing Security Basic Authentication Windows Authentication Anonymous Authentication Digest Authentication Client Mapping Authentication IIS Client Mapping Authentication URL Authentication Request Filtering IP and Domain restrictions

6 6 Product Requirements and Specifications Windows 2008 Features for the Access Assurance Suite and CF-Only and CFM-Only s The Access Assurance Suite server as well as CF-only and CFM-only servers require various Windows 2008 Features. Table 4 lists these features and indicates if they apply to the Access Assurance Suite server, a CF-only server, or a CFM-only server. Table 4: Windows 2008 Features Feature Access Assurance Suite CF-Only CFM-Only.Net Framework 3.5 Feature.Net Framework 3.5 WCF Activation HTTP Activation Non-HTTP Activation Message Queuing Feature Message Queuing Services Message Queuing Remote Administration Tools Feature Role Administration Tools Web (IIS) Tools Windows PowerShell Integrated Scripting Environment (ISE) Windows Process Activation Service Feature Process Model.Net Environment Configuration APIs Yes Yes Yes Yes Yes Yes Yes Yes Yes Web s Table 5: Access Assurance Suite Web Requirements IIS 7.0 on Microsoft Windows 2008, or IIS 7.5 on Microsoft Windows 2008 R2, or IIS 8.0 on Microsoft Windows 2012 Notes on Web s The Access Assurance Suite uses the default port 80 for IIS communication.

7 Access Assurance Suite 7 If your site uses SSL to protect information between the Access Options web browser and the web server, a digital certificate is required on the web server. For information on obtaining a digital certificate, refer to the product documentation for your web server. Access Assurance Suite with DIRECT! Access Option Table 6: Access Assurance Suite with DIRECT! Access Option Client A PC with Microsoft Windows XP Table 7: Access Assurance Suite with DIRECT! Credential Provider Access Option Client A PC with Microsoft Windows Vista and Windows 7

8 8 Product Requirements and Specifications Product-Specific Database Requirements Table 8: Product-Specific Database Requirements AccountCourier User Provisioning Solution ComplianceCourier Policy Verification Solution RoleCourier Role Management Solution PasswordCourier Password Provisioning Solution ProfileCourier Profile Management Solution Access Assurance Portal Applications Access Request Manager Solution Identity Mapping Solution Access Certification Solution PasswordCourier and PasswordCourier Support Staff Classic ProfileCourier Classic Microsoft SQL 2008 / 2008 R2 / 2012 (either Standard or Enterprise) is required to use Requester/Approver functionality, and Delegation functionality. Microsoft SQL 2008 / 2008 R2 / 2012 (either Standard or Enterprise) is required for the Verify action and to use Requester/Approver functionality, and Delegation functionality. Note: The Continuous Policy Monitoring and Governance feature requires the use of the Access Insight Engine (AIE). Please refer to the manual Installing the Access Intelligence Engine or the Access Insight Solution. Microsoft SQL 2008 / 2008 R2 / 2012 (either Standard or Enterprise) is required to store role definitions and to use Requester/Approver functionality, and Delegation functionality. Microsoft SQL 2008 / 2008 R2 / 2012 (either Standard or Enterprise) is required to use Requester/Approver functionality, Delegation functionality, and Password History. Microsoft SQL 2008 / 2008 R2 / 2012 (either Standard or Enterprise) is required to use Requester/Approver functionality, and Delegation functionality. Microsoft SQL 2008 / 2008 R2 / 2012 (either Standard or Enterprise) Note: Courion recommends Microsoft SQL 2008 R2 for new installations. No additional server requirements No additional server requirements For requirements that are specific to the Access Intelligence Engine or the Access Insight Solution, refer to the manual Installing the Access Intelligence Engine or the Access Insight Solution. Microsoft SQL Courion strongly recommends that Microsoft SQL be installed on a separate machine from the one used for the Access Assurance Suite server.

9 Access Assurance Suite 9 The requirements in Table 9 assume that the Microsoft SQL is dedicated for use by the Access Assurance Suite. If the SQL is shared with other applications, please adjust the memory, CPU, and disk space requirements specified in Table 9 accordingly. Table 9: Microsoft SQL Requirements 4 GB of memory (8+ GB recommended) 2.0 GHz processing speed (2.70+ recommended) Minimum of 2 CPUs (4+ CPUs recommended) 200 GB drive (minimum) Note: If you install SQL on the same machine as the Access Assurance Suite, please adjust the memory, CPU, and disk space requirements accordingly. Utilities Table 10: Requirements for Utilities Enable Users Utility Microsoft.NET Framework 3.5 Microsoft Internet Information running on Windows 2008 and Windows 2008 R2 Configuration Migration Utility Data Security Utility ConfigMover: Targets ConfigMover: Workflows ConfigPortalAuthentication No additional requirements The web server hosting this Java-based utility must be installed on the same system in which the Courion server is installed. No additional requirements No additional requirements No additional requirements XML Access Option The SPML Automator supports the following SPML 1.0 and 2.0 standards: addrequest modifyrequest deleterequest extendedrequest operationalattributes

10 10 Product Requirements and Specifications Ticketing (Audit) and Authentication on the Classic Platform PasswordCourier Classic, PasswordCourier Support Staff Classic, and ProfileCourier Classic See the manual Using PasswordCourier and PasswordCourier Support Staff Classic and Using ProfileCourier Classic for information about how to configure these applications on the classic platform. Table 11: Supported Data Sources for PasswordCourier Classic and ProfileCourier Classic Authentication Help Desks BMC Remedy Action Request System 3.0 Sun Java System Directory 5.2 Sun ONESystem Directory 5 iplanet Directory 5.0 Netscape Directory 4.11 Directories Microsoft Windows 2000 Novell edirectory Microsoft Access 2000 with appropriate ODBC driver Microsoft Access 2003 with appropriate ODBC driver Microsoft SQL 7.0 with appropriate ODBC driver Microsoft SQL 2000 with appropriate ODBC driver Microsoft SQL 2005 with appropriate ODBC driver Databases Oracle8i with appropriate ODBC driver and Required Supported Files (RSF) Oracle9i with appropriate ODBC driver and Required Supported Files (RSF) Oracle Database 10g with appropriate ODBC driver and Required Supported Files (RSF) Sybase Adaptive with appropriate ODBC driver Table 12: Supported Data Sources for PasswordCourier Classic and ProfileCourier Classic Ticketing Help Desks HP OpenView ServiceCenter (previously known as Peregrine ServiceCenter) 3.0 Service Pack 2b BMC Remedy Action Request System 3.0

11 Ticketing (Audit) and Authentication on the Classic Platform 11 Table 12: Supported Data Sources for PasswordCourier Classic and ProfileCourier Classic Ticketing Microsoft Access 2000 with appropriate ODBC driver Microsoft Access 2003 with appropriate ODBC driver Microsoft SQL 7.0 with appropriate ODBC driver Microsoft SQL 2000 with appropriate ODBC driver Microsoft SQL 2005 with appropriate ODBC driver Databases Oracle8i with appropriate ODBC driver and Required Supported Files (RSF) Oracle9i with appropriate ODBC driver and Required Supported Files (RSF) Oracle Database 10g with appropriate ODBC driver and Required Supported Files (RSF) Sybase Adaptive with appropriate ODBC driver

12 12 Product Requirements and Specifications

Product Requirements of the Access Assurance Suite

Product Requirements of the Access Assurance Suite Release 8.5 1000 Holcomb Woods Parkway Suite 401 Roswell, GA 30076 Domestic Toll Free: 1-866-Courion Fax: (770) 573-3743 Trademarks Copyright 1996-2016