Revised: February 14, 2012

Transcription

1 CA Role & Compliance Manager r12.5 SP6 - Platform Support Matrix Revised: February 14, 2012 The following matrix lists the CA Role & Compliance Manager r12.5 SP6 supported platforms as follows: Server Environments - Platforms that are supported as environments for hosting CA RCM server components. Client Environments - Platforms that are supported as environments for hosting CA RCM Client components. Connectors Platforms that are supported as targets for import and export. Password Management Components - Platforms that are supported for password management. Server Environments The following section describes the supported environments (such as operating systems, application servers, and RDBMS) for hosting the CA RCM server components. Operating Systems Operating System Release Additional Information Microsoft Windows XP SP3 (32 bit) / SP2 (64 bit) 2003 Server SP2 (32 & 64 bit) Virtualization supported on vsphere R2 Server SP2 (32 & 64 bit) 2008 Server SP2 (32 & 64 bit) 2008 Server R2 SP1 (64 bit) IBM AIX 5.3 TL8 RHEL Red Hat 5.5 (32 & 64 bit) Virtualization supported on vsphere 4.1 Note: CSM is supported on JBOSS only (RHEL and Windows) 1

2 Application Servers Application Server Release Java Virtual Machine IBM WebSphere 6.1.0_ SR6 (AIX) JBoss (Windows and LINUX) _23 Repositories Databases The following matrix describes the supported CA RCM databases. The database is a required repository for storing environment configuration information, workflow configuration and status, task history information and optionally (if configured) audit records. Repository Release Additional Information Microsoft SQL Server 2005 SP4, 2008 Standard & Enterprise Editions SP2, 2008 R2 Oracle 10.2g and 11g R2 Standard & Enterprise Editions, Oracle RAC Additional CA Interoperability Matrix The following matrix describes CA RCM additional interoperability with other CA products. CA Product Release Additional Information CA Identity Manager r12.0 CRx, r12.5 SP11 CA User Activity r12.5 SP1 Reporting Module (Enterprise Log Manager ) CA SiteMinder r12.0 SP3 and later Including SiteMinder Multi zones 2

3 Client Environments The following matrix describes the supported CA RCM client environments. It includes supported web browsers and operating systems for running the CA RCM Client Tools and the workflow designer tool. Supported Operating Systems Operating System Release Additional Information Microsoft Windows XP SP3 (32 bit) / SP2 (64 bit) 2003 Server SP2 (32 & 64 bit) 2003 R2 Server SP2 (32 & 64 bit) 2008 Server SP2 (32 & 64 bit) 2008 Server R2 Sp1 (64 bit) Windows 7 SP1 Virtualization supported on vsphere 4.1 Supported Web Browsers Web Browser Release Additional Information Microsoft Internet Explorer 7.0 / 8.0/9.0 IE9 compatibility mode only Connectors The following matrix describes the supported CA RCM connectors (endpoints for import and export). SUPPORTED CONNECTOR ENDPOINT USE CASES Compliance (CA Role & Compliance Manager only) 3

4 Integrated Provisioning & Compliance (CA Role & Compliance Manager and CA Identity Manager) SUPPORTED CONNECTOR SERVERS The following are software prerequisites for installing the Java Connector Server (JCS) and the C++ Connector Server (CCS). OS Release JCS CCS Version/Level Microsoft Windows 2003 SP R2 SP2 Yes Yes 32-bit and 64-bit (support for 32-bit mode on 64-bitmachines). Support for Standard Edition and Enterprise Edition. 4

5 2008 SP R2, 2008 R2 SP1 Sun Solaris 9, 10 Yes Yes SPARC 64-bit machines (UltraSPARC IIIi, T1). Support for (LDOMs and Zones Whole Root and Sparse) on Solaris 10. Limited connectors are supported on CCS (UNIX ETC, UNIX NIS, Access Control). Redhat Linux 5.x Yes No 64-bit support only (support for 32-bit mode on 64-bit machines). VMware ESX 3.x,4.x Yes Yes Support for the Windows and Linux platforms as listed in this table. SUPPORTED CONNECTOR XPRESS PLATFORMS The following are software prerequisites for installing Connector XPress. OS Release Version/Level Microsoft Windows 2003 SP2, 2003 R2 SP SP R2, 2008 R2 SP1 32-bit and 64-bit. Support for Standard Edition and Enterprise Edition. 5

6 CERTIFIED CONNECTOR XPRESS ENDPOINT TYPES Connector Xpress allows for the creation of dynamic connectors, generated using the Connector Xpress for RDBMS (JDBC) wizard or Connector Xpress for LDAP (JNDI) wizard to manage rows in arbitrary database tables or LDAP repositories. RCM Mapping (Deep and Shallow use cases): Deciding on your role modeling strategy affects how you map endpoint objects to CA RCM objects when connecting to endpoint systems. You can use CA RCM to manage your organizational role model in the following two ways: You can analyze your roles based on business roles. This concept allows you to design your role model around the roles in your entire organization. This defines the shallow use case. You can analyze your roles based on application. This concept allows you to design your role model around privileges you want to give to users per application. This defines the deep use case. The endpoint versions certified with Connector Xpress by CA Technologies are: Endpoint Endpoint Release Compliance RCM RCM Mapping (Shallow/Deep /Both) Integrated IDM&RCM Server Platform Agentless Comment CA Directory r12 SPx Yes Shallow Yes JCS Yes LDAP Microsoft ADAM 2003 SP2 Enterprise 2008 SP2 (AD LDS) Yes Shallow Yes JCS Yes LDAP Sun One Directory 6.3 Yes Shallow Yes JCS Yes LDAP Novell edirectory 8.8 Yes Shallow Yes JCS Yes LDAP Oracle Internet Directory 10g Yes Shallow Yes JCS Yes LDAP Microsoft SQL Server 2005 SP Yes Both Yes JCS Yes RDBMS Oracle 10g r2 11g r1 Yes Both Yes JCS Yes RDBMS IBM DB2 9.x Yes Both Yes JCS Yes RDBMS 6

7 IBM DB2 for z/os v8.1.0 Yes Both Yes JCS Yes RDBMS IBM DB2 for i iseries/40 Yes Both Yes JCS Yes RDBMS Sybase Adaptive Enterprise Server v15.01 Yes Both Yes JCS Yes RDBMS CA Ingres 3.0 Yes Both Yes JCS Yes RDBMS MySQL Enterprise Server v5.0 Yes Both Yes JCS Yes RDBMS Informix 10, 11.5 Yes Both Yes JCS Yes RDBMS IBM DB2 for z/os v8.1.0 Yes Both Yes JCS Yes RDBMS SUPPORTED CONNECTOR ENDPOINT TYPES The following matrix lists the supported endpoints for which connectors are formally provided. For CA Role & Compliance Manager, the CCS is accessed via the JCS (CCS acts as a proxy). For CA Identity Manager, the CCS can be accessed directly from the IMPS. Endpoint CA Access Control (Unix) CA Access Control (Windows) CA Arcot WebFort CA Data Loss Prevention Endpoint Release Compliance RCM RCM Mapping (Shallow /Deep) Integrated IDM&RCM Server Platform Agentless Comment r12, r12 SP1, r12.5 SP2 --> SP4 Yes Shallow Yes CCS Yes r12, r12.5 SP2 --> SP4 Yes Shallow Yes CCS Yes Arcot Platform (or higher) is No N/A No JCS Yes required. r12.5 SP1, Yes Shallow Yes JCS Yes 7

8 r12.5 CA Embedded Entitlements Manager 8.2 No N/A CA Ingres 3.0 No N/A CA Single Sign-On r12.1 No N/A comments CCS Yes note 9. note 8. comments CCS Yes note 9. comments CCS Yes note 9. Requires CA LDAP Server for z/os r12 or r14. note 9. CA-ACF2 14 No Shallow Yes IMPS No CA-ACF2 ACFESAGE 14, 15 Yes Both No JCS comments CA-Top Secret 14 No Shallow Yes IMPS No CA-Top Secret TSSCFILE 14, 15 Yes Both No JCS comments Requires ACFESAGE utility (contact CA mainframe support) to extract data from mainframe system. Version PTF RO34346 of the ACFESAGE utility has been certified. Requires CA LDAP Server for z/os r12 or r14. Requires TSSCFILE utility 8

9 (contact CA mainframe support) to extract data from mainframe system. r14 and r15 versions of the TSSCFILE utility have been certified. entrust PKI 7.0, 7.1 No N/A comments CCS Yes note 9. Google Apps Yes Shallow Yes JCS Yes Integration using the Google Apps Provisioning API Version 2.0. HP - NonStop D46 or above No N/A comments CCS No note 9. HP- Tru64 5.1B Yes Shallow Yes CCS No note 4. HP-UX 11i v3 Yes Shallow Yes CCS No note 3. IBM AIX 5L 6.1, 7 Yes Shallow Yes CCS No note 5. IBM DB2 UDB 8.2, 9.5 No N/A Yes CCS Yes note 8. note 9. IBM DB2 z/os 8.1, 9.1 No N/A Yes CCS Yes note 8. note 9. IBM i5/os (AKA OS/400) 5.0 r3 & r4, 6.0 r1 No N/A Yes JCS No note 9. 9

10 IBM Lotus Notes Domino Server 7.x, 8.x.x Yes Shallow Yes JCS Yes IBM RACF - Security Server for z/os 1.9, 1.10 No Shallow Yes IMPS No IBM RACF IRRDBU00 1.9, 1.10 Yes Both No JCS Kerboros 5.0 No N/A Yes JCS Yes Microsoft Active Directory 2003 R2 SP2 2008, 2008 R SP2 Yes Shallow Yes CCS Yes comments Domino Server supported on Windows, AIX and Linux. Domino Server supported in 32- bit mode only. Requires CA LDAP Server for z/os r12 or r14. Requires IRDBU00 utility (contact CA mainframe support) to extract data from mainframe system. Version 1.9, 1.10 of the IRRDBU00 utility has been certified. Sun Implementation on Solaris 10 only. note bit is only supported for 2003 R2 and not 2008 R R2 Datacenter edition is supported 10

11 2003 SP SP SP1 Yes Shallow Yes CCS No 2005 SP3 Microsoft Office Communication Server 2007 R2 and Microsoft Live Communications Server 2003 are supported Remote agent for certain features on 2003 SP2, and most features on 2007 SP3 and CCR (Cluster Continuous Replication) supported with MS Exchange 2007 SP3 only. Exchange 2003 agent is 32-bit only. Exchange 2007/2010 agent is 64-bit only. Microsoft Exchange Microsoft SQL Server 2008 Yes Shallow Yes JCS Yes note 8. Support for 32- bit & 64-bit. Microsoft Enterprise & Windows 7 Yes Shallow Yes CCS No Ultimate Editions SP2, Windows Microsoft 2003 R2 Standard Edition Windows SP2, 2008 as well as Server SP2, 2008 Yes Shallow Yes CCS No Windows 11

12 R2, 2008 R2 SP1 Enterprise Edition are supported VMware ESX 3.x and 4.0 running Windows server virtual machine is supported 32-bit and 64-bit machines are supported R2 Datacenter edition is supported Support for 32- bit. Enterprise and Business Edition are supported. Support for 32- bit. Microsoft Windows Vista SP2 Yes Shallow Yes CCS No Microsoft Windows XP Professional SP3 Yes Shallow Yes CCS No NCR MP-RAS 3.03 Yes Shallow Yes CCS No note 5. Novell NetWare 6.5 No N/A Yes CCS Yes note 9. Novell SuSE Linux Enterprise Server 9, 10.1 Yes Shallow Yes CCS No note 2. OpenVMS 8.3 No N/A Yes CCS No note 9. Oracle E- Business Suite Oracle Server 11i, 12.1.x Yes Shallow Yes CCS Yes 10g r2, 11g r1 Yes Shallow Yes JCS Yes RAC not supported. Oracle Server also supported 12

13 PeopleSoft HRMS 8.9, 9.1 Yes Both Yes JCS Yes dynamically via Connector Xpress. PeopleTools v8.48, v8.49, v8.50 Red Hat Enterprise Linux (AS, ES) 4.x, 5.x Yes Shallow Yes CCS No note 2. RSA SecurID SP3 Yes (for 7.1 SP3 only) Both Yes comment s Salesforce Yes Shallow Yes JCS Yes SAP NetWeave r 2004 and above SAP R3 Yes Shallow Yes JCS Yes comments Windows 2003 SP2 and Solaris 10 support Red Hat Linux 5.x supported for 7.1 only RSA SecurID 7.1 releases prior to SP3 are no longer supported. Agent and CCS required for RSA SecurID 6.1. Agentless and JCS for RSA SecurID 7.1 Integration using the Force.com Web Services API Version 17.0 Need to include the SAP NetWeaver Application Server ABAP (AS ABAP) 13

14 SAP UME SAP NetWeave r 04 SPS14 and above SAP NetWeave r 7.0 SPS 05 and above Yes Shallow Yes JCS Yes Siebel CRM 7.8, 8.1 No N/A No CCS Yes Sun Solaris 9,10 Yes Shallow Yes CCS No in the SAP NetWeaver installation. The Kernel version of the SAP AS ABAP system needs to be 6.4 and above. Need to include the SAP NetWeaver Application Server Java (AS Java) in the SAP NetWeaver installation. Not supported on CCS running on Windows 2008 R2 due the Siebel Client support limitation note 1. Solaris 10 Zones (Whole Root and Sparse) are supported. 14

15 Note Comments ETC, NIS, and NIS+ supported on SPARC and Intel/x86 platforms. The Solaris/SPARC remote agent works on SPARC 1 32-bit and 64-bit processors. The Solaris/Intel remote agent works on Intel x86 32-bit and AMD 64-bit processors. ETC and NIS supported on Intel x86 platforms. The Linux/x86 remote agent works on Intel/AMD x86 32-bit, 64-bit, 2 and Itanium 64-bit processors. The Linux/S390 remote agent works on IBM s bit and s390x 64-bit processors. ETC, NIS and TCB supported on Itanium 2. Shadow mode not supported. The HP-UX remote agent works on PA-RISC 3 32-bit, 64-bit, and Itanium 64-bit processors. 4 ETC supported on alpha platform. The Tru64 remote agent works on Alpha 64-bit processors. ETC and NIS supported on RS/6000 and Power platforms. The AIX remote agent works on Power PC 32-bit and 64-bit 5 processors. 6 ETC supported on Intel IA32 platform. The NCR remote agent works on Intel x86 32-bit processors. Novell Netware is not supported on Provisioning Server & Connector Server that are installed on Microsoft Windows 7 Server 2008 (32-bit and 64-bit and Windows Server 2003 (64-bit)). 8 Also available as a dynamic Connector via Connector Xpress. In an Integrated deployment, this Connector supports Provisioning but not Compliance. To request Compliance 9 support for this Connector, please raise an enhancement request via CA Technologies support. Supported Endpoints using Direct Connectivity The following connectors apply only when CA RCM connects directly to the endpoint (not using an identity management system). Endpoint CSV Files CSV Mapping LDIF Mapping Additional comments 7 CSV files in RCM proprietary format Data mapping from standard CSV file Data mapping from standard LDIF file - only Base32 encoding Supported Endpoint Connectivity using CA Identity Manager (Old Connectors) Apply when connecting to endpoints using CA Identity Manager. Endpoint integration is available using two methods: Legacy and Customizable Connector. 15

16 Note: These methods are supported for backward compatibility purpose only, will be supported for upgrading customer only For more details about the End points versions supported legacy connectors please refer to RCM 12.5 SP3 support matrix. Integration Examples for connectivity using Third-party Identity Management Systems The following examples are available on request via CA Services. IBM TIM Sun IM Sample Kettle PDI Data Transforms CA RCM provides the ability to invoke Pentaho Data Integration (PDI) transformations and jobs. This feature allows for complex ETL (Extract, Transform, and Load) operations during data import. CA support site provides a list of the available transforms. Link: RCM ships with PDI version 4.2. The installation process extracts the software with additional RCM dedicated input/output plugins for customers to use in their environment. For more information, check the product documentation. Formatted: Font color: Auto, Kern at 18 pt Please note that CA Technologies does not support the transforms. Password Management Components The following section describes the supported CA RCM portal password management components. Target System Additional comments Microsoft Active Windows 2003 or 2008 Server Directory CA etrust Directory R12.5.x 16

17 CA SiteMinder CA Identity Manager r12.0 SP3 latest CR R12.5 SP8 17