TMEE 5.0 System Requirements

Transcription

1 TMEE 5.0 System

2 Contents 2 Contents System... 3 PolicyServer... 3 PolicyServer System...3 Database Considerations...4 Required Installation Files...4 Required Accounts...5 Scaling: PolicyServer and SQL Database...5 Management Consoles... 7 Microsoft Management Console System... 7 Control Manager System...7 OfficeScan System... 8 Agents...9 Full Disk Encryption System... 9 Encryption Management for Microsoft BitLocker System...10 Encryption Management for Apple FileVault System...10 File Encryption System... 11

3 System 3 System This chapter outlines the system requirements for Trend Micro Endpoint Encryption. Topics include: PolicyServer on page 3 Management Consoles on page 7 Agents on page 9 PolicyServer This section outlines the requirements for PolicyServer, including hardware and software requirements, the files needed for the installations, and also the accounts necessary to set up the database and Windows server environments. PolicyServer System Table 1: PolicyServer System See Database Considerations on page 4 RAM Disk space Operating system Windows Server 2003 SP2 32-bit/64-bit Windows Server 2008 / 2008 R2 64-bit Database Microsoft SQL 2005 SP3 (32-bit/64-bit) / 2008 / 2008 R2 Microsoft SQL Express 2005 SP3 / 2008 Mixed Mode Authentication (SA password) installed Reporting services installed Web server and other software Application Server Microsoft IIS PolicyServer 5.0 requires one IIS location. Allow Active Server pages Allow ASP.NET Both Microsoft.Net Framework 2.0 SP2 (or 3.5) and 4.0 Windows Installer 4.5 (SQL Express) Additional for Windows Server 2008 and 2008 R2 The following table explains the additional requirements to install PolicyServer on Microsoft Windows Server 2008 or Microsoft Windows Server 2008 R2.

4 System 4 Server OS R2 Roles Install application server role Install web server role Features Add SMTP Add Microsoft IIS support Other Prerequisites Install Microsoft.Net Framework 4.0 Must install SQL 2008 SP1 to run SQL 2008 No.NET upgrade required Database Considerations When installing PolicyServer, it is recommended to have at least two dedicated servers: 1. A dedicated server for the database, or add the database to an existing SQL cluster. 2. A dedicated server for the PolicyServer services. Virtual hardware is supported under VMware Virtual Infrastructure. Table 2: PolicyServer Hardware Separate Hosts Single Host PolicyServer Host (3,000 Users) SQL Server Host (3,000 Users) PolicyServer and SQL Server (1,500 Users) 2GHz Dual Quad Core Core2 Intel Xeon 40GB hard disk space 2GHz Dual Quad Core Core2 Intel Xeon 100GB hard disk space 2GHz Quad Core Core2 Intel Xeon 120GB hard disk space Required Installation Files Copy all installation files to the local drive before installation. Table 3: Required Files to Install PolicyServer File PolicyServerInstaller.exe PolicyServerMMCSnapinSetup.msi ClientWebServices.msi TMEEForwardInstall.msi Purpose Installs PolicyServer databases and services. Optionally, the Microsoft Management Console can install at the same time. Installs the Microsoft Management Console only. Installs the Client Web Proxy for environments that have PolicyServer and legacy agents in different LANs. Installs a web proxy for environments that have PolicyServer and 5.0 agents in different LANs. PolicyServer includes a 30-day trial license. A license file is not longer required to upgrade to the full product version. For more information, see Maintenance and Technical Support.

5 System 5 Required Accounts The following table explains the function and description of the accounts required by PolicyServer. Table 4: Accounts Needed to Install PolicyServer Account Function Description SQL SA PolicyServer Installer Account is used only to create the PolicyServer databases. SQL MADB PolicyServer Windows Service Account created during installation to authenticate to PolicyServer databases. Local Administrator PolicyServer Windows Service and IIS Account used to run the PolicyServer Windows Service and web service application pools. Scaling: PolicyServer and SQL Database Below are recommendations for scaling a single site deployment offering a range of hardware options, accounting for system redundancy and zero point of failure. Table 5: Scaling with No Redundancy Devices Minimum PolicyServer front-end PolicyServer SQL Database 1,500 PolicyServer and database multi-role server 2GHz Quad Core Core2 Intel Xeon 120GB RAID 5 hard disk drive space 3,000 1 PolicyServer front-end host Installed on PolicyServer front-end host 1 PolicyServer SQL database host 2GHz Quad Core Core2 Intel Xeon 100GB RAID 5 hard disk drive space Table 6: Scaling with Redundancy and High-Availability Devices Minimum PolicyServer front-end PolicyServer SQL Database 10,000 2 PolicyServer front-end hosts 20,000 4 PolicyServer front-end hosts 2GHz Dual Quad Core2 Intel Xeon 1 PolicyServer SQL database hosts 2GHz Quad Core Core2 Intel Xeon 120GB RAID 5 hard disk drive space 1 PolicyServer SQL database hosts 2GHz Quad Core2 Intel Xeon 16GB RAM

6 System 6 Devices Minimum PolicyServer front-end PolicyServer SQL Database 160GB RAID 5 hard disk drive space 40,000 8 PolicyServer front-end hosts 2 PolicyServer SQL database cluster hosts 2GHz Quad Core Core2 Intel Xeon 16GB RAM 320GB RAID 5 hard disk drive space Table 7: Scaling with Zero Single Point of Failure Devices Minimum PolicyServer front-end PolicyServer SQL Database 10,000 2 PolicyServer front-end hosts 2GHz Quad Core Core2 Intel Xeon Virtual hardware is supported under VMware Virtual Infrastructure. 20,000 4 PolicyServer front-end hosts Virtual hardware is supported under VMware Virtual Infrastructure. 40,000 8 PolicyServer front-end hosts Virtual hardware is supported under VMware Virtual Infrastructure. 2 PolicyServer SQL database hosts 60GB RAID 5 hard disk drive space 130GB RAID 5 shared SAN hard disk drive space Microsoft or VMware on virtual hardware does not support Microsoft Cluster Service. 2 PolicyServer SQL database hosts 60GB RAID 5 hard disk drive space 180GB RAID 5 shared SAN hard disk drive space Microsoft or VMware on virtual hardware does not support Microsoft Cluster Service. 4 PolicyServer SQL database hosts 16GB RAM 60GB RAID 5 hard disk drive space 350GB RAID 5 shared SAN hard disk drive space

7 System 7 Devices Minimum PolicyServer front-end PolicyServer SQL Database Microsoft or VMware on virtual hardware does not support Microsoft Cluster Service. Scaling Example Figure 1: PolicyServer Scaled to Support 40,000 Users Management Consoles This section outlines the requirements for the management consoles. Microsoft Management Console System The following table explains the system requirements to install and use Microsoft Management Console in a different environment than the server or servers that PolicyServer is installed. Table 8: Microsoft Management Console System RAM Disk space Operating system Intel Core 2 or compatible processor 512MB 100MB minimum Connectivity with PolicyServer Any Microsoft Windows operating system supported by PolicyServer or the Endpoint Encryption agents Others Microsoft.NET Framework 4.0 Control Manager System The following table explains the requirements to use Control Manager for server management.

8 System 8 Table 9: Control Manager Control Manager Server Control Manager, Patch 3 RAM 2GB minimum 4GB recommended Disk Space 10GB minimum 20GB recommended Others Connectivity with PolicyServer For additional Control Manager system requirements and setup instructions, see the Control Manager documentation available at: OfficeScan System The following table explains the system requirements to install the OfficeScan and use the Endpoint Encryption Deployment Tool plug-in to deploy agents. Table 10: OfficeScan OfficeScan Server Any of the following versions: 10.6 SP Patch 5 Plug-in Manager 2.0 for v10.6 SP2 1.0 for v10.5 Patch 5 RAM 1GB minimum with at least 500MB dedicated to OfficeScan 2GB recommended Disk space 3.1GB minimum if the server has: OfficeScan server OfficeScan client Policy Server for Cisco NAC Integrated Smart Protection Server (local) 3.5GB minimum if the server has: OfficeScan server OfficeScan client Integrated Smart Protection Server (remote) Connectivity with PolicyServer Connectivity with OfficeScan endpoints

9 System 9 Others For additional OfficeScan system requirements and setup instructions, see the OfficeScan documentation available at: Agents This section outlines the requirements for all Endpoint Encryption agents. Full Disk Encryption System This section describes the minimum and recommended system requirements necessary to install Full Disk Encryption. Table 11: Full Disk Encryption System RAM Intel Core 2 or compatible processor 1GB minimum Disk space 30GB minimum 20% free disk space required 256MB contiguous free space required Communication with PolicyServer required for managed agents Operating system Windows 8 (32-bit/64-bit) Windows 7 (32-bit/64-bit) Windows Vista with SP1 (32-bit/64-bit) Windows XP with SP3 (32-bit only) Other software Additional Windows 8 requirements: Microsoft.NET Framework 3.5 enabled For devices with UEFI, see Preparing the Endpoint to change the boot priority. Additional Windows XP requirements: Microsoft.NET Framework 2.0 SP1 or later Microsoft Windows Installer 3.1 Hard disk Seagate DriveTrust drives Seagate OPAL and OPAL 2 drives RAID and SCSI disks are not supported. Full Disk Encryption for Windows 8 does not support RAID, SCSI, edrive, or OPAL 2 drives. Other hardware Software encryption ATA, AHCI, or IRRT hard disk controller

10 System 10 RAID and SCSI BIOS settings are not supported. Hardware encryption AHCI hard disk controller No other BIOS settings are not supported. Encryption Management for Microsoft BitLocker System This following table explains the minimum and recommended Encryption Management for Microsoft BitLocker system requirements. Table 12: Encryption Management for Microsoft BitLocker System Memory Intel Core 2 or compatible processor. are the based on Windows system requirements: 64-bit systems: 2GB 32-bit systems: 1GB Disk space 30GB minimum 20% free disk space required 100MB contiguous free space required Hard disk Standard drives supported by Windows Connectivity with PolicyServer Operating system Windows 8 (32-bit/64-bit) Enterprise and Professional editions Windows 7 (32-bit/64-bit) Enterprise and Ultimate editions Other software Trusted Platform Module (TPM) 1.2 or higher Full Disk Encryption is not installed Windows BitLocker is disabled Microsoft.NET Framework 3.5 Encryption Management for Apple FileVault System This following table explains the minimum and recommended Encryption Management for Apple FileVault system requirements. Table 13: Encryption Management for Apple FileVault System Requirement Intel Core 2 or compatible processor

11 System 11 Requirement Memory 512MB minimum 1GB recommended Disk space 400MB minimum Connectivity with PolicyServer Operating system Mac OS X Lion Mac OS X Mountain Lion Other software Mono runtime environment (MRE) 2.1 Apple FileVault is disabled File Encryption System The following table explains the File Encryption system requirements. Table 14: File Encryption System Intel Core 2 or compatible processor. RAM 1GB minimum Disk space 30GB minimum 20% free disk space required Communication with PolicyServer required for managed agents Operating system Windows 8 (32-bit/64-bit) Windows 7 (32-bit/64-bit) Windows Vista with SP1 (32-bit/64-bit) Windows XP with SP3 (32-bit only) Other software Additional Windows 8 requirements: Microsoft.NET Framework 3.5 enabled Additional Windows XP requirements: Microsoft.NET Framework 2.0 SP1 or later Microsoft Windows Installer 3.1