Management Center. Installation and Upgrade Guide. Version 8 FR4

Transcription

1 Management Center Installation and Upgrade Guide Version 8 FR4

2 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE ii AppSense Limited, 2012 All rights reserved. part of this document may be produced in any form (including photocopying or storing it in any medium) for any purposes without the written permission of AppSense Limited, except in accordance with applicable law. Furthermore, no part of this document may be sold, licensed or distributed. The doing of an unauthorized act in relation to a copyright work may result in both a civil claim for damages and criminal prosecution. The information contained in this document is believed to be accurate at the time of printing and may be subject to change without notice. Any reference to a manufacturer or product does not constitute an endorsement of, or representation or warranty (whether express, implied or statutory) in respect of, the manufacturer or product or the use of the product with any AppSense software. This document does not grant any right or license to you in respect of any patents, patent applications, trademarks, copyrights, or other intellectual property rights in or relating to the subject matter of this document. Where relevant, any AppSense software provided pursuant to or otherwise related to this document shall only be licensed to you on and subject to the end user license agreement which shall be displayed and which you shall be required to accept prior to accessing or using the software. AppSense is a registered trademark of AppSense Holdings Limited or its affiliated companies in the United Kingdom, the United States and/or other countries, Microsoft, Windows and SQL Server are all registered trademarks or Microsoft Corporation in the United States and/or other countries. The names of actual products and companies mentioned in this document may be the trademarks of their respective owners.

3 C O N T E N T S Welcome v About This Document vi Terms and Conventions vi Feedback vi Section 1 Introduction to AppSense Management Center 1 Management Center Overview 2 Components 3 Key Benefits 4 Section 2 Installation 5 Prerequisites 6 Installing AppSense Management Center 7 AppSense Desktopw Installer 8 Manual Installation 12 Installing the CCA 13 Integrated Install CCA Functionality 14 Uninstallation 16 Section 3 Upgrades 18 Upgrade the Management Center 19 Upgrading with the Desktopw Installer 19 Section 4 Server Configuration 21 Server Configuration Utility 22 Server Configuration Wizard 22 Configure a Server using Low SQL Privileges 28 Configuring Secure Communications 29 iii

4 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE iv Section 5 Configuration 30 Management Center Components 31 About the Console 31 Management Console 33 Management Server 33 Database 34 Product Consoles 34 CCA on Managed Computers 34 Setup Tasks 35 Section 6 Patching 43 Patching Introduction 44 Patching Terminology 44 Installing Patches 45 Installing a Patch Using the Management Center 45 Installing and Uninstalling a Patch Using the Command Line 47 Rolling-back Patches 48 Appendixes Appendix A CCA Installation 50 Install CCA Manually 51 Install CCA in Silent Mode 53 Appendix B Files Created During Installation and rmal Operation 54 Appendix C MSI Custom Actions Usage 55 MSI Custom Actions 56 Management Console Custom Actions 56 Management Server Custom Actions 63 Client Communications Agent Custom Actions 71 Appendix D Files Remaining After An Uninstall 76 Appendix E Third Party Public Symbols Usage 77 Appendix F Third Party Unsigned Binary Usage 78 Appendix G Apache License 79

5 WELCOME In this Section: About This Document on page vi Terms and Conventions on page vi Feedback on page vi

6 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE WELCOME About This Document vi ABOUT THIS DOCUMENT This Installation and Upgrade Guide shows how to install and setup the components of AppSense Management Center. The guide also provides details on upgrading from previous versions of AppSense Management Center. TERMS AND CONVENTIONS The following tables shows the textual and formatting conventions used in this document: Convention Bold Code Italic Green + underlined Use Highlights items you can select in Windows and the product interface, including nodes, menus items, dialogs and features. Used for scripting samples and code strings. Highlights values you can enter in console text boxes and titles for other guides and Helps in the documentation set. Indicates a glossary link. > Indicates the path of a menu option. For example, Select File > Open" means "click the File menu, and then click Open." Information tables - Highlights important points of the main text or provides supplementary information, additional techniques and help for users. Also used to provides links to further information which include more detail about the topic, either in the current document or related sources Caution/Warning Provides critical information relating to specific tasks or indicates important considerations or risks. FEEDBACK The AppSense Documentation team aim to provide accurate and high quality documentation to assist you in the installation, configuration and ongoing operation of AppSense products. We are constantly striving to improve the documentation content and value any contribution you wish to make based on your experiences with AppSense products. Please any comments to: documentation.feedback@appsense.com

7 1 Introduction to AppSense Management Center In this Section: Management Center Overview on page 2 Key Benefits on page 4

8 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 1 INTRODUCTION TO APPSENSE MANAGEMENT CENTER Management Center Overview 2 MANAGEMENT CENTER OVERVIEW AppSense Management Center is the framework that enables the AppSense products, Application Manager, Environment Manager and Performance Manager, to be used across an entire enterprise. AppSense Management Center is a scalable multi tier system which enables the central management and secure deployment of configuration information to thousands of endpoint devices and user environments. The Management Center incorporates comprehensive auditing and reporting and failover support is provided for server resiliency. The Management Center is comprised of the Management Server, Database (Microsoft SQL Server), Management Console and the Client Communications Agent (CCA) installed on managed endpoints. The CCA uploads event data from managed endpoints, via the Management Server, to the database and downloads product configurations and software updates from the database. Product configurations are created using the product consoles and stored in the Management Center database from where they can be downloaded along with product agents by the CCA for installation on managed endpoints.

9 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 1 INTRODUCTION TO APPSENSE MANAGEMENT CENTER Components 3 COMPONENTS The Management Center includes the following components: Management Console The Management Console provides an interface to the Management Server and the other components of the Management Center allowing you to control deployment groups, users, event data and alerts, configurations and packages, managed endpoints and reports. Management Server The Management Server manages communications (using Microsoft Internet Information Services - IIS) with a Microsoft SQL Server database for data access and storage, providing security control, communications for managing network discovery services and software deployment to managed endpoints, resource management and enterprise auditing. Database The Management Center relies on the availability on the network of a Microsoft SQL Server for the storage and retrieval of AppSense software agents, configuration packages, license packages, and event and alert data. The Microsoft SQL Server database is accessed by the Management Server and can be installed locally on the Management Center host computer or on a remote computer. CCA on Managed Computers The Client Communications Agent (CCA) is installed on managed endpoints to manage communications between the product agents and the AppSense Management Center. The CCA can be deployed using the Install CCA functionality from within the Management Console, by downloading and installing the Agent on the managed endpoints from the Management Server website or using a third-party deployment mechanism. Refer to Management Center Components on page 31 for further details of the components.

10 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 1 INTRODUCTION TO APPSENSE MANAGEMENT CENTER Key Benefits 4 KEY BENEFITS Scalable and secure Management Framework for all AppSense products. Microsoft SQL Server database. Microsoft Active Directory integration. Diagnostic capabilities. Management Server Failover and Proxy Support. Integrated Alerting System for notification of product events (Low, Medium, High and Critical). Role-based Access Control - server and object roles define view, modify and delete permissions allowing a fine level of granular security to manage user control over Management Server objects. Version Control - supporting single user locking of configurations and adding metadata by saving changes. Rich Management Console built on Microsoft.NET framework. Built-in Reporting.

11 2 Installation In this Section: Prerequisites on page 6 Installing AppSense Management Center on page 7 Installing the CCA on page 13 Uninstallation on page 16

12 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Prerequisites 6 PREREQUISITES Supported Languages English German Supported Operating Systems The Supported Operating Systems and Virtualization Technologies are detailed in the compatibility matrix available on myappsense.com. Select Software > Compatibility Matrices > Management Center Automatically Installed Components The following components are installed as part of the AppSense Desktopw Installer: Server Windows Installer 4.5 Redistributable Microsoft.NET Framework 4 Microsoft Visual C SP1 Redistributable Package (x86 for 32-bit Operating Systems and x64 for 64-bit Operating Systems) Microsoft ASP.NET 2.0 Console Windows Installer 4.5 Redistributable Microsoft.NET Framework 4 Microsoft Visual C SP1 Redistributable Package (x86 for 32-bit Operating Systems and x64 for 64-bit Operating Systems) CCA Microsoft Core XML Services (MSXML) 6.0 Manually Installed Components The following required components must be installed manually: Server Microsoft SQL Server (2005, 2008, 2008 R2, 2012) Microsoft Internet Information Services (IIS) Background Intelligent Transfer Service (BITS) Server Extensions CCA Minimum requirement, Windows Installer 3.1 Redistributable Microsoft Visual C SP1 Redistributable Package x86 for 32-bit Operating Systems and x64 for 64-bit Operating Systems)

13 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing AppSense Management Center 7 INSTALLING APPSENSE MANAGEMENT CENTER Management Center components can be installed using either the AppSense Desktopw Installer or manually via the individual MSI s. The AppSense Desktopw Installer provides a comprehensive process for installing the Management Center. The installer performs a complete check for system prerequisites and provides you with the option of installing required technologies automatically. Alternatively, you can install each of the product components manually, by running the product installer packages for each component. When installing AppSense products manually, you must ensure that all required technologies and AppSense components are added. A list of required technologies and AppSense components is available in the Prerequisites section. It is recommended that you have dedicated server resources for the Management Server to allow for the potentially high level of communication required to and from the server. If using Active Directory ensure that you follow Microsoft s Active Directory Best Practices to enable it to work well with the Management Center Membership Rules and Deployment Groups. AppSense Desktopw Installer on page 8 Manual Installation on page 12 Packages Installer packages for each component in the AppSense Management Center product set include 32-bit and 64-bit versions as follows: ManagementConsole.msi ManagementServer.msi ClientCommunicationsAgent.msi ManagementCenterDocumentation.msi Additional prerequisite third-party software components are provided with the installation media and can be installed automatically via the Desktopw Installer or manually by running the relevant packages provided.

14 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing AppSense Management Center 8 AppSense Desktopw Installer This section provides an overview of the installation process using the Desktopw installer. Enterprise installation allows you to install the full suite of product consoles together with the AppSense server components. You are prompted to select which server products to install. Enterprise installation is completed by running the Server Configuration Utility for each installed server product. Servers, SQL databases and consoles for each of the products in Enterprise mode installations can be installed either together on one computer or distributed across the network on separate computers. Enterprise Installation is only available when the AppSense Desktopw Installer is launched on a Server operating system. Enterprise Installation Using the Desktopw Installer 1. Run the Installer by executing setup.exe, on the installation media. 2. In the Welcome screen, click Next. 3. In the User Information screen, provide username and company details. 4. In the License Agreement screen, read the license agreement, if you accept the terms, select and click Next. 5. In the License Validation screen, enter the product license code and activation code for the AppSense product you have purchased to use with the Management Center or select to use the evaluation license. The Management Center does not require a license. However, during the installation procedure you are required to enter an evaluation or valid product license for the products you want to deploy and manage via the Management Center. Any product licenses entered will be automatically deployed to managed endpoints.

15 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing AppSense Management Center 9 6. In the Installation Type screen, select Enterprise to install product consoles and AppSense server products. 7. In the Product Selection screen, select the products you want to install.

16 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing AppSense Management Center In the SQL Server Installation screen, if no local Microsoft SQL Server is detected, you are prompted either to install a Microsoft SQL Server or browse to select an existing remote SQL server and instance. If no existing SQL server is selected, the installer can install Microsoft SQL Server Express Edition. If you select this option, accept the license agreement and follow the prompts of the Microsoft SQL Server setup to complete the installation. You can skip this step and configure remote servers later using the Server Configuration Utility for each of the products. For further information, refer to the Server Configuration chapter. 9. In the Prerequisite Management screen, a list of required components displays, split into Installed, t Installed and Requires Manual Installation. Some Prerequisite components require manual installation. The Installation Media directory includes installer packages for some Prerequisite components. Other prerequisite components, such as Internet Information Services (IIS), are part of the Operating System and must be installed using the relevant Server configuration options, available in the Operating System. Select Install next to each t Installed component or select Install All. Manually Install any required software prerequisites which are not already present. Once all components are installed click Next.

17 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing AppSense Management Center In the Installation Directory screen, select a location for installing the AppSense product files. The default location is C:\Program Files\AppSense. After installing the Management Center, you can browse to the web page at the following link to download the console and documentation installers: The Summary screen lists the products you installed, the installation mode, license details, installation directory, and a notification that no reboot is required. 12. When installation is complete, you are prompted to launch the Server Configuration Utility to configure each server from the installer. Alternatively, you can select Finish and complete this step later from the product directories in the Start menu. For further information on the AppSense Management Server Configuration Utility refer to Server Configuration on page 21 For further information on deploying Agents and Configurations refer to the AppSense Management Center Help. When installing in Enterprise mode, all AppSense product consoles are installed with the Management Center. The product Agents are added to the Management Server but they will only work if a license is entered. To check that the Management Center has installed correctly. Go to the Start menu and check that AppSense Management Console is present. Once the Management Console has opened, check that you can connect to a Management Server.

18 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing AppSense Management Center 12 Manual Installation To install the Management Center manually on the host computers you must run the Windows Installer Packages (MSI) as listed in the following table. When installing AppSense products manually, you must ensure that all required technologies and Appsense components are added. A list of required technologies and AppSense components is available in the Prerequisites section. Installation File ManagementConsole32.MSI ManagementConsole64.MSI ManagementServer32.MSI ManagementServer64.MSI ClientCommunicationsAgent32.MSI ClientCommunicationsAgent64.MSI ManagementCenterDocumentation32.MSI ManagementCenterDocumentation64.MSI Description Installs the Management Center Console which provides an interface to the Management Server and the other components of the Management Center. Installs the Management Server which manages data access and storage, security control, network discovery services and software deployment to managed endpoints, resource management and enterprise auditing. Must be configured using the Management Center Server Configuration Utility. Installs the Client Communications Agent (CCA) to manage communications between the product agents and the AppSense Management Center. Installs the Management Center Installation and Upgrade Guide, the Management Center Product Guide and the Management Center Help. Management Server and CCA Compatibility Warning You must ensure that the CCA you install is of the same version number or later than the version of the Management Server. For example, CCA 8.2 is compatible with Management Server 8.2 or 8.3 but CCA 8.3 would not be compatible with Management Server 8.2.

19 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing the CCA 13 INSTALLING THE CCA Install the Client Communications Agent (CCA) on all computers to be managed by the AppSense Management Center. The CCA can be distributed using the integrated Install CCA functionality within the Management Console, by downloading the CCA msi package from the Management Server web site or by third-party deployment mechanisms. Management Server and CCA Compatibility Warning You must ensure that the CCA you install is of the same version number or later than the version of the Management Server. For example, CCA 8.2 is compatible with Management Server 8.2 or 8.3 but CCA 8.3 would not be compatible with Management Server bit CCA packages can only be installed on 64-bit operating systems. 32-bit CCA packages can only be installed on 32-bit operating systems. Tips It is recommended you set up Membership Rules and Deployment Groups in the Management Console before installing the CCA. Refer to the AppSense Management Center Product Guide for further details. The Install CCA functionality within the Management Console can be run in small and medium scale enterprise environments to deploy the CCA to multiple computers, or to repair or modify the URL path for currently deployed CCAs to change the http or https prefix and port number. IT administrators in organizations often create master images which include the operating system with all the required software and updates required for a new computer, as a labor saving approach to setting up multiple computers. It is recommended to install the CCA on a gold image prior to rolling out to computers in your organization Use one of the following methods to install the CCA: Integrated Install CCA Functionality on page 14 Install CCA Manually on page 51 of Appendix A Install CCA in Silent Mode on page 53 of Appendix A

20 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing the CCA 14 Integrated Install CCA Functionality The Management Console provides an Install CCA function which allows you to deploy the CCA to multiple computers which match the Management Center Deployment Group and Membership Rules. The CCA can be deployed either on a Microsoft Active Directory network or in a Microsoft Windows workgroup in small or medium scale environments. The integrated Install CCA functionality replaces the AppSense Client Communications Agent Deployment Tool. Workflow The Install CCA functionality detects the Management Center deployment groups and uses group membership rules to provide the list of computers to which the CCA can be deployed. Active Directory is queried for active directory types for membership rules by computer, groups and containers. Alternatively, you can manually include or exclude computers from the list by NetBIOS Name. The Install CCA functionality can only deploy the CCA to computers which are members of Deployment Groups configured in the Management Center console. The user running the Install CCA functionality must have local administrative rights on all computers to which the CCA is deployed. The software requirements for the target client computers are detected and the latest 32-bit or 64-bit version of the CCA installation package is downloaded. Packages are distributed to the target computers and installed silently with the correct URL of the Management Server. The basic steps required to install the CCA are as follows: S TEP 1 C LIENT ACCESS CREDENTIALS Deployment Groups > Client Access Credentials Enter the user credentials; username and password, for an account on the endpoint that the CCA is being installed which has local administrator privileges. You can add multiple accounts, they will be attempted in order of the list. You will not be able to install the CCA on any endpoint using the integrated Install CCA functionality if the credentials have not been set up.

21 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Installing the CCA 15 S TEP 2 D EPLOYMENT GROUP Deployment Groups > Deployment Groups Create a Deployment Group. Configure the Settings - Polling period, which will vary depending on size of enterprise. Polling is where the CCA on the endpoint initiates communication with the Management Server. The poll period is split into the following: Computer poll period - CCA downloads updates to the Deployment Groups and Agent and Configuration Packages. Upload poll period - CCA uploads Events and Alerts. Poll variance - Reduces the impact of multiple machines polling the Management Server at any one time. Setup the Installation Schedule in Settings. A yellow warning displays in Deployment Groups > [Groupname] > Computers if an installation schedule is set to Disable. S TEP 3 M EMBERSHIP RULES Deployment Groups > Membership Rules Every Deployment Group has a one to one relationship with a set of Membership Rules. The Membership Rules act like a filter to discover computers within Active Directory. Select Edit Group Conditions to add a new condition based on NetBIOS Name or Active Directory. Select Submit from the Membership Rules work area. Select Discover from the Actions pane. The discovered computers that match the Membership Rules are listed in the relevant Deployment Group > Computers node. For the computers discovered by Membership Rules the Computer Status should initially display: CCA deployed.

22 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Uninstallation 16 S TEP 4 I NSTALL CCA Deployment Groups > [Groupname] > Computers Select the computer or computers on which you want to install the CCA. Select Install CCA from the Actions pane. The Client Access Log provides details on the installation progress. The Deployed (%) column indicates the percentage of the package deployed. For further information on Client Access Logs for help with diagnosing any install problems, for example, the CCA failing to install. Refer to the Client Access Logs section in the AppSense Management Center Product Guide. UNINSTALLATION Uninstall AppSense Management Center by using the AppSense Desktopw Installer. Desktopw Installer Uninstallation procedure 1. Run the AppSense Desktopw Installer by executing setup.exe on the installation media. 2. The Welcome screen displays where you are provided with three options, Modify, Repair and Uninstall.

23 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 2 INSTALLATION Uninstallation Select Uninstall and click Next. 4. The Summary screen lists the product selected to uninstall, the installation mode, the installation directory and whether a reboot is required. Click Uninstall. 5. The Management Center is uninstalled and the process is complete. If Microsoft SQL Server Express was installed during the installation process, this will not be uninstalled as part of the uninstallation process. The CCA and any Packages will not automatically be removed from the managed endpoints.

24 3 Upgrades In this Section: Upgrade the Management Center on page 19 Upgrading with the Desktopw Installer on page 19

25 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 3 UPGRADES Upgrade the Management Center 19 UPGRADE THE MANAGEMENT CENTER Before starting the upgrade process make sure you backup all existing AppSense databases. If necessary, save earlier versions of the product agent software which you would like to maintain. The upgrade process includes the following components: Management Console - upgraded by the Desktopw Installer Management Server - upgraded by the Desktopw Installer You must upgrade the Management Server before you upgrade the Client Communications Agent (CCA). The Management Server must be of the same version number or later than the installed CCA. Database - upgraded by the Server Configuration Utility. Once the Server Configuration Utility has completed the upgrade, any new agents, including the CCA, are automatically added to the database for deployment once they have been assigned to a deployment group. Configurations are not automatically upgraded. Microsoft SQL Server 2000 Support Warning Microsoft SQL Server 2000 support has been deprecated and is no longer supported for new installations. Upgrade support will be removed in a future release. UPGRADING WITH THE DESKTOPNOW INSTALLER 1. Run the Installer by executing setup.exe, on the installation media. The Welcome screen displays three options; Modify, Upgrade and Uninstall. 2. Select Upgrade and click Next.

26 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 3 UPGRADES Upgrading with the Desktopw Installer 20 In the Prerequisite Management screen, a list of required components displays split into Installed and t Installed components. 3. Select Install next to each t Installed component or select Install All to install all missing prerequisites. 4. Once all components are installed click Next. The Summary screen lists the products ready to be upgraded, the installation mode, installation directory and whether a reboot is required. 5. Click Upgrade. The Upgrade Complete screen displays, informing you the upgrade process is complete. 6. Do one of the following: Click Finish to exit Click Launch Management Server Configuration to display the Management Server Configuration Utility. If you select Launch Management Server Configuration an Upgrade Database message displays if the Management Center active database is out of date. Click to perform the upgrade. When the upgrade is complete click Close and the Management Server Configuration window displays. For further details on the Server Configuration Utility, refer to the AppSense Management Center Product Guide.

27 4 Server Configuration This section provides details of the Server configuration process for AppSense Management Server. Server Configuration Wizard on page 22 Configure a Server using Low SQL Privileges on page 28 Configuring Secure Communications on page 29 Run the Server Configuration Utility (SCU) using a user account with Administrator privileges. Otherwise, a warning message notifies you at start up that some functions may fail, or give inaccurate results. You are prompted for confirmation to continue. If you select, the SCU closes. Microsoft SQL Server 2000 Support Warning Microsoft SQL Server 2000 support has been deprecated and is no longer supported for new installations. Upgrade support will be removed in a future release.

28 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Server Configuration Utility 22 SERVER CONFIGURATION UTILITY This section provides details of the server configuration process for AppSense Management Center. The Server Configuration Utility (SCU) guides you through the configuration process. AppSense database products always require both a Configuration account and a Service account. The Configuration account and Service account must be two separate accounts. SERVER CONFIGURATION WIZARD The Server Configuration Utility (SCU) first runs as a wizard in which you specify settings for the Management Server. Following first-time setup using the wizard, the SCU can be launched from the Start menu allowing the existing settings to be modified and managed. During the server configuration process, you are prompted for authentication, including the following types: SQL authentication = SQL Authenticated Account Windows authentication = The current windows account Impersonated authentication = A custom windows account Server Configuration Wizard Steps The wizard guides you through the following steps: 1. Prerequisites The prerequisite check provides a list of the required components and indicates whether each component is installed. Any components which are not enabled

29 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Server Configuration Wizard 23 are indicated and the View button allows you to display and fix the list of variances by installing components which are not installed. Some missing components can be fixed by the installer but other components, such as BITS and IIS, must be installed manually. You can proceed or fix the relevant issues and return to the wizard later. If you proceed without resolving outstanding issues, a message notifies you that the product might not operate correctly. 2. Web site Select a valid Management Server web site. The utility lists all existing websites. The selected website controls the port used to access the server. The default website is sufficient unless you have a specially designated website which already exists.

30 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Server Configuration Wizard Client Authentication Specify the authentication method which managed endpoints use to access server web directories: Windows authentication (recommended) - CCA s must authenticate with the server using Windows Authentication. This increases the security of the server, ensuring only computers in the domain can access the server. Anonymous authentication - CCA s can access the server unchallenged. If the CCA is installed on computers in a Workgroup you must select Anonymous authentication. For further details refer to Installing the CCA in the AppSense Management Center Product Guide. 4. Configuration Credentials and Database Selection Enter the credentials for the account which is allowed to create and configure the database and the name of the SQL Server. The Configuration account must be a separate account to the Service account. The privileges required for the Configuration account vary according to what you want the SCU to do. For further information on accounts and privileges, refer to the Appsense Management Center product Guide > Server Configuration chapter.

31 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Server Configuration Wizard 25 Select the Authentication Type: Impersonated Windows Authentication A user name and password must be supplied and then this account is impersonated each time access to the database is required. SQL Authentication An SQL Authentication account can be specified to provide access to the database. Accounts, including both user name and password are created with the SQL Server itself rather than making use of existing Windows domain accounts. This authentication mode is recommended to support environments with mixed operating systems, where all users are not authenticated by a Windows domain and will allow users to connect from unknown or untrusted domains. Enter the Username and Password for the Configuration account. Specify the SQL Server and Instance to use, in the format <servername>\<instance><port> Instance and Port are optional elements. Select an existing Database to perform an upgrade. Alternatively, enter a name to create a new database. Always back up your database before performing an upgrade. To create a new database, ensure the Configuration account has dbcreator server privileges and enter a unique database name. To setup the schema on an empty placeholder database, ensure the Configuration account has dbo privileges on the database, and select the database from the list. To upgrade an existing database, the Configuration account must have dbo privilege, and the database should be selected from the list. To use an existing database, the Configuration account must be a member of the ManagementServerAdministrator or dbo database roles.

32 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Server Configuration Wizard Database Service Credentials Enter the credentials for the account which is used by the Web service and Windows services for ongoing connectivity to the SQL database after the configuration is completed. Select the Authentication Type: Impersonated Windows Authentication A Windows user name and password must be supplied and then this account is impersonated each time access to the database is required. SQL Authentication An SQL Authentication account can be specified to provide access to the database. Accounts, including both user name and password are created with the SQL Server itself rather than making use of existing Windows domain accounts. This authentication mode is recommended to support environments with mixed operating systems, where all users are not authenticated by a Windows domain and will allow users to connect from unknown or untrusted domains. If the Service account does not already exist in the SQL Server and the Configuration account has securityadmin privileges, a new account is created.

33 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Server Configuration Wizard Summary A summary of the settings displays with details of pending actions, such as create a database with a specific name or update an existing database. Click Accept to carry out the actions. Variance Reports are created if any problems are encountered during the server configuration, refer to the AppSense Management Center Product Guide for details.

34 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Configure a Server using Low SQL Privileges 28 CONFIGURE A SERVER USING LOW SQL PRIVILEGES AppSense Management Server uses an SQL Server database to store data. The installation procedure requires specific privileges, for details refer to Configuration Credentials and Database Selection in Server Configuration Wizard on page 22. For situations where the Management Server installer does not have the required permissions, you can export scripts to send to the database administrator to execute with full privilege. It is assumed here that the SQL Server instance is on a separate machine to the Management Server. Once the steps in this section have been followed, for additional security the Configuration account can be disabled with Microsoft SQL Management Studio. However, this account must be re-enabled to successfully use the SCU. EXPORT THE SCRIPTS TO SEND TO THE SQL ADMINISTRATOR 1. Open the Server Configuration Utility from Start > All Programs > AppSense > Management Center. 2. In the Wizard Welcome screen, click Skip Wizard to launch the relevant Server Configuration Utility Console. 3. Select the Database node and select Actions > Export Scripts. 4. Select I want to create a new database and click Next. 5. Select the scripts you want to export from the following and click Next. Create Database Create Schema Create Login 6. Enter the path to which to export the scripts, for example: C:\Users\Administrators\Documents and click Save. 7. Once the files have been exported, click Finish. 8. Send the exported scripts to the SQL Administrator.

35 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 4 SERVER CONFIGURATION Configuring Secure Communications 29 ACTIONS FOR SQL ADMINISTRATOR TO PERFORM Using SQL Server Management Studio the following steps must be carried out by the database administrator under sysadmin prvilege. 1. In SQL Server Management Studio, open the Create Database script, enter a ManagementServer on the database SET line save and execute. 2. Open the Create Schema script and ensure the newly created database is selected in the drop-down list before executing. 3. Open and run the Create Login script as follows: Run the script twice. Run once with a user name, for example AmcAdmin. Run once with a service name, for example AmcService. Run each time with a complex password entered on the Set Password line. Ensure you set default values for the other variables. For = '1' -- Include for SQL Server 2005 and = = '0'; 4. Give the user account name db_owner and ManagementServerAdministrator rights on the database. 5. Give the Service account ManagementServerService rights on the database. RUN THE SERVER CONFIGURATION UTILITY 1. Run the Server Configuration Utility and on the top level node click Run Wizard. Use the database ManagementServer using the user account name supplied by the SQL Administrator as the configurer and the Service as the Service account. 2. After the wizard completes, click the Database node. Click Connect and select the user account name supplied by the SQL Administrator. CONFIGURING SECURE COMMUNICATIONS You can optionally configure the Management Server web site to use Secure Socket Layers (SSL) to provide encrypted communications using Active Directory. For further details on configuring secure communications refer to the AppSense Management Center Product Guide.

36 5 Configuration In this Section: Management Center Components on page 31 Setup Tasks on page 35

37 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION Management Center Components 31 MANAGEMENT CENTER COMPONENTS The Management Center has the following components: Management Console Management Server Database Product Consoles CCA on Managed Computers ABOUT THE CONSOLE The AppSense Management Console allows you to manage AppSense software Deployment Groups, Alerts and Alert Rules, Packages, Reports, Security and Enterprise Licensing. Deployment Groups include settings for Group Membership, Installation Schedules, Enterprise Auditing, Packages, Alerts, Events and Computers.

38 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION About the Console 32 Navigation Pane The Navigation Pane consists of the navigation tree and navigation buttons. The navigation tree is the area for managing nodes of the configuration. The navigation buttons allow you to view the different areas of the console, including: Home Manages the server connection and provides connection status information, quick links and status of user authentication, deployment groups and alerts. Deployment Groups Manages deployment groups including Group Membership, Installation Schedules, Enterprise Auditing, Packages, Alerts, Events and Computer settings. Alerts Manages alerts and alert rules for AppSense software events sent to the server from client computers. Package Library Manages agent and configuration software packages. Reports Provides a comprehensive list of reports for each product which you can generate to analyze the activity and status. Security Manages role-based access to the Management Console. Enterprise Licensing Allows you to add and manage licenses. You can collapse the Navigation Panel to create more viewing space for the other areas of the console. Work Area The Work Area provides the main area for managing the settings, controls and views of the selected node in the navigation panel. The contents of the work area vary according to the selected nodes in the navigation tree and the selected navigation buttons. Sometimes the work area is split into two panes. For example, one pane provides a summary of the settings in the other pane. Actions The Actions area displays in the right-hand column and shows available controls for the current view. Additional Console Features Shortcut Menu right-click shortcuts are available in the navigation tree and some areas of the Console. The minimum screen resolution is 800 x 600.

39 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION About the Console 33 Management Console Management Server The Management Console provides an interface to the Management Server and the other components of the Management Center allowing you to control deployment groups, users, event data and alerts, configurations and packages, registered computers and reports. The Management Console includes the following views: Home Manage server connections, a server, view deployment group status, view alerts status and monitor system events. Deployment Groups Manage and monitor Deployment Groups with controls for handling group membership, installation schedule, enterprise auditing policies and package assignments, monitoring for alerts and events and computer management settings. Alerts Manage alerts and alert rules. Package Library Manage AppSense software agent, configuration packages and patches on the Management Server. Reports Generate a range of reports for the Management Center for AppSense products, based on events sent to the Management Server. Security Manage role-based access rights to the Management Console views and settings. Enterprise Licensing Manage AppSense product licenses for deploying to managed endpoints. The Management Server manages communications with a Microsoft SQL database server for data access and storage, providing security control, communications for managing network discovery services and software deployment to managed endpoints and enterprise auditing. Management Server security manages network authorization for Management Consoles and product Consoles. Handles download schedules, group management and file transfers, and network discovery services for integration with Active Directory. Enterprise auditing manages event data access and storage via the Management Console alert rules which includes mechanisms for generating SNMP and SMTP alert notifications. Management Center supports a list of failover of servers which can take over the role of the Management Server to allow the system to continue functioning in the event of a server failure.

40 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION About the Console 34 Database The Management Center relies on the availability on the network of a Microsoft SQL server for the storage and retrieval of AppSense software agents, configuration packages, license packages, and event and alert data. The Microsoft SQL database server is administered by the Management Server and can be installed locally on the Management Center computer or on a separate computer. For more information about managing user permissions for the SQL database refer to Server Configuration on page 21. Product Consoles CCA on Managed Computers The product consoles, including Application Manager, Environment Manager and Performance Manager, allow you to configure and save configurations to the Management Server for adding to deployment groups and deploying to managed endpoints. The Client Communications Agent (CCA) is installed on managed endpoints to manage communications between the product agent and the AppSense Management Center. The CCA polls the Management Server to manage the download and installation of agents, configurations and software package updates, and also sends event data generated by the product agents to the Management Server. The CCA can be downloaded and installed directly on managed endpoints from the Management Server web site or deployed by other methods such as, the Install CCA functionality from within the Management Console or third-party deployment solutions such as Microsoft System Center Configuration Manager (SCCM). For more information about CCA installation methods, see Installing the CCA on page 13.

41 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION Setup Tasks 35 SETUP TASKS Once all of the Management Center components have been installed, configure and set up the Management Center according to the following steps: Step 1 Connect to the Management Server Step 2 Create Deployment Groups Step 3 Set Up Membership Rules Step 4 Set Up Security (Optional) Step 5 Add Client Access Credentials Step 6 Install Packages Step 7 Set Up Alert Rules (Optional) Step 8 Install the CCA on Managed Computers Step 9 Install and Configure Failover Servers (Optional) S TEP 1 C ONNECT TO THE MANAGEMENT SERVER Launch the Management Console for the first time, from Start > All Programs > AppSense > Management Center, to connect to the Management Server click the link in the Overview panel or select Connect in the Actions menu.

42 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION Setup Tasks 36 In the Select Management Server dialog box, add a server to the list providing a friendly name and server name or IP address, and selecting connection type (HTTP or HTTPS) and port numbers (defaults: 80 or 443). You can browse the Active Directory or network to select a server name. Connect to the added server using the current user account or as a custom user providing the user name, password and domain, where relevant. S TEP 2 C REATE DEPLOYMENT GROUPS Set up the following for each deployment group: Client computer poll periods Package assignments Installation schedules Failover servers Client access credentials Enterprise auditing settings Alerts Events Apply security access rights to restrict or enable access and control. S TEP 3 S ET UP MEMBERSHIP RULES Membership rules act as a filter to include or exclude conditions to match computers to deployment groups. Membership rules have a one to one relationship with deployment groups and are set up in Deployment Groups > Membership Rules. Select Edit Group Conditions from the Actions pane to display the Edit Group Conditions dialog box. Select to Add a computer by NetBIOS Name or Active Directory, set the condition to Include or Exclude. Select Discover to assign the computer to the first deployment group that has a matching rule. For further details on Membership Rules refer to the AppSense Management Center Help.

43 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION Setup Tasks 37 S TEP 4 S ET UP SECURITY (OPTIONAL) The Management Console installs with an Administrator account assigned to the user installing the software. This user is assigned a Server Administrator server role which gives full access and control to all areas and functions on the Management Server. You can also add other user accounts and assign that server role or another of the default server roles, Modifier or Viewer. You can create custom server roles to which you can assign permissions from a comprehensive list. For further details on Server roles and Object roles refer to the AppSense Management Center Help.

44 APPSENSE MANAGEMENT CENTER INSTALLATION AND UPGRADE GUIDE 5 CONFIGURATION Setup Tasks 38 S TEP 5 A DD CLIENT ACCESS CREDENTIALS Before you can install the CCA on any endpoint Client Access Credentials must be supplied. Default Client Access Credentials are set up in Deployment Groups > Client Access Credentials or they can be specified at deployment group level in Deployment Groups > Deployment Groups > [Groupname] > Settings > Client Access Credentials. You can add multiple users and they will be used in the order in which they are listed. Select Client Access Credentials either at the default or deployment groups level. Select Add Credential, the Add Client Access Credential dialog displays. Enter the username and password and confirm the password, click OK to add the credentials to the list. For further details on credential encryption and storage refer to the AppSense Management Center Product Guide.