Chapter 3: Preparing for Installation
This chapter lists the software requirements for installing Adapter and discusses other prerequisites for SAML, SiteMinder, and VPN appliances. The following topics are covered in this chapter:
■ Software Requirements for State Manager (see page 29)
■ Software Requirements for Authentication Flow Manager (see page 31)
■ Software Requirements for Authentication Shim (see page 33)
■ Software Requirements for FCC Pages (see page 33)
■ Checklist for Integration (see page 34)
Software Requirements for State Manager
Note: State Manager is required when Adapter is integrated with SAML-based Web portal, SiteMinder, or SSL VPN appliances (if the primary authentication mechanism is ArcotOTP on Browser). You do not need to perform the instructions in this section if you are integrating Adapter with IPSec VPN appliances.
This section lists the prerequisites for installing State Manager. This section includes the following topics:
■ Minimum Software Requirements (see page 29)
■ Configuring the Application Server (see page 31)
Minimum Software Requirements
The following table lists the operating system requirements for State Manager.
Supported Operating System Service Pack
Windows Server 2003 Enterprise Edition (32-bit) SP2 Windows Server 2008 Enterprise Edition (32-bit)
Windows Server 2008 Enterprise Edition (64-bit) Windows Server 2008 Standard Edition (32-bit) Windows Server 2008 Standard Edition (64-bit)
Windows Server 2008 Release 2 (64-bit) SP1
Software Requirements for State Manager
30 Installation and Configuration Guide for Windows
If you want to enable risk evaluation, then before you deploy and configure State Manager, ensure that a supported version of the software listed in the following table is installed and configured.
Software Supported Version Supported Operating System
CA RiskMinder 3.1 Microsoft Windows 2003
Microsoft Windows 2008 (32-bit and 64-bit)
For more information, see the CA Advanced Authentication Compatibility Matrix.
Database Requirements
The following table lists the database requirements for State Manager.
Database Server
■ Microsoft SQL Server 2005
■ Microsoft SQL Server 2008
■ MySQL Enterprise Edition 5.1
■ Oracle 10g
■ Oracle 11g
JDK and Application Server Requirements
The following table lists the JDK and the application server requirements for State Manager. Both 32-bit and 64-bit versions of the application servers are supported.
Application Server JDK
Apache Tomcat 5.5.31 Compatible versions of
Oracle JDK.
For more information, see the Apache Tomcat documentation.
Apache Tomcat 6.0.33 Compatible versions of
Oracle JDK.
For more information, see the Apache Tomcat documentation.
Software Requirements for Authentication Flow Manager
Chapter 3: Preparing for Installation 31
Application Server JDK
Apache Tomcat 7.0.25 Compatible versions of
Oracle JDK.
For more information, see the Apache Tomcat documentation.
IBM WebSphere Application Server 6.1.0.41 IBM JDK 1.5.x IBM WebSphere Application Server 7.0.x IBM JDK 1.6.0
Oracle WebLogic 10.1.x Oracle JRockIt 1.5.x
Oracle WebLogic 11gR1 or 10.3.3 Oracle JRockIt 1.6.x
JBoss Application Server 5.1.x Oracle JDK 5.0
Configuring the Application Server
State Manager is a Web application that requires a Servlet container for its deployment.
Because State Manager uses JNDI to connect to the database, you must create a JNDI connection. For more information, see "Creating a JNDI Connection" (see page 68).
CA recommends that State Manager communicate with other components using SSL mode. To configure State Manager for SSL, enable the application server on which State Manager is deployed for SSL communication.
Adapter provides sample Keystore and Truststore, which you can use for testing SSL communication between the Adapter Components.
Software Requirements for Authentication Flow Manager
The following table lists the operating system requirements for AFM.
Supported Operating System Service Pack
Windows Server 2003 Enterprise Edition (32-bit) SP2 Windows Server 2008 Enterprise Edition (32-bit)
Windows Server 2008 Enterprise Edition (64-bit) Windows Server 2008 Standard Edition (32-bit) Windows Server 2008 Standard Edition (64-bit)
Windows Server 2008 Release 2 (64-bit) SP1
Software Requirements for Authentication Flow Manager
32 Installation and Configuration Guide for Windows
Before deploying and configuring AFM, ensure that a supported version of the software listed in the following table is installed and configured.
Software Supported Version Supported Operating System
CA AuthMinder 7.1 Microsoft Windows 2003
Microsoft Windows 2008 (32-bit and 64-bit)
For more information, see the CA Advanced Authentication Compatibility Matrix.
For more information about installing CA AuthMinder, see the CA AuthMinder Installation and Deployment Guide.
JDK and Application Server Requirements
The following table lists the JDK and the application server requirements for AFM.
Application Server JDK
Apache Tomcat 5.5.31 Compatible versions of Oracle JDK.
For more information, see the Apache Tomcat documentation.
Apache Tomcat 6.0.33 Compatible versions of Oracle JDK.
For more information, see the Apache Tomcat documentation.
Apache Tomcat 7.0.25 Compatible versions of Oracle JDK.
For more information, see the Apache Tomcat documentation.
IBM WebSphere Application Server 6.1.0.41 IBM JDK 1.5.x IBM WebSphere Application Server 7.0.x IBM JDK 1.6.0
Oracle WebLogic 10.1.x Oracle JRockIt 1.5.x
Oracle WebLogic 11gR1 or 10.3.3 Oracle JRockIt 1.6.x JBoss Application Server 5.1.x Oracle JDK 5.0
Software Requirements for Authentication Shim
Chapter 3: Preparing for Installation 33
Software Requirements for Authentication Shim
Note: The software requirements specified in this section are applicable only for SiteMinder integration.
Before proceeding with the Authentication Shim installation, ensure that a supported version of the software listed in the following table is installed and configured.
Software Supported Version Supported Operating System CA SiteMinder Policy
Server ■ r6.0 SP6
■ r12.0 SP3
■ r12.5
■ Microsoft Windows Server 2008
■ Microsoft Windows Server 2003 For more information, see the SiteMinder Platform Support Matrix.
Software Requirements for FCC Pages
Note: The software requirements specified in this section are applicable only for SiteMinder integration.
Before configuring the FCC pages, ensure that a supported version of the software listed in the following table is installed and configured.
Software Supported Version Supported Operating System CA SiteMinder Web Agent Refer to CA SiteMinder
documentation for more information on the compatible Web Agent version.
For more information about the supported operating systems, see the SiteMinder Platform Support Matrix.
Checklist for Integration
34 Installation and Configuration Guide for Windows
Checklist for Integration
The following requirements must be met before proceeding with the integration:
■ The following CA products are installed:
■ CA AuthMinder 7.1 is installed on the required operating system.
Book: For installing AuthMinder, see the CA AuthMinder Installation and Deployment Guide.
■ If risk evaluation support is needed, then CA RiskMinder 3.1 is installed on the required operating system.
Book: For installing RiskMinder, see the CA RiskMinder Installation and Deployment Guide.
■ The application server(s) where you intend to deploy Adapter components are independently operational.
■ The Web browser that you intend to use is configured to allow file download, active scripting, and scripting of Java applet functions.
■ Required numbers of database instances are ready with applicable schemas for storing the information required by Adapter.
■ The required number of the IPSec or SSL VPN appliances have been installed and configured.
The following additional requirements are needed for integrating Adapter with SiteMinder:
■ A SiteMinder Policy Server and a SiteMinder Web Agent are installed and configured.
Refer to the appropriate SiteMinder documentation for installation details.
■ Create a virtual directory, for example, arcotlogin, on the Web server where you plan to install the FCC pages.
Note: Note down the virtual directory name as you need this information at the time of configuring the FCC virtual directory path in the Arcot Adapter
Configuration wizard.
■ Create at least one object of the following types by using the SiteMinder Policy Server User Interface (r6.x) or Administrative User Interface (r12.x), as applicable.
Refer to the appropriate SiteMinder documentation for more information on creating these objects:
■ Agents
■ Domains
■ Administrators
■ Realms
■ Users
Checklist for Integration
Chapter 3: Preparing for Installation 35
■ User directories
■ Rules for the realms
■ The redistributable package of Microsoft Visual C++ 2005 (x86), vcredist_x86.exe, is installed on the system(s) where SiteMinder components are available.
If not already installed, then you can install this redistributable package from the Adapter package, or download it from the following site:
http://www.microsoft.com/downloads/en/details.aspx?familyid=766a6af7-ec73-40 ff-b072-9112bab119c2&displaylang=en