2.1 Requirements for Installing Access Manager Appliance

For a list of current filenames and for information about how to install a specific release, see the Release Notes of that release on the NetIQ Access Manager Documentation website.

For system requirements, see System Requirements: Access Manager Appliance in the NetIQ Access Manager System Requirements guide.

For network requirements, see Network Requirements.

For supported browsers, see Browser Support in the NetIQ Access Manager System Requirements guide.

IMPORTANT:Browser pop-ups must be enabled to use Administration Console.

2.1.1 Client Access Requirements

Clients can use any browser or operating system when accessing resources protected by Access Gateway.

2.1.2 Installation Mode

You must install Access Manager Appliance by burning Access Manager Appliance ISO on a DVD.

2.1.3 Virtual Machine Requirements

The requirements for a virtual machine need to match the requirements for a physical machine. To achieve the performance similar to a physical machine, increase the memory and CPU requirements.

For the hard disk, RAM, and CPU requirements, each virtual machine must meet the following minimum requirements:

  • 100 GB of disk space

  • 8 GB RAM

  • 2 CPUs

You can install Access Manager on virtual machines that support an operating system supported by your Access Manager version and component. For example, SLES 12 SP5 with 64-bit operating system x86-64 hardware.

NOTE:SLES 12 SP5 64-bit Access Manager Appliance does not support XEN paravirtualization.

The following sections contain installation tips for virtual machines:

Keeping Time Synchronized on Access Manager Appliances

Even when virtual machines are configured to use a network time protocol (NTP) server, time does not stay synchronized because the machines periodically lose their connection to the NTP server. The easiest solution is to configure primary Access Manager Appliance to use an NTP server and configure other Access Manager Appliance to use a cron job to synchronize their time with primary Access Manager Appliance.

Perform the following steps to synchronize time with the primary Administration Console:

  1. Configure the NTP server in the /etc/ntp.conf file. For information about how to configure the NTP server, see Configuring NTP.

  2. Run the following command on the primary Administration Console to start the NTP server:

    rcntp start

  3. Run the ntpdate pool.ntp.org command on the primary Administration Console to synchronize devices.

    NOTE:The ntpd process must be running to keep the time in sync among devices.

Number of Virtual Machines Per Physical Machine

How you deploy your virtual machines can influence Access Manager Appliance performance. Deploy maximum of four Access Manager Appliance virtual machines on a single hardware. When you deploy more than four, components of Access Manager Appliance start competing with each other for same hardware resources at the same time. You can include other types of services that the machine can support if they do not use the same hardware resources that Access Manager Appliance components use.

The configured CPUs must match the hardware CPUs on the machine. Performance is drastically reduced if you allocate more virtual CPUs than actually exist on the machine.

Another potential bottleneck is IO. For the best performance, each virtual machine must have its own hard disk, or you need a SAN that is capable of handling the IO traffic.

For example, if you have one 16-CPU machine, performance is better when you configure the machine to have four Access Gateways with four assigned CPUs than the machine is configured to have eight Access Gateways with two assigned CPUs. If the machines are dedicated to Access Manager Appliance, performance is better from two 8-CPU machines than one 16-CPU machine. The setup depends on your environment, hardware, and virtualization configuration for the cluster.

Using a Network Adapter for VMWare ESX

Use the E1000 network adapter for Access Manager Appliance installation on VMWare ESX.