7.2 Installing iManager Server and Workstation

To install iManager Server:

1. Log in as a user with administrator privileges on the computer where you want to install iManager.

2. (Conditional) If you have the .iso image file for the Identity Manager installation package, navigate to the directory containing the iManager installation files, located by default in the \products\iManager\installs\win directory.

3. (Conditional) If you downloaded the iManager installation files from the NetIQ Downloads website, complete the following steps:

   1. Identify the win.zip file. For example, iMan_310_win_x86_64.zip.

   2. Extract the win.zip file to a folder on the local computer.

4. Run iManagerInstall.exe.

5. (Optional) To view the debug output of the installation program, hold the Ctrl key immediately after launching the installation program until a console window appears. For more information about debugging, see “Troubleshooting” in the NetIQ iManager Administration Guide.

6. In the iManager welcome window, select a language, and then click OK.

7. In the Introduction window, and then click Next.

8. Accept the License Agreement, and then click Next.

9. (Conditional) If your server already has a version of JVM or Tomcat or other supporting components that are installed as part of iManager, in the Detection Summary window, complete the following steps:

   1. Under Install the following components, verify that the versions listed for the components match the versions that you want to install.

   2. (Optional) If the setup program does not list the versions that you want to install, browse to the appropriate components in the installation folder.

10. Click Next.

11. In the Get PORT Input window, specify the port numbers on which Tomcat server must run, and then click Next.

    By default, the HTTP port and SSL port values are 8080 and 8443, respectively. However, if you have another service or Tomcat server using the default ports, you can specify different ports.

12. Specify the certificate public key algorithm that you want TLS certificate to use, then click Next. By default, the public key algorithm is set to RSA.

    • RSA: The certificate uses a 2048-bit RSA key pair. If you select RSA, it allows four cipher levels. By default, the cipher level is set to NONE.

      • NONE: Allows any type of cipher.

      • LOW: Allows a 56-bit or a 64-bit cipher.

      • MEDIUM: Allows a 128-bit cipher.

      • HIGH: Allows ciphers that are greater than 128-bit.

    • ECDSA 256: The certificate uses a ECDSA key pair with curve secp256r1. If you select ECDSA 256, it allows only one cipher level:

      • SUITEB 128 ONLY: Allows a 128-bit cipher.

    For more information about ciphers, see the NetIQ iManager Administration Guide.

13. (Optional) To use IPv6 addresses with iManager, click Yes in the Enable IPv6 window.

    You can enable IPv6 addresses after you install iManager. For more information, see Configuring iManager for IPv6 Addresses after Installation.

14. Click Next.

15. In the Choose Install Folder window, specify the folder to store the installation files, and then click Next.

    The default installation location is C:\Program Files\Novell.

16. (Optional) To download and install plug-ins as part of the installation, complete the following steps:

    1. In the Select Plug-ins to Download and Install window, select the required plug-ins.

    2. (Optional) To download plug-ins from an different network location, specify an alternative Network URL.

       When using an alternative URL for downloading plug-ins, you must verify the URL contents, and verify that the plug-in is appropriate for your use. By default, the installation program downloads plug-ins from . For more information, see Understanding Installation for iManager Plug-ins.

    3. Click Next.

    4. (Conditional) The setup program might display the following message:

       No new or updated plug-ins found. All plug-ins are downloaded or updated or the iManager download server is unavailable.

       If you see this error, one or more of the following conditions exist:

       • There are no updated plug-ins available from the download site.

       • There is a problem with your Internet connection. Verify your connection and try again.

       • Connection to the Descriptor File was not successful. This URL refers to an XML descriptor file of available iManager plug-ins.

       • The iManager installation is behind a proxy that does not allow a connection to the above URL.

    5. (Optional) To install plug-ins from a local directory, in the Select Plug-ins to Install from Disk window, specify the directory path that contains the appropriate .npm plug-in files.

       This step allows you to install previously downloaded or custom plug-ins. The default path is \extracted location\products\iManager\plugins. However, you can specify any valid path.

    6. Click Next.

17. (Optional) In the Get User and Tree Names window, specify an authorized user and the name of the eDirectory tree that this user will manage.

    NOTE:

    • If eDirectory uses a port other than the default port 524, you can specify the IP address or DNS name of the eDirectory server plus the port number. Do not use localhost. For example, to specify an IPv6 address, enter https://[2001:db8::6]:1080/nps/servlet/webacc?taskId=fw.Startup&forceMaster=true.

    • NetIQ does not recommend leaving these settings blank. If you leave these fields blank, iManager allows any user to install plug-ins and make changes to iManager server settings. You can specify an authorized user after completing the installation process. For more information, see Specifying an Authorized User for eDirectory.

    • The installation program does not validate the specified user credentials with eDirectory.

18. Click Next.

19. Read the Pre-installation summary page, and then click Install.

20. When the installation completes, the Install Complete window displays relevant messages about the success of the process.

    NOTE:Despite a successful installation, the Install Complete window might display the following error message:

    The installation of iManager version is complete, but some errors occurred during the install.
    Please see the installation log Log file path for details. Press "Done" to quit the installer.

21. (Conditional) If the installer displays the error message shown in Step 20, complete the following steps:

    1. Note the path to the log file that the error message displays.

    2. In the Install Complete window, click Done.

    3. Open the log file.

    4. (Conditional) If you find the following error in the log file, you can ignore the error message. The installation was successful, and iManager functions properly.

       Custom Action: com.novell.application.iManager.install.InstallDLLs 
       Status: ERROR 
       Additional Notes: ERROR - class com.novell.application.iManager.install.InstallDLLs NonfatalInstallException C:\WINDOWS\system32\msvcr71.dll (The process cannot access the file because it is being used by another process)

    5. (Conditional) If the log file does not contain the error listed in Step 21.d, NetIQ recommends that you retry the installation.

22. Click Done.

23. When the initialization of iManager finishes, click the first link in the Getting Started page, an then log in. For more information, see “Accessing iManager” in the NetIQ iManager Administration Guide.

To install iManager Workstation:

1. (Conditional) If you have the .iso image file for the Identity Manager installation package, navigate to the directory containing the iManager installation files, located by default in the \products\iManager\installs\win\ directory.

2. (Conditional) If you downloaded the iManager installation files from the NetIQ Downloads website, complete the following steps:

   1. Identify the win.zip file. For example, iMan_31_workstation_win.zip.

   2. Extract the win.zip file to a folder on the local computer.

3. From the imanager\bin folder, run the iManager.bat file.

4. In the iManager login window, specify the credentials for an authorized user and the eDirectory tree that this user manages.

   For more information about accessing iManager, see “Accessing iManager” in the NetIQ iManager Administration Guide.

5. (Optional) To enable IPv6 addresses, complete the following steps:

   1. Open the User_Install_Directory\Tomcat\conf\catalina.properties file.

   2. Set the following configuration entries in the catalina.properties file:

      java.net.preferIPv4Stack=false

      java.net.preferIPv4Addresses=true

   3. Restart the Tomcat service.

1. Open the install.properties file, located by default in the products/iManager directory within the .iso image file for the Identity Manager installation package for each operating system environment directory.

   NOTE:If you previously installed the current version of iManager on a server, you can use the installer.properties file that setup program generated. The file, located by default in the log directory, contains the values that you specified during the installation.

2. In the properties file, add the following parameters and values:

   $PLUGIN_INSTALL MODE$

   Specifies the property that controls whether plug-ins are installed. Add one of the following values:

   • DISK - (default) instructs the setup program to install the plug-ins from the local disk.

   • NET - instructs the setup program to install the plug-ins from the network.

   • BOTH - instructs the setup program to install the plug-ins from both disk and network.

   • SKIP - does not install the plug-ins.

   $PLUGIN_DIR$

   Specifies an alternate path to plug-ins located on the local disk. The default path is \installer_root_directory\iManager\installs\platform path\plugin.

   The installation program installs all modules in the plug-in directory, except for subdirectories.

   $PLUGIN_INSTALL_URL$

   Specifies the network URL where the installation program can download the plug-ins, by default . If you specify an alternative URL, you must verify the URL contents, and verify that the plug-in is appropriate for your use. For more information, see Understanding Installation for iManager Plug-ins.

   $LAUNCH_BROWSER$

   Specifies whether the installation program launches the gettingstarted.html file launches once the installation process completes.

   $USER_INSTALL_DIR$

   Specifies the path where you want iManager to be installed.

   USER_INPUT_ENABLE_IPV6

   Specifies whether to enable iManager to use IPv6 addresses. By default, the installation program sets this value to yes.

3. For each plug-in module that you want to download and install, specify the module ID and version from the MANIFEST.MF file, located in the META-INF/ folder of the .npm (plug-in module). For example:

   $PLUGIN_MODULE_ID_1$=eDirectoryBackupAndRestore

   $PLUGIN_VERSION_1$=2.7.20050517

   $PLUGIN_MODULE_ID_2$=ldap

   $PLUGIN_VERSION_2$=2.7.20050517

   NOTE:

   • If you do not specify any modules, the program installs the most commonly installed modules, tagged as “selected” in the iman_mod_desc.xml files on the download website.

   • If you do not define a version for a module, the setup program installs any module that matches the .npm name.

1. In a console window, go to the directory containing the install.properties file that you downloaded.

2. On the command line, enter one of the following command:

                     iManagerInstall.exe -i silent