3.2 Installing Secure Configuration Manager Components

To successfully install Secure Configuration Manager, you must install the Secure Configuration Manager database and Core Services.

NOTE:By default, console is installed with Core Services.

First, install the Secure Configuration Manager database (and Core Services, if appropriate) on the database computer. Then, if you did not install Core Services on the same computer as the database, install that component on a separate dedicated computer. Finally, install consoles on all computers that you want to host a user interface.

The Secure Configuration Manager setup program automatically installs and registers a Windows agent on the Core Services computer. You must specify a run-as account for the Windows agent service. The account requires specific permissions, such as the ability to deploy agents to remote computers. For more information about the Windows agent service and permissions, see the Installation and Configuration Guide for NetIQ Secure Configuration Manager Windows Agent.

If you do not enter a valid license key, the installation program automatically applies a 30-day trial license. You can change the license key any time after installing Secure Configuration Manager. For more information about license keys, see the Help for the Core Services Configuration Utility.

NOTE:In addition to the files installed in the Program Files folder, the installation program installs a scmnss folder in the root directory on the Core Services computer. Do not remove the scmnss folder or the files within the folder. Secure Configuration Manager requires these files for functionality with Java software.

To install Secure Configuration Manager components:

  1. Log on with an Administrator account to the computer where you want to install the Secure Configuration Manager components.

  2. Exit all programs on the computer.

  3. Ensure that the Windows Services window, accessed through the Windows Control Panel, is closed.

  4. Run the setup program from the root folder of the Secure Configuration Manager installation kit.

  5. On the Production Setup tab, click Check Version to verify that you have the latest version of Secure Configuration Manager.

  6. Start installation.

  7. Follow the instructions in the wizard until you finish installing Secure Configuration Manager.

  8. (Optional) To specify an account for the Core Services service, complete the following steps:

    1. In the Service Account field, type the user name of the account you want to assign to the Core Services service.

      NOTE:

      • If you specify a local account, use the .\username format.

      • If you specify a local account on a workgroup computer, you must either specify the workgroup name using the workgroupname\username format, or type a space in the Service Account field. Leaving the field blank results in an error.

      • If you start the service within a specific domain, you must specify the domain name using the domainname\username format. For example, AcmeMidWest\smithj.

    2. In the Password field, type the password for the specified service account.

      The setup wizard validates the specified service account when you click the Next button.

  9. (Optional) To specify an account for the Windows agent service, complete the following steps:

    1. In the Service Account field, type the user name of the account you want to assign to the agent service.

      NOTE:

      • The Windows agent service running on the Core Services computer requires an account with enough permissions to modify remote computers. For example, specify a domain administrator account. This Windows agent becomes the default Deployment Agent for the domain.

      • If you specify a local account, use the .\username format.

      • If you specify a local account on a workgroup computer, you must either specify the workgroup name using the workgroupname\username format, or type a space in the Service Account field. Leaving the field blank results in an error.

      • If you start the service within a specific domain, you must specify the domain name using the domainname\username format. For example, AcmeMidWest\smithj.

    2. In the Password field, type the password for the specified service account.

      The setup wizard validates the specified service account when you click the Next button.