3.2 Installing Secure Configuration Manager Components

To successfully install Secure Configuration Manager, you must install the Secure Configuration Manager database and Core Services.

NOTE:By default, console is installed with Core Services.

First, install the Secure Configuration Manager database (and Core Services, if appropriate) on the database computer. Then, if you did not install Core Services on the same computer as the database, install that component on a separate dedicated computer. Finally, install consoles on all computers that you want to host a user interface.

The Secure Configuration Manager setup program automatically installs and registers a Windows agent on the Core Services computer. You must specify a run-as account for the Windows agent service. The account requires specific permissions, such as the ability to deploy agents to remote computers. For more information about the Windows agent service and permissions, see the NetIQ Secure Configuration Manager Windows Agent Installation and Configuration Guide.

If you do not enter a valid license key, the installation program automatically applies a 30-day trial license. You can change the license key any time after installing Secure Configuration Manager. For more information about license keys, see the Help for the Core Services Configuration Utility.

NOTE:In addition to the files installed in the Program Files folder, the installation program installs a scmnss folder in the root directory on the Core Services computer. Do not remove the scmnss folder or the files within the folder. Secure Configuration Manager requires these files for FIPS communication.

To install Secure Configuration Manager components:

  1. Log on with an Administrator account to the computer where you want to install the Secure Configuration Manager components.

  2. Exit all programs on the computer.

  3. Ensure that the Windows Services window, accessed through the Windows Control Panel, is closed.

  4. Run the setup program, Setup.exe, from the root folder of the Secure Configuration Manager installation kit.

  5. Click Start Installation to start the Secure Configuration Manager installation.

    Follow the instructions in the wizard to proceed with the installation.

  6. (Optional) If you do not want to install the database and want to use an existing Secure Configuration Manager database, clear the Database selection in the Component Selection section.

  7. (Optional) To specify an account for the Core Services service and the port, complete the following steps:

    1. In the Service Account field, type the user name of the account you want to assign to the Core Services service.

      NOTE:

      • If you specify a local account, use the .\username format.

      • If you specify a local account on a workgroup computer, you must either specify the workgroup name using the workgroupname\username format, or type a space in the Service Account field. Leaving the field blank results in an error.

      • If you start the service within a specific domain, you must specify the domain name using the domainname\username format. For example, AcmeMidWest\smithj.

    2. In the Password field, type the password for the specified service account.

      The setup wizard validates the specified service account when you click the Next button.

    3. If you want to use a non-default port for Core Services, clear the Use Default Port option, and specify the port in the Core Port field.

      NOTE:Ensure that the non-default port you are specifying is available for use and open on the firewall.

  8. (Optional) To specify the SQL server connection, complete the following steps:

    1. Specify the server name.

      NOTE:If you have unchecked the Database selection in the Component Selection section, select the SQL sever that contains the Secure Configuration Manager database.

    2. Select the Use Default Port option if you want to use the default port for SQL database. Default port 1433. Specify the port number in the Database Port field if you want to use a non-default port.

      NOTE:Ensure that the non-default port you are specifying is available for use and open on the firewall.

    3. Select the type of authentication. Provide user name and password if you select SQL authentication.

  9. (Optional) To specify an account for the Windows agent service, complete the following steps:

    1. In the Service Account field, type the user name of the account you want to assign to the agent service.

      NOTE:

      • The Windows agent service running on the Core Services computer requires an account with enough permissions to modify remote computers. For example, specify a domain administrator account. This Windows agent becomes the default Deployment Agent for the domain.

      • If you specify a local account, use the .\username format.

      • If you specify a local account on a workgroup computer, you must either specify the workgroup name using the workgroupname\username format, or type a space in the Service Account field. Leaving the field blank results in an error.

      • If you start the service within a specific domain, you must specify the domain name using the domainname\username format. For example, AcmeMidWest\smithj.

    2. In the Password field, type the password for the specified service account.

      The setup wizard validates the specified service account when you click the Next button.

  10. Follow the instructions in the wizard until you finish installing Secure Configuration Manager.

    NOTE:An installation summary, which contains prominent installation parameters you have specified, is displayed for your review. The C:\Program Files (x86)\NetIQ\Secure Configuration Manager\installconfig.txt file is created during installation, which contains ALL the values you have specified for installation parameters. You can use this file for reference.

  11. (Optional) Install the Secure Configuration Manager Dashboard. Click Cancel when prompted if you do not want to install the Dashboard.