3.2 Installing Secure Configuration Manager Components

First, install the Secure Configuration Manager database (and Core Services, if appropriate) on the database computer. Then, if you did not install Core Services on the same computer as the database, install that component on a separate dedicated computer. Finally, install consoles on all computers that you want to host a user interface.

NOTE:By default, console is installed with Core Services.

If you do not enter a valid license key, the installation program automatically applies a 30-day trial license. You can change the license key any time after installing Secure Configuration Manager. For more information about license keys, see the Help for the Core Services Configuration Utility.

The Secure Configuration Manager setup program automatically installs and registers a Windows agent on the Core Services computer. You must specify a run-as account for the Windows agent service. The account requires specific permissions, such as the ability to deploy agents to remote computers. For more information about the Windows agent service and permissions, see the NetIQ Secure Configuration Manager Windows Agent Installation and Configuration Guide.

NOTE:In addition to the files installed in the Program Files folder, the installation program installs a scmnss folder in the root directory on the Core Services computer. Do not remove the scmnss folder or the files within the folder. Secure Configuration Manager requires these files for FIPS communication.

To install Secure Configuration Manager components:

  1. Log on with an Administrator account to the computer where you want to install the Secure Configuration Manager components. Ensure that the Administrator account you are using has write permissions to the installation directory.

  2. Exit all programs on the computer.

  3. Run the setup program, Setup.exe, from the root folder of the Secure Configuration Manager installation kit.

  4. Click Start Installation to start the Secure Configuration Manager installation.

    Follow the instructions in the wizard to proceed with the installation.

  5. (Optional) By default, the Core Services service runs using the local system account. If you want to specify a different service account, complete the following steps:

    1. In the Service Account field, type the user name of the account you want to assign to the Core Services service.

    2. In the Password field, type the password for the specified service account.

    3. If you want to use a non-default port for Core Services, deselect the Use Default Port option, and specify the port in the Core Port field.

    4. Click Next.

      The setup wizard validates the specified service account.

  6. (Optional) To specify the SQL server connection, complete the following steps:

    1. Specify the server name.

    2. Specify the port number in the Database Port field if you want to use a non-default port.

    3. Select the type of authentication you want use to connect to the SQL Server database. Provide user name and password if you select SQL authentication.

    4. Click Next.

      The setup wizard validates the specified SQL server connection.

  7. (Optional) By default, the Windows agent service runs using the local system account. If you want to specify a different service account, complete the following steps:

    1. In the Service Account field, type the user name of the account you want to assign to the agent service.

      NOTE:The Windows agent service running on the Core Services computer requires an account with enough permissions to modify remote computers. For example, specify a domain administrator account. This Windows agent becomes the default Deployment Agent for the domain.

    2. In the Password field, type the password for the specified service account.

    3. Click Next.

      The setup wizard validates the specified service account.

  8. Review the installation summary, and click Install.

    Secure Configuration Manager installation and also Windows agent silent installation start.

    NOTE:An installation summary file, C:\Program Files (x86)\NetIQ\Secure Configuration Manager\installconfig.txt, is created during installation, which contains all the values you have specified for installation parameters. You can use this file for reference.

  9. Install the Secure Configuration Manager Dashboard. Click Cancel when prompted if you do not want to install the Dashboard. For more information about Dashboard installation, see the NetIQ Secure Configuration Manager Dashboard User Guide.