2.2 Installing Access Manager Appliance

Installation time: 45 to 90 minutes, depending on the hardware.

What you need to know

  • Root password of Access Manager Appliance.

  • Username and password of Administration Console administrator.

  • Static IP address for Access Manager Appliance.

  • DNS name (host and domain name) for Access Gateway that resolves to the IP address.

  • Subnet mask that corresponds to the IP address for Access Gateway.

  • IP address of your network’s default gateway.

  • IP addresses of the DNS servers on your network.

  • IP address or DNS name of an NTP server.

  • The configuration store tree is named after the server on which you install Access Manager Appliance. Check the hostname and rename the machine if the name is not appropriate for a configuration tree name.

  • The ESXi server version supported is 6.0 and later.

You can install Access Manager Appliance on all hardware platforms supported for SLES 12 SP5 (64-bit).

2.2.1 Prerequisites

  • Ensure that you have backed up all data and software on the hard disk to another machine. Access Manager Appliance installation completely erases all the data on your hard disk.

  • Ensure that the machine meets the minimum requirements. See Requirements for Installing Access Manager Appliance.

  • (Optional) If you want to try any advanced installation options such as driver installation or network installation, see the Deployment Guide.

2.2.2 Installing Access Manager Appliance

Access Manager Appliance is installed with the following default partitions:

  • boot: The size is automatically calculated and the mount point is /boot.

  • swap: The size is double the size of the RAM and the mount point is swap.

The remaining disk space after the creation of the /boot and swap partitions is allocated as the extended drive. The extended drive has the following partitions:

  • root: The default size is approximately one-third the size of the extended drive and the mount point is /.

  • var: The default size is approximately one-third the size of the extended drive and the mount point is /var.

IMPORTANT:

  • Do not install or import any non-4.5 Appliance devices during installation.

  • Starting from Access Manager 4.2 onwards, Platform Agent and Novell Audit are no longer supported for auditing. It is recommended to use Syslog for auditing.

Installation Using the Access Manager Appliance ISO

NOTE:Access Manager Appliance does not support special characters in the Username and Password fields.

  1. Insert the Access Manager Appliance CD into the CD drive.

  2. Select install_NAM-SingleBox-appliance.

    By default, the Boot From Hard Disk option is selected in the boot screen.

  3. Press Enter.

  4. Cick Yes to the Destroying ALL data on sda, continue? prompt.

    This loads the NAM-SingleBox-appliace.x86_64-5.0.2.raw file. After verifying the sda, the Initializing Appliance Configuration screen appears.

  5. After checking the Appliance dependencies, the License page appears. Review the license agreement after selecting the language preference and then click Accept.

  6. In the Access Manager Appliance Passwords and Time Zone screen, enter the root password and confirm the same.

    In the Root Password section, specify password for the root user and name of the NTP server.

  7. Select the region and time zone on the Clock and Time Zone page.

  8. Review the Access Manager Appliance Network Settings and enter the Hostname. Example: namapp.novell.com.

  9. Click Next.

  10. Specify the following details:

    Field

    Description

    IP Address

    Configure the following options for the public IP:

    • IP Address: The public IP address of Access Manager Appliance.

    • Network Mask: The subnet mask of Access Manager Appliance.

    • Gateway: The IP address of the default gateway.

    DNS Server 1

    IP address of your DNS server. You must configure at least one DNS server.

    (Optional) DNS Server 2

    IP address of your additional DNS server. This is an optional configuration.

    Domain Name

    The domain name for your network.

     

  11. Wait for the configuration to complete and click Next. In the Configuring password, time and network settings screen, the Finalizing configuration progress bar is displayed. After the configuration is complete, The Access Manager appliance is ready for configuration message appears. Follow the instructions displayed.

    To configure the appliance:
    1. At your management workstation, open a browser and enter one of the following URLs"
    https://namapp.novell.com:9443
    https://10.10.0.11:9443
    2. Log in as root with the password that you set during appliance first boot.
    
    To change the IP address of the appliance:
    1. At the command line, run the following as root:
    yast novell-vainit
    2. After making the desired changes, reboot the appliance.
    IMPORTANT: Do not use the terminal prompt before consulting the documentation. Appliance administration requires appliance-specific tool.
    Using standard tools can result in service disruption or failure.

Configure Access Manager Appliance Using Common Appliance Framework User Interface

When you log in to the Common Appliance Framework using the URL https:/<IP>/:9443 (CAF), you can view the notifications and upgrade the operating system by clicking Online Update.

  1. Access Manager appliance is ready for configuration. You can now log in as root user into the Common Appliance Framework user interface using https://<IP>:9443 URL.

  2. After successful login, the Micro Focus Access Manager Appliance Administration user interface is displayed.

  3. Click Access Manager Configuration under Access Manager Tools, and specify the following fields:

    Field

    Description

    Administration Console Type

    Select either Primary or Secondary radio button.

    Select the Secondary option to specify if this Access Manager Appliance is not primary.

    If you are installing it as a secondary Access Manager Appliance, ensure that the primary Access Manager Appliance is reachable.

    Primary Administration Console IP

    Specify the IP address of the primary Access Manager Appliance if this is secondary.

    Administration Console Config IP

    Specify the IP address of the primary Administration Console.

    Administration Console Published DNS Name

    Specify the published DNS server name of the Administration Console.

    Administration Console Username

    Name of the Administration Console user.

    NOTE:Administration Console username does not accept special characters # (hash), & (ampersand), and () (round brackets).

    Administration Console Password

    Specify and confirm the password for the user.

    NOTE:Administration Console password does not accept special characters: (colon) and " (double quotes).

    NAT IP

    If you have mapped the private IP address of the Administration Console to the public NAT IP address. Specify that here.

  4. Click Save.

    The install process begins and it takes around 20 minutes for the install process to complete. After successful installation, refresh the Administration Console health status, wait for the same to turn green, and then log into the Administration Console using the https://<ip>:9443 URL. Access Gateway and Identity Server are configured and available for use.

2.2.3 Installing Secondary Access Manager Appliance

If you have selected the Secondary radio button, provide the primary Administration Console IP and select the configuration IP of the specific server. Provide the Administration Console username and password.

NOTE:The first three nodes of Access Manager Appliance contain Administration Console, Identity Server, and Access Gateway. From the fourth installation onwards, the node does not contain Administration Console.

2.2.4 Logging In to Administration Console

You cannot use it to log into other eDirectory trees and manage them.

Do not download and add iManager plug-ins to this customized version. If you do, you can destroy the Access Manager Appliance schema, which can prevent you from managing Access Manager Appliance components. This can also prevent communication among the modules.

Do not start multiple sessions of Administration Console on the same machine through the same browser. The browser shares session information and this can cause unpredictable results in Administration Console. You can, however, start different sessions with different brands of browsers.

To log in to:

  1. Enable browser pop-ups.

  2. From a client machine external to your Administration Console server, launch the browser and enter the URL for Administration Console.

    If the hostname of your Access Manager Appliance is www.host.com, you might enter https://www.host.com:8443/nps.

  3. Click OK. You can select the permanent or temporary session certificate option.

  4. Specify the administrator name and password that you defined during installation, and click Login.

    For information about configuring the view of Administration Console for Access Manager Appliance, see Configuring the Default View in the NetIQ Access Manager Appliance 5.0 Administration Guide.

2.2.5 Administration Console Conventions

  • The required fields on a configuration page contain an asterisk by the field name.

  • All actions such as delete, stop, and purge require verification before they are executed.

  • Changes are not applied to a server until you update the server.

  • Sessions are monitored for activity. If your session becomes inactive, you are asked to log in again and unsaved changes are lost.