2.3 Installing the Universal Policy Administrator all-in-one On Premises Gateway

You can install Universal Policy Administrator on Cloud and on-premises using the Cloud Gateway (Gatekeeper) and Gateway installer.

Ensure that the following prerequisites are met before you install the Universal Policy Administrator On-Premises Gateway:

  • Domain Administrator account access

  • WebServer (IIS)

The Universal Policy Administrator On Premises Gateway installer also installs Microsoft .Net Framework 4.8.x and the Microsoft-Windows-GroupPolicy-ServerAdminTools-Update.

For information about the minimum rights of the account entered during the installation, see Least Privilege Account (LPA) for Installation.

NOTE:The Universal Policy Administrator On Premises Gateway installation on a Microsoft Windows Server 2016 or later computer upgrades Microsoft Windows PowerShell to version 5.1 through a Windows Management Framework (WMF) 5.1 update.

NOTE:SQL Reporting component is not recommended to be installed on the same server as UPA to ensure a successful Gatekeeper installation.

To install the Universal Policy Administrator (Gatekeeper) On Premises Gateway:

  1. Log in to a member server as a domain administrator.

  2. Download the Universal Policy Administrator On Premises Gateway installer file AD Bridge Gateway.exe from the Open Text Downloads website.

  3. Execute the downloaded AD Bridge Gateway.exe file.

  4. When the installation wizard opens, select both Install Gatekeeper and Install Gateway options and click Install.

  5. Click Next.

  6. Read and accept the license agreement, and click Next.

  7. Specify a certificate in the .pfx format and enter the password for the certificate on the Certificate File Page. Click Next.

    NOTE:You need an SSL certificate that is trusted by clients (agents, gateways, any machine running the Web UI, and any machine one which you want to run our PowerShell cmdlets) and matches the hostname you plan to use. We recommend using an SSL certificate from a major issuer such as Sectigo or Verisign to ensure compatibility with all client platforms. If the customer is issuing their own certificate, then SNI is required.

  8. Specify the connection string and SSL hostname on the Configuration wizard, and click Next.

  9. Accept the default installation location or specify the alternate location for the installation. Click Next.

  10. Click Install.

  11. Click Finish to complete the Gatekeeper setup.

    NOTE:After the Gatekeeper installation completes, the Gateway installation automatically starts.

  12. Click Next.

  13. Read and accept the license agreement, and click Next.

  14. Select an installation option. The available options are:

    • NAT Traversal

    • DMZ or Port Forward

    NOTE:In most cases, select NAT Traversal.

  15. Click Next.

  16. Enter domain administrator credentials on the Domain Credentials Page and click Next.

  17. Enter the Cloud Gateway URL and Universal Policy Administrator On Premises Gateway owner account credentials for your tenant on the Login page and click Next.

    NOTE:If you do not have an administrator or owner account for the tenant, click Register to create a new account.

  18. Accept the default installation location or specify the alternate location for the installation. Click Next.

  19. Click Install.

  20. Click Finish to complete the Gateway installation.

To set up the Universal Policy Administrator (Gatekeeper) Cloud Gateway:

Ensure the following prerequisites are met before you install the Universal Policy Administrator Cloud Gateway, on premises:

  • Microsoft SQL Server installed and running SQL Server 2016 or later.

  1. Log in to a Member server as a domain administrator.

  2. Download the Universal Policy Administrator On Premises Gateway installer AD Bridge Gateway.exe file from the Open Text Downloads website.

  3. Execute the downloaded AD Bridge Gateway.exe file.

  4. When the installation wizard opens, select Install Gatekeeper option and click Install.

  5. Click Next when the Gatekeeper Installation wizard opens.

  6. Read and Accept the License Agreement, and click Next.

  7. Browse your system to select a certificate in the .pfx file format, specify the password, and click Next.

  8. Specify the connection string, SSL hostname in the Configuration wizard, and click Next.

  9. Select the destination folder for the installation files and click Next.

  10. Click Install to copy the Gatekeeper files.

  11. Click Finish to complete the Gatekeeper setup.