CA Single Sign-On - 12.7

12.8 12.7 12.6.01 12.52.02 12.52.01 12.51
English

Install CA Access Gateway

You can install one or more instances of smsps on the same computer. If the installation is successful, the installer installs the Access Gateway Configuration Wizard.
casso127
You can install one or more instances of
CA Access Gateway
 on the same computer. If the installation is successful, the installer installs the Access Gateway Configuration Wizard.
3
Verify Prerequisites
Before you install, verify the following prerequisites:
  • We recommend that you do not install
    CA Access Gateway
     on the computer where Policy Server is installed.
  • JDK
    —Verify that you installed the supported 64-bit JDK. Verify the supported Java version on the Platform Support Matrix.
  • JCE
    —Verify that JRE supports unlimited key strength in the Java Cryptography Extension (JCE) package.
    For JDK 1.8_151 and later, perform the following steps:
    1. Navigate to the 
      jdk_home
      /jre/lib/security directory and open the 
      java.security
       file.
    2. Uncomment the following line:
      crypto.policy=unlimited
    3. Save the file.
    For the other previous versions of JDK, perform the following steps:
    1. Locate the JCE package for your operating system from the Oracle website.
    2. Download the unlimited JCE package for the Java version that is supported by 
      CA Access Gateway
      . 
    3. Navigate to the 
      jdk_home
      \jre\lib\security directory on your system and apply the patch to the following files:
      • local_policy.jar
      • US_export_policy.jar
      Note:
      jdk_home
       specifies the location of the Java installation.
On Linux, verify that the following additional prerequisites are met:
    • Ensure that the user who is used for installing 
      CA Access Gateway
       has write permissions on the /opt directory.
    • The folder where you install
      CA Access Gateway
       must have sufficient permissions (755).
    • CA Access Gateway
       runs as the
      nobody
       user on UNIX. If you prefer not to run
      CA Access Gateway
       as this user, create an alternate user and assign the necessary permissions.
    • Increase the source of randomness for the entropy pool. Use one of the following options:
      • (Most secure) Install a 
        hardware entropy generator
         and configure the rngd daemon to populate /dev/random by entering the following command:
        

        rngd -r /dev/
        device_name
         -o /dev/random -b
        device_name
         is character device in use. The device name varies depending on the hardware random number generator that you are using, for example, /dev/hwrng.
        For more information about the rngd daemon, see the Red Hat documentation.
      • (Good security) Configure the rngd daemon to populate /dev/random by entering the following command:
        

        rngd -r /dev/urandom -o /dev/random -b
        Third-party alternatives to the rngd entropy daemon are also available.
      • (Least secure) Configure a symbolic link between /dev/urandom and /dev/random by entering the following commands:
        

        mv /dev/random /dev/random.org
        

        ln -s /dev/urandom /dev/random
Install
CA Access Gateway
You can install 
CA Access Gateway
 on Windows or UNIX. 
CA Access Gateway
 sets the instance name of the first installation as 
default
. You cannot modify the default value or cannot use the same name for any other instance.
Install on Windows
Follow these steps:
  1. Download the installer from CA Support.
  2. Double-click
    ca-proxy-version-win64.exe
    , and select
    Run as administrator
    .
  3. Review the prerequisites that are required for proceeding with the installation.
  4. Click Next when you are ready. 
  5. Accept the license agreement and click Next.
  6. Specify the installation location and click Next.
  7. Select the Java binary that is in the bin folder of the JDK installation.
    For example: C:\Program Files\Java\jdk1.8.0_51\bin\java.exe
  8. Click Next.
  9. Review the installation summary and click Install.
  10. Click Done when the installation is complete.
Install on UNIX
Follow these steps:
  1. Download the following installer from CA Support:
    

    Linux: ca-proxy-12.6-rhas64.bin
  2. Execute the following command to initiate the installer:
    

    Linux: sh ca-proxy-12.6-rhas64.bin
  3. Review the installation requirements and press Enter to continue.
  4. Follow the screen prompt to read the license agreement.
  5. Type 
    Y
     when prompted to accept the license agreement and press Enter.
  6. Specify the installation location and press Enter.
  7. Type the number corresponding to the Java binary that is in the bin folder of the JDK installation, and press Enter.
  8. Review the install summary and press Enter.
  9. Exit the installer when the installation is complete.
You can check the InstallLog file to verify that the installation is successful.
Default Location
:
accessgateway_home
\install_config_info\CA_Access_Gateway_Install_
date
_
time
.log
Install Multiple Instances of 
CA Access Gateway
You can install multiple
CA Access Gateway
 instances on the same computer. Each instance uses a unique instance name and port for communication, and creates a separate directory structure and services. 
Install Multiple Instances on Windows
Follow these steps:
  1. Navigate to the location where you downloaded the installer.
  2. Double-click
    ca-proxy-version-win64.exe
    .
  3. Review the installation requirements and click Next. 
  4. Accept the license agreement and click Next.
  5. Choose
    New instance
     as the install type. 
  6. Review the criteria to name an instance and enter a name for the new instance.
  7. Click Next.
  8. Specify the installation location and click Next.
  9. Select the Java binary that is in the bin folder of the JDK installation. 
    For example: C:\Program Files\Java\jdk1.8.0_51\bin\java.exe
  10. Click Next.
  11. Review the installation summary and click Install.
  12. Click Done when the installation is complete.
  13. (Optional) To install more instances, perform Steps 2-12 on the same computer.
Install Multiple Instances on UNIX
Follow these steps
:
  1. Navigate to the location where you downloaded the installer.
  2. Execute the following command to initiate the installer:
    

    Linux: sh ca-proxy-12.6-rhas64.bin
  3. Review the installation requirements and press Enter to continue.
  4. Follow the screen prompt to read the license agreement.
  5. Type 
    Y
     when prompted to accept the license agreement and press Enter.
  6. Type
    1
     to install a new instance.
  7. Review the criteria to name an instance, enter a name for the new instance, and press Enter.
  8. Specify the installation location and press Enter.
  9. Choose the Java binary that is in the bin folder of the JDK installation. Type the number and press Enter.
  10. Review the install summary and press Enter.
  11. Exit the installer when the installation is complete.
  12. (Optional) To install more instances, perform Steps 2-11 on the same computer.
Proceed with the configuration of each instance.
Reinstall 
CA Access Gateway
 
You can reinstall 
CA Access Gateway
 to troubleshoot any configuration issues.
Reinstall on Windows
Follow these steps
:
  1. Navigate to the location where you downloaded the installer.
  2. Double-click
    ca-proxy-version-win64.exe
    .
  3. Review the installation requirements and click Next.
  4. Accept the license agreement and click Next.
  5. Choose
    View existing instances
     and click Next.
    A list of instances that are installed on the computer is displayed.
  6. Select the instance and click Next.
    CA Access Gateway
     verifies if the selected instance can be reinstalled or upgraded, and displays a message accordingly.
  7. If the selected instance can be reinstalled, click OK.
Reinstall on UNIX
Follow these steps
:
  1. Navigate to the location where you downloaded the installer.
  2. Execute the following command to initiate the installer:
    

    Linux: sh ca-proxy-12.6-rhas64.bin
  3. Review the installation requirements and press Enter to continue.
  4. Follow the screen prompt to read the license agreement.
  5. Type
    Y
     when prompted to accept the license agreement and press Enter.
  6. Type
    2
     and press Enter.
    A list of instances that are installed on the computer is displayed.
  7. Select the instance and click Next.
    CA Access Gateway
     verifies if the selected instance can be reinstalled or upgraded, and displays a message accordingly. 
  8. If the selected instance can be reinstalled, press Enter.
Uninstall 
CA Access Gateway
Uninstall on Windows
Follow these steps:
  1. Open the command prompt and navigate to the root installation directory.
  2. Execute the following command for each instance you want to uninstall:
    

    ca-sps-uninstall.cmd
Uninstall on UNIX
Follow these steps:
  1. Open a console window and navigate to the root installation directory.
  2. Execute the following command to source the 
    CA Access Gateway
     environment:
    

    source ca_sps_env.sh
  3. Run the following program:
    

    ./ca-sps-uninstall.sh
    Note
    : If you have modified any files such as server.conf, the uninstall program does not remove these files or their parent folders automatically. You must delete the files and folders manually.