You must install/configure the following prerequisites before installing the CCS components:
Table: Prerequisites required to install CCS
Prerequisite |
Description |
||
---|---|---|---|
SQL Server |
The following versions of SQL Server are supported:
You must manually install the software or use an existing installation. CCS creates a production database and a reporting database to store the compliance data. Depending on the scale of the deployment, you might require one or more Microsoft SQL Server installations. It is recommended that the Application Server should be configured to use the SSL connections for the Microsoft SQL Server instances that host the CCS databases. If you use SSL connections, you must ensure that you configure them before you install CCS. Refer to the Microsoft SQL Server documentation (http://support.microsoft.com/kb/316898) for information about configuring SSL connections. These requirements are for a standalone database server. |
||
Microsoft .Net Framework 3.5 SP1 |
To install .Net 3.5 SP1 on Windows Server 2008, in the Prerequisites panel of the CCS Setup, expand Microsoft .Net Framework 3.5 SP1 and check Install. To install .Net 3.5 SP1 on Windows Server 2008 R2, in the Windows Server 2008 Server Manager, go to Features > Add new Feature. Select .Net Framework 3.5.1 features and click Next to complete the installation. |
||
Oracle Instant Client 12.1 |
If you are collecting data from the Oracle platform, you require the Oracle Instant Client 12.1 files to run on the CCS Manager. If the files are not present on the CCS Manager then the data collection job for Oracle fails. To install the Oracle Instant Client 12.1, locate the Oracle Instant Client version 12.1 files on the Oracle product support website and download the Instant Client Package - Basic package. Unzip the contents of the package to a directory at a known location, and add the directory path to the PATH environment variable at system level. Oracle Instant Client 12.1 is not installed by default while installing CCS. You can install Oracle Instant Client 12.1 before or after you install CCS. See Installing the Oracle Instant Client for data collection on Oracle. |
||
Internet connection for CCS service |
CCS services require access to certificate revocation list (CRL) published by Symantec at location http://crl.verisign.com in order to validate the digital signatures of the assembly. This ensures security by verifying that the certificates with which the assemblies are signed are not in the revocation list. Symantec recommends that you enable the Internet connection on the computers where the CCS Application Server or CCS Console is installed. CCS Manager does not require internet access. |
||
Java Runtime Environment (JRE) 1.7_03 or later |
If you are upgrading the ESM Console and ESM Utilities to version 11.1, you require JRE 1.7_03 or later to run the ESM Console and ESM Utilities. |
Table: Prerequisites required to use the CCS Web Console and the Policy Central
Configuration |
Description |
||
---|---|---|---|
Browsers |
Symantec has verified the functioning of the CCS Web Console and the Policy Central on the following versions of specified Web browsers:
Perform the following browser specific configurations on the computer from which you are accessing the CCS Web Console or the Policy Central. If you are using the Internet Explorer browser:
If you are using the Mozilla Firefox browser:
If you are using the Google Chrome browser:
|
||
Screen resolution |
Symantec recommends a screen resolution with an aspect ratio of 1280 x 1024 to view the CCS Web Console. |
||
Internet Information Service (IIS) |
For the CCS Application Server installed on Windows Server 2008 or Windows Server 2012, ensure that you use Windows Authentication and Static Content. If there is no Windows authentication on the server, then you can add it through the Add Role Services dialog box for Web Server (IIS), in Server Manager. CCS Web Console works using both HTTP or HTTPS protocol. If you want to use HTTPS protocol, ensure that you have enabled HTTPS protocol on the computer on which CCS Web Console is installed. If not, then refer to the support website for Microsoft to install HTTPS. You require the following MIME types for the CCS Web Console: .js .css .htm .html .exe .deploy |
||
Service Principal Name (SPN) |
You must setup Service Principal Names' (SPN) after installing CCS 11.1 or upgrading to CCS 11.1. CCS 11.1 provides a batch file containing the SPN setup script. The SPN script file contains the set SPN commands to set the required SPNs for the CCS components. Provide the script file to the domain administrator to create the Service Principal Names. You can export the batch file from the CCS Suite installer after installing the Application Server, or by using the VerifyDelegation utility located inside the <Install_Directory>\Application Server folder Set up an SPN with the NetBIOS name and the fully qualified domain name (FQDN) of the domain user account in whose context the application pool executes. SPN can be set up from the Application Server or the DC. Execute the following commands on the CCS Application Server where IIS 6 or IIS 7 is used. For IIS 7, you must execute these commands only in the following cases.
By default, the Kernel Mode Authentication is enabled.
Do the following on the Windows Server computers to enable delegation for the Application Server's service account.:
|
||
ASP.NET v4.0.30319 |
Perform respective tasks to install the application on the CCS Application Server that is installed on Windows Server 2008 or Windows Server 2012.
|
||
ASP.NET v4.0.30319 Web Service Extensions |
On the CCS Application Server computer, in the IIS Manager, you must set the value as Allowed for the ASP.NET v4.0.30319 Web Service Extensions. If ASP.NET v4.0.30319 is not present on the computer, the CCS setup installs the ASP.NET v4.0.30319. You can perform this procedure once the CCS setup installs the prerequisites and displays the Welcome panel. To set the value on Windows Server 2008 and Windows Server 2012, in the Internet Information Services (IIS) Manager, in the Connections Pane, click the server node in the tree. On the server home page, under IIS, double-click ISAPI and CGI Restrictions. Right-click ASP.NET v4.0.30319 and click Allow. To set the value on Windows Server 2003, in the Internet Information Services (IIS) Manager, in the left Pane, click the server node in the tree, and then click Web Service Extensions. On the Web Service Extensions page, selectASP.NET v4.0.30319 and click Allow. |
||
HTTP Activation for .NET Framework 4.5 |
To launch Policy Central on a Windows 2012 computer, HTTP must be activated for .NET Framework 4.5. In the Server Manager, under Roles and Features, navigate to ASP under Webserver(IIS) > Web Server > Application Development and select HTTP Activation under WCF Services. |
||
Full-Text Search on SQL Server |
Policy Central uses the Full-Text Search feature of the SQL Server to search in policy documents. |
The CCS setup installs the following prerequisites automatically during the UI based installation:
Note: |
You must install all prerequisites manually if you are performing a silent installation of the CCS components. CCS setup does not install any prerequisites automatically during the silent installation. |
Table: Prerequisites installed automatically during CCS installation
Subscribing will provide email updates when this Article is updated. Login is required.
This will clear the history and restart the chat.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)