You can use IBM® Installation
Manager in console mode to install or update packages from a command-line
interface.
About this task
Complete the following steps to run the IBM Installation Manager in console mode to install
or update Tivoli Authorization
Policy Server on the computer where IBM Dashboard
Application Services Hub is already installed.
Note: You cannot install
or update the Authorization Policy Server and the tivcmd Command Line
Interface for Authorization Policy at the same time by using console
mode. You must install or update these software packages separately.
However, you can install or update the IBM Infrastructure
Management Dashboards for Servers at the same time as the authorization
policy server.
Procedure
- Log in as the user who installed IBM Application Services Hub.
- Start the IBM Installation
Manager in console mode from the directory where it was installed. For example:
- C:\Program Files\IBM\Installation Manager\eclipse\tools\imcl.exe
-c
- /opt/IBM/InstallationManager/eclipse/tools/imcl -c
- The following menu is displayed:
Select:
1. Install - Install software packages
2. Update - Find and install updates and fixes to installed software packages
3. Modify - Change installed software packages
4. Roll Back - Revert to an earlier version of installed software packages
5. Uninstall - Remove installed software packages
Other Options:
L. View Logs
S. View Installation History
V. View Installed Packages
------------------------
P. Preferences
------------------------
E. Export Data for Problem Analysis
A. About IBM Installation Manager
------------------------
X. Exit Installation Manager
Select 1 to
install software packages. Select 2 to update
software packages.
- When you are presented with the list of software packages,
select the option for the Tivoli Authorization
Policy Server package.
Note: - You can also select the IBM Infrastructure
Management Dashboards for Servers package if you are installing it
on the same computer.
- When you update packages, the IBM Installation Manager only displays the packages
with an updated version in the repository. For example, even though
you might have Infrastructure Management Dashboards for Servers and
the Authorization Policy Server installed, you might only see the
updated policy server package if the Dashboard for Servers package
was not updated in the latest release or fix pack.
- From the next list of options, select 1 to
install or update the current version of the software package. Option 2 displays
all available versions of the package.
- Authorization Policy Server is selected by default. Select N (Next)
to continue.
- Select your preferred installation location and then select N (Next)
to continue.
- Select the Tivoli Authorization
Policy Server features to install or update. By default, both Installation and Configuration are
selected. Select N (Next) to continue.
Note: It is recommended to select the Tivoli Authorization Policy Server Installation and Configuration features
together (which is the default behavior). However, you cannot select
the authorization policy server Configuration feature if you did not
select the Configuration feature when IBM Dashboard
Application Services Hub was installed. You should also not select
the Configuration feature if you want to review the deployment scripts
before they are used to deploy the authorization policy server into IBM Dashboard Application Services
Hub. If you select the Installation feature on its own, only the authorization
policy server binaries and install scripts are laid down in the installation
directory (on Windows this
location is usually C:\Program Files\IBM\JazzSM\AuthPolicyServer and
on Linux/UNIX this location is usually /opt/IBM/JazzSM/AuthPolicyServer).
If you select the Configuration feature on its own, the Installation
feature is selected as well.
- Enter your WebSphere® administrator-level
user credentials (user name and password) that can be used to install
or update the Tivoli Authorization
Policy Server application into IBM Dashboard
Application Services Hub. The installer validates the entered
credentials.
- The Tivoli Authorization
Policy Server periodically compresses a file of the current set of
authorization policies that is available for distribution. On a periodic
interval, the dashboard data provider component of the portal server
makes a request to the Tivoli Authorization
Policy Server for the latest compressed file of policies. If there
is a new file, it is obtained and extracted and this set of policies
becomes the current set of policies that are used by the dashboard
data provider.
Enter the Authorization Policy Server
advanced configuration values or press
Enter to select the
default values. Each property has the following default value and
range:
- Audit log file count
- The maximum number of audit log files to keep at one time.
- Default value is 5. Range is greater than 1 and less than 99999.
- Audit log file size (megabytes)
- The maximum size of each log file in megabytes.
- Default size is 10. Range is greater than 1 and less than 99999.
- Audit log file directory
- The directory into which the log files are stored.
- Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\audit
- Policy-distribution Polling interval (minutes)
- This property specifies how often the Authorization Policy Server
updates the compressed file that contains the authorization policies
that is downloaded by the dashboard data provider.
- Default value is 5. Range is 1 - 1440 minutes.
- Policy-distribution Polling directory
- The directory into which the version of the policies for distribution
is stored.
- Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\dist
- You must restart the Dashboard Application Services Hub
after the Authorization Policy Server installation or update is complete.
Select either an automatic or manual restart of the Dashboard Application
Services Hub.
- Review the installation summary window
and select I to proceed with the installation
or update.
What to do next
See
Verifying the Tivoli Authorization Policy Server installation for steps
to verify that the installation was successful.
If you only selected
the installation feature of the Tivoli Authorization
Policy Server, review the authorization policy server's deployment
scripts and then use the Modify operation of IBM Installation Manager to deploy
the authorization policy server into IBM Dashboard
Application Services Hub. See Configuring the Tivoli Authorization Policy Server feature after installation.
If
you selected both the installation and configuration features of Authorization
Policy Server, perform the following tasks:
- If you selected the option for a manual restart of Dashboard Application
Services Hub in step 11, you must restart the application server for
Dashboard Application Services Hub before the Authorization Policy
Server can be used with the tivcmd CLI to create authorization policies.
- Install or update the tivcmd Command Line Interface on the computers
that administrators use to create authorization policies. Follow the
instructions in Installing the tivcmd Command Line Interface for Authorization Policy using the graphical user interface or Installing or updating the tivcmd Command Line Interface for Authorization Policy using console mode. The user credentials that
you specified for the initial installation and configuration of the
Authorization Policy Server installation are assigned to the PolicyAdministrator
role. You must use these credentials with the tivcmd Command Line
Interface to log in to the Authorization Policy Server and assign
other administrators permission to create and work with authorization
policy roles.
The IBM Tivoli Monitoring Administrator's
Guide provides
examples of creating authorization policies for common scenarios in
the Using role-based authorization policies chapter. Steps
for configuring a dashboard environment to use authorization policies
are outlined in the Preparing your dashboard environment chapter.
For a complete list of tivcmd CLI commands, see the IBM Tivoli Monitoring Command Reference.