IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2.2

Installing the IMS Server with the IMS Server installer

Install and deploy the IMS Server to WebSphere® Application Server with the IMS Server installer.

Before you begin

About this task

The IMS Server installation process deploys two applications on WebSphere Application Server:
Application name EAR file name Contains
ISAMESSOIMS com.ibm.tamesso.ims-delhi.deploy.isamessoIms.ear
  • AccessAdmin
  • AccessAssistant
  • Runtime web service for IMS Server
ISAMESSOIMSConfig com.ibm.tamesso.ims-delhi.deploy.isamessoImsConfig.ear
  • IMS Configuration Wizard
  • IMS Configuration Utility

Procedure

  1. Run imsinstaller.exe to start the IMS Server installation wizard.
    Note: Set the program compatibility to Windows Server 2008 R2, if you are running the installer on Windows Server 2012 and Windows Server 2012 R2.
  2. Accept the default language or select another language.
  3. Click OK.
  4. Select the product for which you have a license to install.
    • IBM Security Access Manager for Enterprise Single Sign-On Standard

      This package offers strong authentication, session management, and centralized logging, and reporting in addition to single sign-on.

    • IBM Security Access Manager for Enterprise Single Sign-On Suite

      This package offers custom tracking, and IAM Integration in addition to the Standard package.

  5. Click Next.
  6. Select I accept the terms in the license agreement.
  7. Click Next.
  8. Accept the default installation directory or specify a new directory. By default, the IMS Server is installed in C:\Program Files\IBM\ISAM ESSO\IMS Server.
  9. Click Next.
  10. Select Yes to automatically deploy the IMS Server to the WebSphere Application Server.
  11. Click Yes to specify that WebSphere Application Server security is enabled. If you click No, you must provide the SOAP port. The typical SOAP port for a:
    • Stand-alone deployment is 8880.
    • Network deployment (Deployment manager node) is 8879.
    Note: Specify the correct application security details before you proceed. If the security validation for WebSphere Application Server fails, you entered the wrong information. In this case, you can restart the installer.
  12. Click Next.
  13. Configure the WebSphere Application Server administration security settings.
    Note: If two-way secure sockets layer (SSL) is enabled for the WebSphere Application Server, the SSL Java™ keystore file and password are required.
    1. Specify the WebSphere administrative user name and password you provided during the profile creation. For example: wasadmin and password.
    2. Specify the SSL Trusted Java keystore file, trust.p12, and its location.
      For example:
      • For WebSphere Application Server stand-alone:

        <was_home>\profiles\<AppSrv_profilename>\config\cells\<cell_name>\nodes\<node_name>\trust.p12

        See the following example:

        C:\IBM\WebSphere\AppServer\profiles\AppSrv01\config\cells\ibmusvr1Node01Cell\nodes\ibmusvr1Node01\trust.p12

      • For WebSphere Application Server Network Deployment:

        <was_home>\profiles\<Dmgr_profilename>\config\cells\<cell_name>\trust.p12

        See the following example:

        C:\IBM\WebSphere\AppServer\Profiles\Dmgr01\config\cells\ibm-svr1Cell01\trust.p12

    3. Specify the SSL Trusted keystore password.

      The default SSL Trusted keystore password is WebAS.

    4. Optional: Specify the SSL Java keystore file, key.p12, and its location.
      For example:
      • For WebSphere Application Server stand-alone:

        <was_home>\profiles\<AppSrv_profilename>\config\cells\<cell_name>\nodes\<node_name>\key.p12

        See the following example:

        C:\IBM\WebSphere\AppServer\profiles\AppSrv01\config\cells\ibmusvr1Node01Cell\nodes\ibmusvr1Node01\key.p12

      • For WebSphere Application Server Network Deployment:

        <was_home>\profiles\<Dmgr_profilename>\config\cells\<cell_name>\key.p12

        See the following example:

        C:\IBM\WebSphere\AppServer\Profiles\Dmgr01\config\cells\ibm-svr1Cell01\key.p12

      Note: If you specify the SSL Java keystore file, you must specify the keystore password in SSL keystore password. See step e.
    5. If you specified the SSL Java keystore file, specify the SSL Java keystore password.

      The default SSL Java keystore password is WebAS.

  14. Accept the default WebSphere Application Server SOAP connector port or specify a different SOAP connector port.
    Note: You can determine the correct port number in the following directory for each profile. For example:

    Stand-alone: <was_home>/profiles/<AppSrv_profilename>/logs/AboutThisProfile.txt

    Network deployment: <was_home>/profiles/<Dmgr_profilename>/logs/AboutThisProfile.txt

    For example:
    • For WebSphere Application Server stand-alone, the default SOAP port for the application server is 8880.
    • For WebSphere Application Server Network Deployment, the default SOAP port for the Deployment Manager is 8879.
  15. Click Next.
  16. Click Install.
  17. In the Installation Complete window, click Done.

What to do next

Before you set up the IMS Server with the IMS Configuration Wizard, verify the IMS Server deployment on the WebSphere Application Server.

If there are any IMS Server installation errors, resolve them before you configure the IMS Server. Check the <ims_home>/ISAM_ESSO_IMS_Server_InstallLog.log file for critical IMS Server installation errors that must be addressed.



Feedback