You can use IBM® Installation
Manager in console mode to install packages from a command-line interface.
About this task
Complete the following steps to run the IBM Installation Manager in console mode to install Tivoli Authorization Policy Server
on the computer where IBM Dashboard
Application Services Hub is already installed.
Note: You cannot install
the Authorization Policy Server and the tivcmd Command Line Interface
for Authorization Policy at the same time by using console mode. You
must install these software packages separately. However, you can
install the IBM Infrastructure
Management Dashboards for Servers at the same time as the authorization
policy server.
Procedure
- Log in as the user who installed IBM Application Services Hub.
- Start the IBM Installation
Manager in console mode from the directory where it was installed. For example:
- C:\Program Files\IBM\Installation Manager\eclipse\tools\imcl.exe
-c
- /opt/IBM/InstallationManager/eclipse/tools/imcl -c
- The following menu is displayed:
Select:
1. Install - Install software packages
2. Update - Find and install updates and fixes to installed software packages
3. Modify - Change installed software packages
4. Roll Back - Revert to an earlier version of installed software packages
5. Uninstall - Remove installed software packages
Other Options:
L. View Logs
S. View Installation History
V. View Installed Packages
------------------------
P. Preferences
------------------------
E. Export Data for Problem Analysis
A. About IBM Installation Manager
------------------------
X. Exit Installation Manager
Select 1 to
install software packages.
- When you are presented with the list of software packages,
select the option for the Tivoli Authorization
Policy Server package.
Note: You can also select the IBM Infrastructure Management Dashboards
for Servers package if you are installing it on the same computer.
- Select 1 to install the current
version of the software package. Option 2 displays
all available versions of the package.
- Authorization Policy Server is selected by default. Select N (Next)
to continue.
- Select your preferred installation location and then select N (Next)
to continue.
- Select the Tivoli Authorization
Policy Server features to install. By default, both Installation and Configuration are
selected. Select N (Next) to continue.
Note: It is recommended to select the Tivoli Authorization Policy Server Installation and Configuration features
together (which is the default behavior). However, you cannot select
the authorization policy server Configuration feature if you did not
select the Configuration feature when IBM Dashboard
Application Services Hub was installed. You should also not select
the Configuration feature if you want to review the deployment scripts
before they are used to deploy the authorization policy server into IBM Dashboard Application Services
Hub. If you select the Installation feature on its own, only the authorization
policy server binaries and install scripts are laid down in the installation
directory (on Windows this
location is usually C:\Program Files\IBM\JazzSM\AuthPolicyServer and
on Linux/UNIX this location is usually /opt/IBM/JazzSM/AuthPolicyServer).
If you select the Configuration feature on its own, the Installation
feature is selected as well.
- Enter your WebSphere® administrator-level
user credentials (user name and password) that can be used to install
the Tivoli Authorization
Policy Server application into IBM Dashboard
Application Services Hub. The installer validates the entered
credentials.
- The Tivoli Authorization
Policy Server periodically compresses a file of the current set of
authorization policies that is available for distribution. On a periodic
interval, the dashboard data provider component of the portal server
makes a request to the Tivoli Authorization
Policy Server for the latest compressed file of policies. If there
is a new file, it is obtained and extracted and this set of policies
becomes the current set of policies that are used by the dashboard
data provider.
Enter the Authorization Policy Server
advanced configuration values or press
Enter to select the
default values. Each property has the following default value and
range:
- Audit log file count
- The maximum number of audit log files to keep at one time.
- Default value is 5. Range is greater than 1 and less than 99999.
- Audit log file size (megabytes)
- The maximum size of each log file in megabytes.
- Default size is 10. Range is greater than 1 and less than 99999.
- Audit log file directory
- The directory into which the log files are stored.
- Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\audit
- Policy-distribution Polling interval (minutes)
- This property specifies how often the Authorization Policy Server
updates the compressed file that contains the authorization policies
that is downloaded by the dashboard data provider.
- Default value is 5. Range is 1 - 1440 minutes.
- Policy-distribution Polling directory
- The directory into which the version of the policies for distribution
is stored.
- Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\dist
- You must restart the Dashboard Application Services Hub
after the Authorization Policy Server installation and configuration
is complete. Select either an automatic or manual restart of the Dashboard
Application Services Hub.
- Review the installation summary window and select I to
proceed with the installation.
What to do next
See
Verifying the Tivoli Authorization Policy Server installation for steps
to verify that the installation was successful.
If you only selected
the installation feature of the Tivoli Authorization
Policy Server, review the authorization policy server's deployment
scripts and then use the Modify operation of IBM Installation Manager to deploy
the authorization policy server into IBM Dashboard
Application Services Hub. See Configuring the Tivoli Authorization Policy Server feature after installation.
If
you selected both the installation and configuration features of Authorization
Policy Server, perform the following tasks:
- If you selected the option for a manual restart of Dashboard Application
Services Hub in step 11, you must restart the application server for
Dashboard Application Services Hub before the Authorization Policy
Server can be used with the tivcmd CLI to create authorization policies.
- Install the tivcmd Command Line Interface on the computers that
administrators use to create authorization policies. Follow the instructions
in Installing the tivcmd Command Line Interface for Authorization Policy using the graphical user interface or Installing the tivcmd Command Line Interface for Authorization Policy using console mode. The user credentials that
you specified during the Authorization Policy Server installation
are assigned to the PolicyAdministrator role. You must use these credentials
with the tivcmd Command Line Interface to log in to the Authorization
Policy Server and assign other administrators permission to create
and work with authorization policy roles.
The IBM Tivoli Monitoring Administrator's
Guide provides
examples of creating authorization policies for common scenarios in
the Using role-based authorization policies chapter. Steps
for configuring a dashboard environment to use authorization policies
are outlined in the Preparing your dashboard environment chapter.
For a complete list of tivcmd CLI commands, see the IBM Tivoli Monitoring Command Reference.