IBM Tivoli Monitoring, Version 6.3

Installing and configuring the Tivoli Authorization Policy Server using console mode

You can use IBM® Installation Manager in console mode to install packages from a command-line interface.

Before you begin

Install the prerequisite software that is described in Required software and memory requirements for a dashboard environment before you install and configure the Tivoli® Authorization Policy Server.

Set up a local or network repository that contains the IBM Tivoli Monitoring components for a dashboard environment. See Using IBM Installation Manager to install components from a local repository or Using IBM Installation Manager to install components from a network repository.

About this task

Complete the following steps to run the IBM Installation Manager in console mode to install Tivoli Authorization Policy Server on the computer where IBM Dashboard Application Services Hub is already installed.
Note: You cannot install the Authorization Policy Server and the tivcmd Command Line Interface for Authorization Policy at the same time by using console mode. You must install these software packages separately. However, you can install the IBM Infrastructure Management Dashboards for Servers at the same time as the authorization policy server.

Procedure

  1. Log in as the user who installed IBM Application Services Hub.
  2. Start the IBM Installation Manager in console mode from the directory where it was installed. For example:
    • Windows C:\Program Files\IBM\Installation Manager\eclipse\tools\imcl.exe -c
    • Linux UNIX /opt/IBM/InstallationManager/eclipse/tools/imcl -c
  3. The following menu is displayed:
    Select:
         1. Install - Install software packages
         2. Update - Find and install updates and fixes to installed software packages
         3. Modify - Change installed software packages
         4. Roll Back - Revert to an earlier version of installed software packages
         5. Uninstall - Remove installed software packages
    
    Other Options:
         L. View Logs
         S. View Installation History
         V. View Installed Packages
            ------------------------
         P. Preferences
            ------------------------
         E. Export Data for Problem Analysis
         A. About IBM Installation Manager
            ------------------------
         X. Exit Installation Manager

    Select 1 to install software packages.

  4. When you are presented with the list of software packages, select the option for the Tivoli Authorization Policy Server package.
    Note: You can also select the IBM Infrastructure Management Dashboards for Servers package if you are installing it on the same computer.
  5. Select 1 to install the current version of the software package. Option 2 displays all available versions of the package.
  6. Authorization Policy Server is selected by default. Select N (Next) to continue.
  7. Select your preferred installation location and then select N (Next) to continue.
  8. Select the Tivoli Authorization Policy Server features to install. By default, both Installation and Configuration are selected. Select N (Next) to continue.
    Note: It is recommended to select the Tivoli Authorization Policy Server Installation and Configuration features together (which is the default behavior). However, you cannot select the authorization policy server Configuration feature if you did not select the Configuration feature when IBM Dashboard Application Services Hub was installed. You should also not select the Configuration feature if you want to review the deployment scripts before they are used to deploy the authorization policy server into IBM Dashboard Application Services Hub. If you select the Installation feature on its own, only the authorization policy server binaries and install scripts are laid down in the installation directory (on Windows this location is usually C:\Program Files\IBM\JazzSM\AuthPolicyServer and on Linux/UNIX this location is usually /opt/IBM/JazzSM/AuthPolicyServer). If you select the Configuration feature on its own, the Installation feature is selected as well.
  9. Enter your WebSphere® administrator-level user credentials (user name and password) that can be used to install the Tivoli Authorization Policy Server application into IBM Dashboard Application Services Hub. The installer validates the entered credentials.
  10. The Tivoli Authorization Policy Server periodically compresses a file of the current set of authorization policies that is available for distribution. On a periodic interval, the dashboard data provider component of the portal server makes a request to the Tivoli Authorization Policy Server for the latest compressed file of policies. If there is a new file, it is obtained and extracted and this set of policies becomes the current set of policies that are used by the dashboard data provider.
    Enter the Authorization Policy Server advanced configuration values or press Enter to select the default values. Each property has the following default value and range:
    Audit log file count
    The maximum number of audit log files to keep at one time.
    Default value is 5. Range is greater than 1 and less than 99999.
    Audit log file size (megabytes)
    The maximum size of each log file in megabytes.
    Default size is 10. Range is greater than 1 and less than 99999.
    Audit log file directory
    The directory into which the log files are stored.
    Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\audit
    Policy-distribution Polling interval (minutes)
    This property specifies how often the Authorization Policy Server updates the compressed file that contains the authorization policies that is downloaded by the dashboard data provider.
    Default value is 5. Range is 1 - 1440 minutes.
    Policy-distribution Polling directory
    The directory into which the version of the policies for distribution is stored.
    Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\dist
  11. You must restart the Dashboard Application Services Hub after the Authorization Policy Server installation and configuration is complete. Select either an automatic or manual restart of the Dashboard Application Services Hub.
  12. Review the installation summary window and select I to proceed with the installation.

What to do next

See Verifying the Tivoli Authorization Policy Server installation for steps to verify that the installation was successful.

If you only selected the installation feature of the Tivoli Authorization Policy Server, review the authorization policy server's deployment scripts and then use the Modify operation of IBM Installation Manager to deploy the authorization policy server into IBM Dashboard Application Services Hub. See Configuring the Tivoli Authorization Policy Server feature after installation.

If you selected both the installation and configuration features of Authorization Policy Server, perform the following tasks:
  1. If you selected the option for a manual restart of Dashboard Application Services Hub in step 11, you must restart the application server for Dashboard Application Services Hub before the Authorization Policy Server can be used with the tivcmd CLI to create authorization policies.
  2. Install the tivcmd Command Line Interface on the computers that administrators use to create authorization policies. Follow the instructions in Installing the tivcmd Command Line Interface for Authorization Policy using the graphical user interface or Installing the tivcmd Command Line Interface for Authorization Policy using console mode. The user credentials that you specified during the Authorization Policy Server installation are assigned to the PolicyAdministrator role. You must use these credentials with the tivcmd Command Line Interface to log in to the Authorization Policy Server and assign other administrators permission to create and work with authorization policy roles.

    The IBM Tivoli Monitoring Administrator's Guide provides examples of creating authorization policies for common scenarios in the Using role-based authorization policies chapter. Steps for configuring a dashboard environment to use authorization policies are outlined in the Preparing your dashboard environment chapter. For a complete list of tivcmd CLI commands, see the IBM Tivoli Monitoring Command Reference.



Feedback