Use the IBM® Installation
Manager to update the Tivoli® Authorization
Policy Server to a later version such as a fix pack version.
About this task
Complete the following steps to update the Tivoli Authorization Policy Server using a
graphical user interface.
Procedure
- Start the IBM Installation
Manager:
- Double-click the IBMIM.exe file that is
located in the eclipse subdirectory in the directory where IBM Installation Manager was installed.
The default path for IBM Installation
Manager on Windows is C:\Program
Files\IBM\Installation Manager\eclipse.
- Execute the IBMIM binary under /opt/IBM/InstallationManager/eclipse.
- Configure the repository with the latest Tivoli Authorization Policy Server package
by adding the path to the update package. Click File →
Preferences → Repository and add the path to the updated Tivoli Authorization Policy Server
package.
- On the main Installation Manager window, click Update.
- Select the Core services in Jazz for Service
Management package and click Next.
- Installation Manager displays the version of the updated Tivoli Authorization Policy Server
package. Click Next to continue.
- Select the Installation and Configuration features of the Tivoli Authorization Policy Server
package and click Next.
Note: It
is recommended to select the Tivoli Authorization Policy
Server Installation and Configuration features
together (which is the default behavior). You should not select the Configuration feature
if you want to review the deployment scripts before they are used
to update the authorization policy server in IBM Dashboard Application Services Hub. If you
select the Installation feature on its own,
only the updated authorization policy server binaries and install
scripts are laid down in the installation directory (on Windows this location is usually C:\Program
Files\IBM\JazzSM\AuthPolicyServer and on Linux/UNIX this
location is usually /opt/IBM/JazzSM/AuthPolicyServer)
and you are not prompted for the configuration parameters in the steps
that follow. If you select the Configuration feature
on its own, the Installation is also selected.
- The WebSphere® configuration
panel is displayed. Enter your administrator-level user credentials,
such as tipadmin and tippass in
the User name and Password fields,
and click Validate. These credentials are used
to update the authorization policy server application in the WebSphere Application Server
for IBM Dashboard Application
Services Hub. After your credentials are validated, the Next button
is enabled. Click Next.
- The Tivoli Authorization
Policy Server periodically compresses a file of the current set of
authorization policies that is available for distribution. On a periodic
interval, the dashboard data provider component of the portal server
makes a request to the Tivoli Authorization
Policy Server for the latest compressed file of policies. If there
is a new file, it is obtained and extracted and this set of policies
becomes the current set of policies that are used by the dashboard
data provider.
Configure the advanced Tivoli Authorization Policy Server parameters
for audit logging and policy distribution. Each property has the following
default value and range:
- Audit log file count
- The maximum number of audit log files to keep at one time.
- Default value is 5. Range is greater than 1 and less than 99999.
- Audit log file size (megabytes)
- The maximum size of each log file in megabytes.
- Default size is 10. Range is greater than 1 and less than 99999.
- Audit log file directory
- The directory into which the log files are stored.
- Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\audit
- Policy-distribution Polling interval (minutes)
- This property specifies how often the Authorization Policy Server
updates the compressed file containing the authorization policies
that is downloaded by the dashboard data provider.
- Default value is 5. Range is 1 - 1440 minutes.
- Policy-distribution Polling directory
- The directory into which the latest version of the policies for
distribution is stored.
- Default value is <JAZZSM_INSTALL_DIR>\AuthPolicyServer\PolicyServer\dist
Note: The panel displays the values that were specified
the last time that the Tivoli Authorization
Policy package was configured for an installation or package update
using the IBM Tivoli Monitoring installation launchpad or IBM Installation Manager. If you
modified the properties after the last configuration, then those values
are not displayed. If you want to continue using the modified values,
you must reenter them on this panel.
- You must restart the Dashboard Application Services Hub
after the Tivoli Authorization
Policy Server update is complete. Select either an automatic or manual
restart of the Dashboard Application Services Hub and click Confirm.
Click OK when prompted and Next to
continue.
- Click Update to update the Tivoli Authorization Policy Server.
What to do next
If you only selected the Installation feature of the updated Tivoli Authorization Policy Server
package, review the authorization policy server's deployment scripts
and then use the
Modify operation of IBM Installation Manager to deploy
the updated authorization policy server into IBM Dashboard Application Services Hub. For more
information, see
Configuring the Tivoli Authorization Policy Server feature after installation.
If
you selected both the installation and configuration features of Authorization
Policy Server together with the option for a manual restart of Dashboard
Application Services Hub in step 9, you must restart the application
server for Dashboard Application Services Hub. You must do this before
you can use the updated Authorization Policy Server with the tivcmd
CLI to create authorization policies.