CA Identity Suite 14.x: Implementation - Install The Components 200

CA
Identity Suite 14.x:
Implementation – Install the
Components 200
<Brand>™® <Product>®™

Clarifier (what comes after the colon)
Lab Guide
Lab Guide

04IMG2041S <course code>
04IMG2041LG1 <inventory code>
‐ PROPRIETARY AND CONFIDENTIAL INFORMATION ‐
© 2017 CA. All rights reserved. CA confidential & proprietary information. For CA, CA Partner and CA
Customer use only. No unauthorized use, copying or distribution. All names of individuals or of companies
referenced herein are fictitious names used for instructional purposes only. Any similarity to any real
persons or businesses is purely coincidental. All trademarks, trade names, service marks and logos
referenced herein belong to their respective companies. These Materials are for your informational
purposes only, and do not form any type of warranty. The use of any software or product referenced in the
Materials is governed by the end user’s applicable license agreement. CA is the manufacturer of these
Materials. Provided with “Restricted Rights.”

CA Identity Suite 14.x: Implementation – Install the Components 200
Table of Contents
Lab 2‐1 Install the Prerequisite Software ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 1
Lab 2‐2 Install CA Identity Manager ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 4
Lab 2‐3 Validate the Installation ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 7
Lab 4‐1 Install the Prerequisite Software ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 11
Lab 4‐2 Install CA Identity Governance ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 14
Lab 4‐3 Validate the Installation ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 17
Lab 6‐1 Install the Prerequisite Software ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 21
Lab 6‐2 Install CA Identity Portal ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 25
Lab 6‐3 Validate the Installation ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 28
Appendix: Dynamic Lab Environment Access and User Guide ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 31
Self‐Directed Learning Access and Instructions ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 33
Instructor‐Led Class Set‐Up∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 37
Best Practices ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 39
Troubleshooting ∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙∙ 40

TOC‐1

© 2017 CA. All rights reserved.

CA Identity Suite 14.x: Implementation – Install the Components 200

For the Learn More Edition Subscriber:

In addition to this fully functional training platform (Dynamic Lab Environment), your subscription
includes a web‐based training component with recorded demonstrations of these lab activities.
Although not required, we recommend you review the WBT component first, as it describes various
use cases for the features and context for the lab activities.

TOC‐2


Module 2: Install CA Identity Manager
Lab 2-1 Install the Prerequisite Software
Goals Install the prerequisite software.
Time 15 minutes
Instructions:
Create a Database in SQL Server

SQL Server is already installed on the IMServer machine. However, you will need to create a new
database.
1. In the Start menu, click SQL Server 2014 Management Studio.

In the Connect to Server dialog that appears, all fields except Password are prepopulated.
2. In the Password field, type caeducation and click Connect.
3. In the Object Explorer, expand the Databases folder.

Currently only the out-of-the-box SQL Server databases are installed.
4. Right-click the Databases folder and click New Database.
5. In the New Database dialog, in the Database name field, type the following and click OK:
imstore
Note: Although, you will use imstore for this exercise, you can use any name for the database.
You can optionally set up users for the database. However, for this lab, you will use the existing
sa user.
Install the JDK

Because the JDK is a prerequisite for CA Directory, you need to install this next.
6. In the C:\InstallMedia folder, double-click jdk-8u91-windows-x64.exe.
7. Click Run and accept all the default settings, clicking Next, as necessary.
The installation will take several minutes.
8. When the installation completes, click Close.
CA Technologies CA Identity Suite 14.x: Implementation - Install the Components 200 1

Install WildFly
Next, you will install WildFly, the application server.
9. In the C:\InstallMedia folder, right-click the wildfly-8.2.0.Final.zip file and click WinZip 
Extract to.
10. In the WinZip Extract dialog, select the root of the C drive and click Extract.
11. When the extraction completes, at the root of the C drive, double-click the wildfly-8.2.0.Final
folder and view its contents.
Install CA Directory
CA Directory is packaged in the following zip file within the InstallMedia folder:
GEN04092029E_CA Identity Manager 12.6 SP8 Server Components for Windows - ESD Only.zip
12. Create a temporary folder within the InstallMedia folder and name it IMServer.
You will extract the server components to this folder.
13. Right-click the CA Identity Manager r14.0.0 Server Components for Windows - ESD Only.zip
file and click WinZip  Extract to.
14. In the WinZip Extract dialog, select the C:\InstallMedia\IMServer folder and click Extract.
15. When the files and folders are extracted, open the following folder:
C:\InstallMedia\IMServer\CADirectory_x64\dxserver\windows
16. Double-click dxsetup.exe.
17. In the Security Warning message, click Run.
18. On the Introduction page, click Next.
19. Scroll down to the end of the License Agreement, accept the terms and click Next.
20. On the Installation Type page, accept the default of Typical and click Next.
21. On the Dxadmind Details page, clear the DXmanager will manage and monitor CA Directory on
this host check box and click Next.
22. On the Review Settings page, click Next.
23. On the Install the Program page, click Install.
24. When the installation completes, click Finish.
2 CA Identity Suite 14.x: Implementation – Install the Components 200 CA Technologies

25. To verify the CA Directory installation, open a Command Prompt window and enter the
following command:
dxserver version
26. The version details appear:

dxserver 12.0.18 (build 12081) Windows_NT 64-Bit
Stop Here! Only proceed to the next activity when instructed to do so.

Lab 2-2 Install CA Identity Manager
Goals Install CA Identity Manager
Time 30 minutes
Instructions:
1. Restart the IMServer virtual machine.
Note: Sometimes this is necessary to avoid issues with the CA Identity Manager installer not
recognizing CA Directory.
The login credentials for the IMServer virtual machine are:
Username Administrator
Password caeducation
2. In the C:\InstallMedia\IMServer folder, double-click ca-im-14.0.0-win32.exe.

Important: On the Introduction page, notice the strong recommendation that you exit all other
programs. This is important because having the installer folder open can prevent CA Directory
from being recognized during the CA Identity Manager installation.
4. Close any other programs or folders you have open and click Next.
5. Scroll to the end of the License Agreement, accept the terms, and click Next.
6. On the Select Components page, accept the default settings but clear the Extensions for
SiteMinder (if SiteMinder is installed locally) check box.
Notice that the Connect to Existing SiteMinder Policy Server is clear by default.
7. Click Next.
If you receive a message indicating that CA Directory is not installed, you will need to run the CA
Directory installer again and close all open programs and folders before starting the CA Identity
Manager installation.
8. On the Select Deployment Size page, accept the default, which is Compact, and click Next.
9. On the Provisioning Server Hostnames page, accept the default, which is imserver, and click
Next.

10. On the Provisioning Directory Information page, complete the following information and click
Next:
Provisioning Directory Host imserver
Provisioning Directory Shared Secret caeducation
Confirm Shared Secret caeducation
11. On the Destination Location page, accept the default and click Next.
12. On the FIPs Information page, accept the default FIPS key location and click Next.
Do not enable FIPS 140-2 Compliance mode.
13. On the Application Server Information page, accept the default, which is JBoss, and click Next.
14. On the JBoss Application Server Information page:

a. Under the JBoss Folder field, click Choose.
b. In the Browse For Folder dialog, navigate to the following folder and click OK:
C:\wildfly-8.2.0.Final
c. In the Access URL and Port field, type the following:
http://imserver.voonair.local:8080
d. Click Next.
15. On the Select Java Virtual Machine page, to locate the 1.8 version of the JDK, click Search For
Others.
16. Select the following instance and click Next:

C:\Program Files\Java\jdk1.8.0_91\bin\java.exe
Note: You can click Stop Searching and then select the instance.
17. On the Key Encryption Information page, accept the defaults and click Next.
18. On the Select Database Type page, accept the default, which is Microsoft SQL Server and click
Next.
19. On the Database Connection Information page, complete the following information and click
Next:
Host Name localhost
Port Number 1433
Database Name imstore
Username sa
Note: If any of this information is incorrect, you will get a message indicating that you cannot
connect to SQL Server when you click Next.

20. On the Login Information page, complete the following information and click Next:
Username imadmin
Confirm Password caeducation
Enable Secure Login for Selected
Management Console (Default)
21. On the HTTP Proxy settings page, accept the default, where global HTTP Proxy settings are not
enabled and click Next.
22. On the User Store Connection Parameters page, accept the defaults and click Next.
23. On the Provisioning Store Information page, accept the defaults and in the Password field, type
the following and click Next:
caeducation
24. On the Out of the Box Environment Information page, accept the defaults and click Next.
25. On the Review Settings page, review your settings and click Install.
The installation takes about 10 minutes. When the installation completes the following icons
will be accessible from your Start menu under CA:
• Apache DS Javadoc
• Connector Server SDK Javadoc
• Connector Xpress
• Documentation
• Identity Manager Management Console
• Provisioning Manager
• Provisioning Manager Help
• Provisioning Manager Setup
• Readme
• Release Notes
• Start Identity Manager

Lab 2-3 Validate the Installation
Goals Validate the installation.
Time 20 minutes
Instructions:
Verify the Provisioning Components Installed Correctly
1. On the desktop, double-click the Services icon.
2. Scroll down the Services window and verify the status of the CA Identity Manager Provisioning
Server and Connector Servers is set to Running.
Verify the Provisioning Manager Is Working
3. On the Start menu, locate and click the Provisioning Manager Setup icon.
4. In the IM Provisioning Manager Configuration Wizard, complete the following information and
click Configure:
Host name imserver
Port Number 20389
The remaining information is populated.
5. Click OK.
A message indicates that the IM Provisioning Manager configured successfully.
6. Click OK.
7. On the Start menu, locate and click the Provisioning Manager icon.
8. In the Open Domain dialog, complete the following information and click OK:
User name imadmin
9. To verify that the connection is working, click Search.

The search returns the imadmin user, which is the only user at this stage.

10. Close the Provisioning Manager.
Verify WildFly Server Starts Correctly
11. On the Start menu, locate and click the Start Identity Manager Server icon.
This launches the WildFly executable in a Command Prompt window, where you can follow the
startup steps. It is useful to check the startup sequence after the install for verification
purposes. However, later when you launch your browser, you will install WildFly as a service.
Note: You can continue to the next step while you wait for the startup steps to complete.
12. After or during the startup sequence, on the Start Menu, click SQL Server 2014 Management
Studio.
13. In the Password field, type caeducation and click Connect.
14. Expand the Databases folder.
15. Expand imstore and then expand Tables.

Notice the database components are now beginning to populate.
16. In the Command Prompt window, confirm that all startup steps have completed.
It should show –––– CA IAM FW Startup Sequence Complete. ––––
Verify that the Out-of-the-box Environment is Running
17. On the Start Menu, locate and click the Identity Manager Management Console icon.
18. On the CA Management Console login page, complete the following information and click Log
In:
User Name imadmin
19. Click the Directories link.

Three directories appear:
• AuthenticationDirectory
• ProvStore
• UserStore
20. Click the Home link.
21. Click the Environments link.

The identityEnv environment appears, which is the out-of-the-box environment.
22. Click the identityEnv link.

23. Scroll down to the Status property.

Notice that it has a Running status.
24. To log into your CA Identity Manager environment, in your browser, change the URL field to:
http://imserver.voonair.local:8080/iam/im/identityEnv
25. Under Sign in, complete the following information and click SIGN IN:
User Name imadmin
Password test
26. After you log in, you can change the default password. However, for these exercises, leave it as
test.
You have verified that the out-of-the-box environment is running and that the WildFly server
started. You will now set the JAVA_HOME variable and install WildFly as a service.
Set the JAVA_HOME Environment Variable
27. To set JAVA_HOME, on your desktop, right-click IMSERVER and click Properties.
28. Click Advanced System Settings.
29. In the System Properties dialog, click Environment Variables.
30. Under System Variables, click New.
31. In the New System Variable dialog, complete the following information and click OK:
Variable name JAVA_HOME
Variable value C:\Program Files\Java\jdk1.8.0_91
32. In the Environment Variables dialog, click OK.
33. In the System Properties dialog, click OK.
Install WildFly as a Service

Important: If you attempt to run WildFly as a service and from a Command Prompt window at the
same time, the ports will conflict.
34. Close the Command Prompt window.
35. Open a new Command Prompt window.
36. At the prompt, enter the following:

cd c:\wildfly-8.2.0.Final\bin\service

37. Enter the following:

service install
38. On the desktop, double-click Services.
39. Scroll down and notice that Wildfly is listed as a service.
40. Double-click the Wildfly service.
41. In the Startup type list, select Automatic.
42. Click Apply and then click OK.

Wildfly will start each time you start the machine.
43. Right-click the Wildfly service and click Start.
44. Close the Services window.
45. Close the Command Prompt window and any other open windows.
46. To locate the log files, navigate to the following folder:

C:\wildfly-8.2.0.Final  standalone  log
47. Open the server.log file and scroll to the bottom to view the current startup step. You need to
wait until the startup sequence has completed before you can launch a browser and sign in. You
might need to close and open the file several times before it reaches completion.
48. After the startup sequence completes, close the log file and in your browser URL field, enter the
following:
http://imserver.voonair.local:8080/iam/im/identityEnv
49. Under Sign in, complete the following information and click SIGN IN:
User Name imadmin
Password test
You have successfully verified that CA Identity Manager and provisioning is up and running and
that WildFly is installed as a service.

Module 4: Install CA Identity Governance
Goals Install the prerequisite software for CA Identity Governance.
Time 10 minutes
Instructions:
Verify the Correct Version of the .NET Framework Is Installed on the IGServer Machine
.NET Framework version 1.1 or 2.0, which is a required prerequisite, is already installed on the lab
machine. However, for this exercise you will follow the installation steps because the correct
version might not always be installed with newer versions of Windows.
1. Launch the IGServer virtual machine.
2. On the Start menu, click Server Manager.
3. On the dashboard, under Configure this local server, click Add roles and features.
The Add Roles and Features wizard appears.
4. Accept all defaults and click Next until you reach the Features page.
5. On the Features page, in the Features list, expand .NET Framework 3.5 Features (1 of 3
installed) and verify that .NET Framework 3.5 (includes .NET 2.0 and 3.0) is selected.
6. Because the correct version is already installed, click Cancel.
7. Close the Server Manager window.
Install the Other Microsoft Prerequisites
8. Open the C:\IntallMedia folder and notice the following installation files:
• msxml6_x64.msi, which installs Microsoft XML version 6
• vcredist_x64.msi, which installs Microsoft Visual C++ 2005 SP1 Redistributable Package
• sqlncli_x64.msi, which installs Microsoft SQL Native Client 2005
Running the SQL native client installer is optional depending on the type of database you
are using but we recommend you install it because it is required if the database instance is
remote, which is generally the case.

9. To install Microsoft XML version 6:

a. Double-click msxml6_x64.msi.
b. When the installation completes, click Finish.
10. To install Microsoft Visual C++ 2005 SP1 Redistributable Package:

a. Double-click vcredist_x64.msi.
b. To accept the license agreement, click Yes.
11. To install Microsoft SQL Native Client 2005:

a. Double-click sqlncli_x64.msi.
b. Accept all the defaults, accept the terms of the license agreement, and click Next as
necessary.
c. Click Install.
d. Click Finish.
Install JDK 1.8 Update 40

CA Identity Governance 14.0 requires Oracle Java SE Development Kit 8u40 (1.8_40) as a
prerequisite for the Wildfly 8.2.x application server that is installed with the product.
12. Double-click jdk-8u40-windows-x64.exe.
13. Click Run.
14. Accept all the defaults, clicking Next as necessary.
15. Click Close.
Set the JAVA_HOME Variable
16. Navigate to C:\Program Files\Java\jdk1.8.0_40 and copy the path.
17. Right-click the IGServer icon on the desktop and click Properties.
18. Click Advanced system settings.
19. In the System Properties dialog, click Environment Variables.
20. Under System Variables, click New.
21. In the New System Variable dialog, complete the following information and click OK.
Variable name JAVA_HOME
Variable value C:\Program Files\Java\jdk1.8.0_40

22. In the Environment Variables dialog, click OK.
23. In the System Properties dialog, click OK.

Lab 4-2 Install CA Identity Governance
Goals Install CA Identity Governance.
Time 30 minutes
Instructions:
Extract the Installation Files
1. Open the C:\InstallMedia folder and notice the 15 CA Identity Governance zip files, which you
will need to extract.
2. Create a new folder within C:\InstallMedia and name it IG.
3. Select all 15 zip files, right-click, and click WinZip Extract to.
4. Select the C:\InstallMedia\IG folder and click Extract.

The 15 extracted files in the IG folder are also zip files. However, you only need to extract two
files.
5. In the IG folder, right-click CA-IdentityGovernance-14.0.0-Installer.zip and click WinZip 

Extract to here.
Two files appear, an .exe file, which you will run later, and a .bin file.
6. Right-click CA-IdentityGovernance-14.0.0-Client-Tools-x64.zip and click WinZip Extract to

here.
An msi file appears.
Install CA Identity Governance
7. Double-click the InstCAIdentityGovernance.exe file and click Run.
8. On the initial screen where you can select a language, click OK.
10. Scroll down the License Agreement page, accept the terms, and click Next.
11. On the Select the SQL Server type to be used page, accept the default, which is MS SQL Server
and click Next.

12. On the SQL Server page, in the MS SQL Server Host field, change IGSERVER to the following and
click Next:
IMSERVER
13. On the SQL Credentials page, in the SQL Server Password field, type the following and click
Next:
caeducation
14. On the Database Parameters page, notice that the fields are prepopulated with three
databases, which will be created by the installer, eurekify_sdb, eurekify_ticketdb, and WPDS.
Click Next.
15. On the Define the Data-Warehouse parameters page, notice the database name,
gvm_datawarehouse, which will also be created by the installer. Click Next.
16. On the Application Server page, accept the default out-of-the-box application server, which is
Wildfly, and click Next.
17. On the Workpoint Server Host page, accept the default, which is this computer, and click Next.
18. On the Choose Destination Folder page, accept the default location and click Next.
19. On the Choose Shortcut Folder page, accept the default and click Next.
20. On the Provisioning Component Selection page, accept the default, which is Install IAM
Connector Server, and click Next.
21. Scroll down the License Agreement page in the Connector Server installer, accept the terms,
and click Next.
22. On the FIPS Information page, accept the default, where FIPS mode is not enabled, and click
Next.
23. On the IAM CS Password page, specify and confirm the following password and click Next:
caeducation
24. On the Pre-Installation Summary page, review the information and click Next.
The installation takes around 10 minutes to complete.
25. When the installation completes, click Done.
26. If your installation completes with any warnings or errors, you can review the installation log
file at the following location:
C:\Program Files\CA\RCM\Server\Uninstall_CA Identity Governance
If you see any fatal errors, you cannot proceed. Non-fatal errors and warning are fine; just note
what they are and proceed.

Install Client Tools
27. In the C:\InstallMedia\IG folder, double-click CA-IdentityGovernance-12.6.05-Client-Tools-

x64.msi.
29. Accept the defaults, accepting the terms of the license agreement, and click Next as necessary,
until you reach the Additional Components page.
Notice that you can install UUID. You will not need to do this for this course. You can also select
documentation but you do not need to do this either. If you select to install the documentation,
you will be prompted to locate language files during the installation. Click Next.
30. On the Select Installation Folder page, to enable all users to access client tools, click Everyone
and click Next.
31. On the Confirm Installation page, click Next.
32. After the installation completes, click Close.
33. In the CA section of the Start menu, notice the new icons that appear:
• Identity Governance JBOSS Server
• IdentityGovernance-Client-Tools
• Workpoint Designer

Goals Validate the CA Identity Governance installation.
Time 15 minutes
Instructions:
Launch the Portal Process
1. On the Start menu, under CA, click Identity Governance JBOSS Server.
Note: On the Start menu, you need to click the down arrow to view the list of applications on
the system.
A Command Prompt window appears showing JBOSS process details. Leave the window open. It
will take some time for the portal to complete the startup. You can enable client tools to run
while you wait and log into the portal later.
Enable Client Tools to Run

You can copy the following commands from the Commands.txt file in the C:\InstallMedia folder.
2. Open a new Command Prompt window and enter the following command:
cd C:\Windows\Microsoft.NET\Framework64\v2.0.50727
3. Enter the following command:

regasm.exe "C:\Program Files\CA\Identity Governance\Client Tools\Software\
Microsoft.Web.Services3.dll"
A warning message indicates that no types were registered. This is the correct response.

regasm.exe "C:\Program Files\CA\Identity Governance\Client Tools\Software\
SageSOAP.dll"
A message indicates that types registered successfully.

Verify CA Identity Governance Portal
5. Open a browser window and in the URL field, enter the following:
http://localhost:8080/eurekify
6. Complete the following information and click Log In.

User Name ad1\eadmin
Note: Because security is not configured, the password you type is not important. You only
need to complete the field.
Verify Client Tools
7. Minimize the open Windows and to open Client Tools, on the desktop, double-click the CA-
IdentityGovernance-Client-Tools-14.0.0 shortcut.
8. If a dialog appears requesting SQL Server and Web Server credentials, click Cancel.
The page is initially blank.
9. Click File  General Settings.
10. In the Discovery and Audit Settings dialog, click the SQL Connectivity tab.
11. Click Request SQL Credentials from a Server.

Under this option button, the address URL is split into four unnamed fields, showing the values
for the protocol, server, port, and path.
12. For the server, specify localhost and for the port, specify 8080.
Note: Leave the protocol and path at their default values.
13. Click Apply.
14. In the Enter Server Credentials dialog, complete the following information and click OK:
a. SQL Server:
User Name sa
b. Web Server:
User Name ad1\eadmin
As indicated earlier, because security is not configured, the Web Server password is not
important.

A message appears indicating that SQL Server successfully connected.
15. Click OK and click Close.
16. On the toolbar, click the Open from SQL button.

The Database Wizard appears.
On the Choose a Document to Open Page, notice the three configuration files, including
ConfigNoRoles.cfg, which is selected by default.
17. Make sure ConfigNoRoles.cfg is selected and click Next.

The ConfigNoRoles.cfg file opens, showing the default data.
You have successfully verified that the client tools and the portal are running.


Module 6: Install CA Identity Portal
Goals Install the prerequisite software.
Time 25 minutes
Instructions:
Install and Prepare the Database

SQL Server is the database for this course. Perform the following steps on the IMServer machine.
1. On the Start Menu, click SQL Server 2014 Management Studio.
2. In the Connect to Server dialog, click Connect.

Note: If you are prompted for a password, type caeducation.
3. In the Object Explorer, right-click Databases and click New Database.
4. In the Database Name field, type the following and click OK:
ipstore
Your new database appears under Databases in the Object Explorer. When you connect later,
you will use the sa user and the caeducation password.
5. Close SQL Server 2014 Management Studio.
Install WildFly for CA Identity Portal

Because CA Identity Portal is running on the same server as CA Identity Manager, you do not need
to install the JDK again. However, although WildFly is already installed on the server, you cannot
use the same WildFly instance that CA Identity Manager uses because they will conflict. Therefore,
you need to create another instance of WildFly.
6. In the C:\InstallMedia folder, right-click wildfly-8.2.0.Final.zip, and click WinZip  Extract to

here.
7. Rename the wildfly-8.2.0.Final folder to:

wildfly-8.2.0.Portal
CA Technologies CA Identity Suite 14.x: Implementation – Install the Components 200 21

8. Move the wildfly-8.2.0.Portal folder directly under the C drive.

Notice the two folders, wildfly-8.2.0.Portal and wildfly-8.2.0.Final. You do not need to set the
JAVA_HOME environment variable again. However, you do need to set the JAVA_OPTS variable
and you will need to update the port numbers to avoid conflicts.
9. In the wildfly-8.2.0.Portal folder, in the bin folder, open the standalone.conf.bat file in
Notepad.
10. Click Edit  Find and search for xms.
11. Change the following line to:

set "JAVA_OPTS=-Xms2048M -Xmx2048M -XX:MaxPermSize=1024M"
12. Save and close the file.
13. In the wildfly-8.2.0.Portal folder, in the standalone\configuration folder, open the

standalone.xml file in Notepad++.
14. Locate the socket-binding-group tag and at the end of the opening tag, update the port-offset
value, which is currently set to 0, as follows:
port-offset="$(jboss.socket.binding.port-offset:10000)">
This will increase the value of all the port numbers under this tag by that amount. Therefore,
for example, 8080 will become 18080.
15. Save and close the standalone.xml file.
16. To verify that the correct JDK is being used:

a. Open a Command Prompt window.
You can copy the following commands from the Commands.txt file in the C:\InstallMedia
folder.
b. Enter the following commands:
cd \wildfly-8.2.0.Portal\bin
standalone.bat -b=0.0.0.0 -bmanagement=0.0.0.0
Notice that jdk1.8.0_91 is loaded, which is the only version on this machine, but it is still a best
practice to verify this. Keep the Command Prompt window open.

17. To verify that the JBoss command line client is working properly.
a. Open a new Command Prompt window.
Leave the other Command Prompt window open.
b. Enter the following commands:
cd \wildfly-8.2.0.Portal\bin
jboss-cli.bat --connect --commands=version,quit
No errors appear.
c. Press any key to continue.
You are returned to the wildfly-8.2.0.Portal\bin directory.
18. To create a JBoss administrative user, in the same Command Prompt window:
a. Enter the following command:
add-user.bat
b. To select Management User, enter the following:
a
c. You are prompted to specify the user details. When you are prompted for the Username,
enter:
admin
d. To confirm, enter:
yes
e. To specify and confirm the password, enter the following twice:
caeducation@1
f. When prompted for groups, to ignore this prompt, press Enter.
g. To confirm the details, enter the following:
yes
h. To confirm that the new user will be used for one application server process to connect to
another application server process, enter the following:
yes
i. Press any key to continue.
19. Open a browser and enter the following URL.

http://localhost:19990/
The URL updates to http://localhost:19990/console/App.html.
20. In the Windows Security dialog, complete the following information and click OK:
User name admin
Password caeducation@1
The WildFly page appears.

The next step in the general installation procedure is to download the JDBC driver. This is already
downloaded to your lab environment for this class. It is available in the C:\InstallMedia folder in the
sqljdbc4.jar file. You will use this later.
21. Leave the JBoss Command Prompt window open but close the Command Prompt window that
you used to add the administrative user.
You are now ready to install CA Identity Portal.

Lab 6-2 Install CA Identity Portal
Goals Install CA Identity Portal.
Time 15 minutes
Instructions:
Important: Make sure that the JBoss Command Prompt window you used in the previous exercise
is still open. WildFly needs to be running.
1. In the C:\InstallMedia folder, double-click the IdentityPortal_Installer_14.0.1.exe file.
3. On the Select an Installation Mode page, accept the default and click Install.
4. On the License Agreement page, accept the terms of the license agreement and click Next.
5. On the Choose a Java JDK home folder page:

a. Click Choose.
b. In the Browse for Folder dialog, navigate to the following folder and click OK:
IMServer\C:\Program Files\Java\jdk1.8.0_91
c. Click Next.
6. On the Select an Application Server page, click JBoss and click Next.
7. On the Enter JBoss Credentials page, complete the following information and click Next:
Note: Leave the other fields at their default settings.
JBoss Admin User Name admin
Password caeducation@1
JBoss server Home Folder IMServer\C:\wildfly-8.2.0.Portal
Note: You can use the Choose button
to navigate but make sure you choose
the Portal instance of Wildfly.

8. On the Enter Identity Portal credentials page, complete the following information and click
Next.
User name imadmin
Confirm Password caeducation
9. On the Choose Identity Portal Folders page, accept the defaults and click Next.
10. On the Select Identity Portal database type page, click MS SQL Server and click Next.
11. On the Select MS SQL Server version page, click 2012/2014 and click Next.
12. On the Enter Identity Portal database credentials page, complete the following information and
click Next.
Database Host imserver
Instance Port 1433
Database Name ipstore
Database User sa
Database Password caeducation
Database Driver Path IMServer\C:\InstallMedia\sqljdbc4.jar
Note: You can use the Choose button to select the path.
The connection to the database is validated.
13. On the Choose a Deployment Version page, accept the default, which is General Release, and
click Next.
14. On the Select Installation Folder page, accept the default location and click Next.
15. On the Preinstallation Summary page, review the summary and click Install.
16. When the installation completes, click Done.
17. To verify that the icons appear on the Start menu, click the Start menu and locate the Identity
Portal section.
Three icons appear:
• Change Identity Portal Installation
• Identity Portal
• Identity Portal - Management Console


Goals Install the Prerequisite Software.
Time 10 minutes
Instructions:
Log in to the CA Identity Portal Admin UI and Deployment Xpress
1. Open a browser and enter the following URL:

http://localhost:18080/sigma/admin
2. In the Windows Security dialog, complete the following information and click OK:
User name imadmin
The Welcome page for the Admin UI and Deployment Xpress appears.
Install Wildfly as a Service for CA Identity Portal

At this point, you will install the Wildfly service for CA Identity Portal. Earlier you installed the
service for CA Identity Manager. Therefore, you need to make sure you use a different name.
3. Close the Command Prompt window for JBoss that you opened earlier.
4. Navigate to the C:\wildfly-8.2.0.Portal\bin\service folder and open the service.bat file in

Notepad++.
5. Locate and update the following lines:

set SHORTNAME=WildflyPortal
set DISPLAYNAME="WildflyPortal"
set DESCRIPTION ="Wildfly Portal Application Server"
6. Save and close the service.bat file.
7. Open a Command Prompt window.

You can copy the following command from the Commands.txt file in the C:\InstallMedia folder.
8. At the prompt, enter the following command:

cd c:\wildfly-8.2.0.Portal\bin\service


service install
10. On the desktop, double-click the Services shortcut.

Notice that in addition to the Wildfly service, which is already running, a new service appears,
WildflyPortal.
11. Right-click the WildflyPortal service and click Start.
12. Double-click the WildflyPortal service.
13. In the Startup type list, select Automatic.
14. Click Apply and then click OK.
In an earlier exercise, you set the Wildfly service to automatic. You can double-click it to
confirm that it is also set to start automatically.
15. To confirm that CA Identity Portal is running properly:

a. Navigate to the C:\wildfly-8.2.0.Portal\standalone\log folder.
b. Open the server.log file in Notepad.
c. Click Edit  Find and search for up and running.
You should see the CA Identity Portal banner that confirms the application is up and
running.


Appendix: CA Technologies Dynamic Lab Environment
Appendix: Dynamic Lab Environment Access and User Guide
Getting Started
Dynamic Lab Environment is the name of the CA Education virtual environment for labs and
practice activities. The technology behind the Dynamic Lab Environment is provided by Skytap and
some of the instructions in this document reference Skytap.
This appendix provides the following information:
• System and network requirements
• Self-Directed Learning login and usage information
• Setting up an environment (other than Self-Directed Learning)
• Instructor-Led classroom set up
• Best practices
• Troubleshooting
• Escalating unresolved issues
System Requirements
The minimum system requirements for an individual client machine accessing the Dynamic Lab
Environment are listed below. Please check that you meet the minimum requirements and that
you have the equipment you need before attempting to use the environment.
• Windows XP/2003/Vista/2008/Windows 7/2008 R2/Windows 8/2012

Operating
• Mac OS X 10.7 or higher (Lion or Mountain Lion)
Systems
• Linux variants with supported browser and Java versions
• Internet Explorer 8, 9, or 10
Browsers
• Mozilla Firefox
• Google Chrome
• Mac OS X Safari
Java Version
• The acceptable Java versions are Java 1.6, 1.7, or newer.
• If you are unsure which version of Java you are running, simply click the following link and it
will auto-detect: http://java.com/en/download/installed.jsp or type “java -version” in the
terminal for Linux.
• If you are running OS X, please see Running Java on Mac OS X.
• For information on installing Java on your local Linux machine, see How to install Java on my
local Linux machine.
© 2017 CA. All rights reserved

Network Requirements
We recommend a minimum download speed of 1.16 Mb/sec (150 KB/sec) per client connection
(i.e., each individual user). In addition, we recommend latency of 250ms or less.

Self-Directed Learning Access and Instructions
After you register for the course, you will receive a system-generated email that includes two
important pieces of information:
• A published URL to access your assigned lab environment
• The date and time on which your access to that environment expires
Keep this email as you will need to use the URL whenever you access your lab environment.
Here is a sample email with the two pieces of information highlighted:
Access Your Assigned Lab Environment

Click on the published URL from the email or paste the link in your web browser to access your
assigned lab environment. Use this same link each time you access your dynamic lab environment.
A sample environment with multiple Virtual Machines (VMs) is shown below:

The above sample environment includes three VMs. Your particular environment will be
appropriate for the course activities for which you have registered.
NOTE: When you initially access your environment, you may see a Java prompt, asking if
you want to run this application. Click Run if you see this prompt. It will enable you to
properly connect into the environment and enable the keyboard to work correctly.
Manage Your Assigned Lab Environment

You are allocated a certain amount of lab session time to complete all of the activities associated
with a given course. That time starts once you access your environment and continues to run until
the end date and time specified in the email. The clock continues to run even if you are not actively
working in the environment unless you manage your environment.
Use the Suspend and Run buttons to manage your lab environment. These buttons are shown
below:
Using Suspend to preserve your lab time

Click the Suspend button to stop the Run Time clock. Do this any time you are not working on
course activities to preserve your remaining time. You can suspend any or all of the VMs in your
environment by clicking in the check box in each VM window and then clicking the Suspend button.
The Suspend button is called out in the following sample where all three VMs have been checked:

When you click Suspend, your allocated lab time is preserved and the time clock remains paused
until you change the status to Run. The VMs in a suspended environment display that status as
shown in the following image:
Once you have suspended your environment, you can minimize or close the browser window in
which the environment has been running. Use the same URL you were sent in email to re-open
your environment when you are ready to resume.
Using Run to resume running your lab time

Click the Run button to start up suspended VMs and restart the Run Time clock. The Run button is
called out in the following sample:
This may take several minutes. The environment is ready the when VMs are highlighted in green
and display a Running status. Click on the machine(s) you want to directly access to start or resume
your lab activities.
Tracking lab time using the Run Time clock

The Run Time clock in the upper right corner of your set of VMs tracks how much dynamic lab
environment time you have left.

Network Requirements
We recommend a minimum download speed of 1.16 Mb/sec (150 KB/sec) per client connection
(i.e., each individual user). In addition, we recommend latency of 250ms or less.
If you have a group of 15 users, each connecting to their own client session from the same physical
location concurrently, the recommended amount of bandwidth required is
1.16Mb/sec per user x 15 or 17.5Mb/sec.
Connection Test
If you are connecting for the first time, or connecting from a computer you have never used before,
run the connection and speed tests to make sure that your browser supports a connection to the
Dynamic Lab Environment. These tests are hosted by Skytap directly.
Use the following URL to use the Skytap Connectivity Checker to run connection and speed tests:
https://cloud.skytap.com/tools/connectivity

Instructor-Led Class Set-Up
The Dynamic Lab Environment is accessed directly through a URL link that is provided to the
instructor by a system-generated email. The email includes a class URL as well as instructor and
student position URLs. A sample email is shown below:
1. Click the URL link or copy and paste the link to your web browser. If the URL link is valid, your
web browser will load the environment with the appropriate VM or VM set for hands-on
activities.
2. Examine all VMs and ensure they are running by selecting them and clicking the Run button to
power them on.

Once they are powered on, all VMs will show that they are in a running status and you may
log in to the VMs by clicking the desired VM machine.
3. Click the desired VM machine to connect directly to it.
Note: Most VMs will take you directly to the desktop, but if you are prompted to enter login info,
use the following credentials:
- Username: administrator
- Password: caeducation
Students should have been sent an email message telling them to run the tests before class starts.
Best practice is for the instructor to send an email message to your students to introduce yourself
as the instructor and remind them to run the connectivity test before the class starts.

Best Practices
Use the following list of best practices to help you avoid potential issues with the Dynamic Lab
Environment:
• Ensure that you are connected to a dedicated hardwired network connection on a
broadband internet connection.
• Do not use Wi-Fi connection because it is more susceptible to higher latency issues
impacting performance.
• Close all applications and documents you are not using for your virtual training; applications
running in the background may use up your computer's bandwidth and affect system
performance.
• You should not be connected to a corporate VPN while connecting to the virtual training
class.

Troubleshooting
Run both Connectivity Checker and Speed Test from appropriate application regions and submit
results to educationlabs@ca.com. Before the start of class, make sure your browser supports a
connection to the remote labs.

CA Identity Suite 14.x: Implementation - Install The Components 200

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CA Identity Suite 14.x: Implementation - Install The Components 200

Uploaded by

Copyright:

Available Formats

CA

Lab 2-1 Install the Prerequisite Software

Goals Install the prerequisite software.

Create a Database in SQL Server

1. In the Start menu, click SQL Server 2014 Management Studio.

2. In the Password field, type caeducation and click Connect.

3. In the Object Explorer, expand the Databases folder.

4. Right-click the Databases folder and click New Database.

Install the JDK

6. In the C:\InstallMedia folder, double-click jdk-8u91-windows-x64.exe.

8. When the installation completes, click Close.

CA Technologies CA Identity Suite 14.x: Implementation - Install the Components 200 1

© 2017 CA. All rights reserved.

16. Double-click dxsetup.exe.

17. In the Security Warning message, click Run.

18. On the Introduction page, click Next.

22. On the Review Settings page, click Next.

23. On the Install the Program page, click Install.

24. When the installation completes, click Finish.

2 CA Identity Suite 14.x: Implementation – Install the Components 200 CA Technologies

© 2017 CA. All rights reserved.

26. The version details appear:

CA Technologies CA Identity Suite 14.x: Implementation - Install the Components 200 3

© 2017 CA. All rights reserved.

Lab 2-2 Install CA Identity Manager

Goals Install CA Identity Manager

2. In the C:\InstallMedia\IMServer folder, double-click ca-im-14.0.0-win32.exe.

3. In the Security Warning message, click Run.

4 CA Identity Suite 14.x: Implementation – Install the Components 200 CA Technologies

© 2017 CA. All rights reserved.

14. On the JBoss Application Server Information page:

16. Select the following instance and click Next:

© 2017 CA. All rights reserved.

6 CA Identity Suite 14.x: Implementation – Install the Components 200 CA Technologies

© 2017 CA. All rights reserved.

Lab 2-3 Validate the Installation

Goals Validate the installation.

Verify the Provisioning Components Installed Correctly

1. On the desktop, double-click the Services icon.

Verify the Provisioning Manager Is Working

The remaining information is populated.

9. To verify that the connection is working, click Search.

CA Technologies CA Identity Suite 14.x: Implementation - Install the Components 200 7

© 2017 CA. All rights reserved.

10. Close the Provisioning Manager.

Verify WildFly Server Starts Correctly

13. In the Password field, type caeducation and click Connect.

14. Expand the Databases folder.

15. Expand imstore and then expand Tables.

Verify that the Out-of-the-box Environment is Running

19. Click the Directories link.

20. Click the Home link.

21. Click the Environments link.

22. Click the identityEnv link.

8 CA Identity Suite 14.x: Implementation – Install the Components 200 CA Technologies

© 2017 CA. All rights reserved.

23. Scroll down to the Status property.

Set the JAVA_HOME Environment Variable

28. Click Advanced System Settings.

29. In the System Properties dialog, click Environment Variables.

30. Under System Variables, click New.

32. In the Environment Variables dialog, click OK.

33. In the System Properties dialog, click OK.