Installation Steps - Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 Installation Manual

Ensure that the following prerequisites are in place prior to beginning the installation:
Ensure access to a supported directory service (eDirectory
If you are deploying using an eDirectory service, create an account password that never
changes to use for Management Console authentication (see
Services," on page
For Endpoint Security Client to Single Server server name resolution, validate that the target
computers (where the Endpoint Security Client is installed) can ping the SSI server name. If
unsuccessful, you must resolve this before continuing with the installation. (Change the SSI
server name to FQDN/NETBIOS, change AD to use FQDN/NETBIOS, change DNS
configurations, modifying the local host file on the target computers to include the correct MS
information, and so forth).
Enable or install Microsoft Internet Information Services (IIS) and configure it to accept Secure
Socket Layer (SSL) Certificates.
IMPORTANT: Do not enable the Require secure channel (SSL) check box on the Secure
Communictions page (in the Microsoft Computer Management utility, expand Services and
Applications > expand Internet Information Services (ISS) Manager > expand Web Sites >
right-click Default Web Site > click Properties > click the Directory Security tab > click the
Edit button in the Secure communications group box). Enabling this option breaks the
communication between the ZENworks Endpoint Security Management server and the
ZENworks Endpoint Security client on the endpoint.
If you are using your own SSL certificates, ensure that the Web service certificate and root CA
are loaded on the machine and that server name validated in the previous steps (whether
NETBIOS or FQDN) matches the Issued to value for the certificate configured in IIS.
If you are using your own certificates or have already installed the Novell Self Signed
Certificate, you can validate SSL as well by trying the following URL from a machine that has
the Endpoint Security Client installed:
AuthenticationServer/UserService.asmx
name). This should return valid data (an html page) and not certificate warnings. Any
certificate warnings must be resolved before installation, unless you opt to use Novell Self
Signed Certificates instead.
Ensure access to a supported RDBMS (Microsoft SQL Server 2000 SP4, SQL Server Standard,
SQL Server Enterprise). Set the database to Mixed mode.

3.1 Installation Steps

Select Single Server Installation from the master installer menu. This installation combines the
installations for the Policy Distribution Service and the Management Service. For more information,
see Chapter 5, "Performing the Policy Distribution Service Installation," on page 25
"Performing the Management Service Installation," on page
Like their individual installations, the Typical setting installs the services' defaults and the Novell
self-signing SSL certificates. Custom Installation permits the administrator to determine the
directory paths and permits the use of an enterprise-owned certificate authority.
20 ZENworks Endpoint Security Management Installation Guide
49).
https://SSI_SERVER_NAME/
or Active Directory).
TM
Section 7.2.1, "Adding eDirectory
(where SSI_SERVER_NAME is the server
33.
and Chapter 6,