Installation Steps - Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 Installation Manual

Ensure that the following prerequisites are in place prior to beginning the installation:
Ensure access to a supported directory service (eDirectory or Active Directory).
If you are deploying using an eDirectory
changes to use for Management Console authentication (see
Services," on page
Ensure Endpoint Security Client to MS server name resolution: validate that the target
computers (where the Endpoint Security Client is installed) can ping the MS server name. If
successful, this is the value entered in the installation. If unsuccessful, you must resolve this
before continuing with the installation.
Enable or install Microsoft Internet Information Services (IIS), ensure ASP.NET is enabled,
and configure it to accept Secure Socket Layer (SSL) Certificates.
IMPORTANT: Do not enable the Require secure channel (SSL) check box on the Secure
Communictions page (in the Microsoft Computer Management utility, expand Services and
Applications > expand Internet Information Services (ISS) Manager > expand Web Sites >
right-click Default Web Site > click Properties > click the Directory Security tab > click the
Edit button in the Secure communications group box). Enabling this option breaks the
communication between the ZENworks Endpoint Security Management server and the
ZENworks Endpoint Security client on the endpoint.
If you are using your own SSL certificates, ensure that the root CA is loaded on the machine
and that server name validated in the previous steps (whether NETBIOS or FQDN) matches the
Issued to value for the certificate configured in IIS.
If you are using your own certificates, or you have already installed the Novell Self Signed
Certificate, you can validate SSL as well by trying the following URL from a machine that has
the Endpoint Security Client installed:
AuthenticationServer/UserService.asmx
name). This should return valid data (an html page) and not certificate warnings. Any
certificate warnings must be resolved before installation.
Ensure access to a supported RDBMS (Microsoft SQL Server 2000 SP4, SQL Server Standard,
SQL Server Enterprise, SQL 2005). Set database to Mixed mode.
Copy the
and Root SSL Certificate for the Policy Distribution Service into the installation directory of
this server.

6.1 Installation Steps

Click Management Service Installation from the installation interface menu. The Management
Service installation begins.
At launch, the installer verifies that all required software is present on the server. If any software is
absent, it is installed automatically before the installation continues to the Welcome Screen (license
agreements for the additional software might need to be accepted). If Microsoft Data Access
Components (MDAC) 2.8 need to be installed, the server must reboot following that installation
before ZENworks Endpoint Security Management installation can continue. If using Windows 2003
Server, ASP.NET 2.0 must be configured to run by the installer.
After Management Service installation begins, perform the following steps:
34 ZENworks Endpoint Security Management Installation Guide
49).
directory that contains the Policy Distribution Service Setup ID
ESM Setup Files
service, create an account password that never
TM
Section 7.2.1, "Adding eDirectory
https://MS_SERVER_NAME/
(where MS_SERVER_NAME is the server