2.6
Table Of Contents
- ACE Management Server Administrator’s Manual
- Contents
- About This Book
- Introduction
- Planning an ACE Management Server Deployment
- Installing and Configuring ACE Management Server
- Configuration Options for ACE Management Server
- Prerequisites for Configuring the Server
- Starting ACE Management Server Configuration
- Viewing and Changing Licensing Information
- Using an External Database
- Creating Access Control
- Uploading Custom SSL Certificates
- Logging Events
- Applying Configuration Settings
- Load-Balancing Multiple ACE Management Server Instances
- Typical Setup Using Load-Balanced ACE Management Server Instances
- Install the Required Services for Load Balancing
- Use the Same SSL Certificate on All Servers
- Create New SSL Certificates and Keys for Each Server
- Installing and Configuring the Load Balancer
- Verify That ACE Instances Are Using the Load Balancer
- Managing ACE Instances
- Viewing ACE Instances That the Server Manages
- Search for an Instance
- Sort by Column Heading and Change Column Width
- Show, Hide, and Move Columns in the Instance View
- Create or Delete Custom Columns in the Instance View
- View Instance Details
- Reactivate, Deactivate, or Delete an ACE Instance
- Change a Copy Protection ID
- Reset the Authentication Password
- Add Information for Custom Columns
- Troubleshooting and Maintenance
- Appendix: Database Schema and Audit Event Log Data
- Glossary
- Index
ACE Management Server Administrator’s Manual
30 VMware, Inc.
To create users and groups for integration with Active Directory
1 CreateauserthatACEManagementServercanusetoconnecttotheLDAPserveranduseforquerying.
MakeanoteofthesAMAccountNamevalueforthatuser(forexample,aceuser.)
2 CreateanACEAdministratorsgroupinthedomain.
3AddACEadministratoruserstotheACEAdministratorsgroup.
4 (Optional)Create
aHelpDeskgroupandassignuserstoitfortheHelpDeskrole.
YoucanlogintotheHelpDeskWebapplicationwithyouradministrativeLDAPcredentialsorpassword.
CreatingaHelpDeskroleallowsyoutopermitcertainuserstoperformHelpDesktasksfromwithinthe
Help
Deskapplicationbutdoesnotgivethemaccesstootheradministrativetools.
Set Up an External Database
Beforeyoubegin,makesurethatyouhaveoneofthefollowingsupporteddatabaseservers:
ForaWindows‐basedACEManagementServer–MicrosoftSQLServer2000orhigher;
Oracle Database 10g
IfyouuseaMicrosoftSQLServerdatabase,thedatabasemustbehostedonasystemthatusesthesame
localeasthesystemthathostsACEManagementServer.Forexample,ifACEManagementServeris
installedonaJapanesesystem,thedatabaseservermustalsobeinstalledonaJapanesesystemandmust
useJapanesecollation.
ForaLinux‐basedACEManagementServer–PostgreSQL7.4orhigher
BeforeyouinstallthedatabaseonaLinuxhost,makesuretheunixODBCRPMpackageisinstalledontheLinux
system.VMwarerecommendsthatyouupdatethepackagetothelatestversionreleasedforyourspecific
Linuxdistribution.The
unixODBCpackageprovidesanODBCAPItoprogramsrunningonLinuxsystemsthat
issimilartotheWindowsODBCAPI.
Thepackagecontainsthelibodbcsharedlibrary,providingtheODBCDriverManagerAPItoother
programs,asetofconfigurationutilities,andODBCdriversforpopulardatabases.OnbothRedHat
EnterpriseLinuxandSUSELinuxEnterpriseServer 9,theODBCdriverforPostgreSQLisincludedinthe
unixODBCbinarydistributionpackage.
Also,makesuretheunixODBC-gui-qt packageisinstalled(thisutilityisincludedintheRedHatEnterprise
LinuxunixODBCpackage).ThispackageisrequiredtousetheODBCConfigX11graphicalconfiguration
tool
forsettingupadatasourcename(DSN).
To set up an external database
1Installadatabaseserveronahost.
TheexternaldatabasedoesnothavetobeinstalledonthesameserverasACEManagementServer,butit
mustbeinstalledonthesameplatform.Forexample,ifACEManagementServerisinstalledon
a
Windowshost,thedatabaseservermustalsobeinstalledonaWindowshost.
ACEManagementServercreatesthedatabaseschemaautomaticallyifproperaccessrightsaregranted.
2Configurethedatabase.
Ensurethatyouhaveadedicateddatabaseandauseraccountthathasfullaccesstothisdatabase,
includingrightsto
createtables.Donotgivethisdatabaseuserpermissionsthatitdoesnotneed.For
example,youmightnotwanttogivethisaccountreadorwritepermissiontootherdatabasesthatyour
RDBMSmanages.
AlltablesthatarecreatedinthedatabasehaveanamestartingwithaPolicyDb_prefix
andindexeswith
PdbIns_orPdbLf_prefixes.YoumightprovideACEManagementServerwithaDSNtoadatabasethat
itshareswithsomeotherapplication,ifthedatabasecountisatapremium.