Walkthrough: Installing on Windows using the unified installer

Application Server

2

This BSA environment consists of two Application Servers:

• A default Application server installed by the unified product installer on a Windows 2012 (x64) system.
• An additional Application Server installed on a Windows 2012 (x64) system to improve the performance of BSA.

This BSA environment consists of two instances of the BSA console:

• The console installed by the unified product installer on the default Application Server node.
• A console that is manually installed on a separate machine (recommended for high performance environments)

Database

1

The default Application Server connects to an existing Microsoft SQL server database.

Note: Although the BSA schema is created by the unified product installer, you must have access to an existing database that has been set up on a Microsoft SQL Server. For a description of that process, see Walkthrough: Setting up a SQL Server database.

File server

1

This BSA environment uses a separate Windows file server machine that is installed by the unified product installer.

PXE/TFTP server

2

This BSA environment consists of two PXE/TFTP servers:

• The PXE/TFTP server installed by the unified product installer on the default Application Server node
• A PXE/TFTP server that is manually installed on a separate machine (recommended for high performance environments).

Run the unified product installer on the machine on which you want to install the default Application server node.

1. Extract the  BBSA87-WIN64.zip and BBSA87-RSCDAgents.zip files that you downloaded from the EPD to obtain the rscd folder and the BBSA87-WIN64\Disk 1 folder.

2. Copy the rscd folder from within the  RSCDAgents extracted package to the following path in the BBSA87-WIN64 folder: BBSA87-WIN64\Disk 1\files\installer\

3. Run the setup.exe file that is In the BBSA87-WIN64 folder as an Administrator to start the unified product installer wizard.
   Otherwise, the installation might fail if you cannot update files in the C:\Windows\rsc folder.
4. Select the language in which you want to run the installer and click OK.

Read through the basic information about the unified product installer and the types of nodes that are installed in the environment.

Click Next.

Read the BSA copyright information and select I agree to the terms of the license agreement.

Click Next.

Enter the database server details.

1. Enter the Host name or IPv4 address of the server that runs the database. Note that if your server is on an IPv6 address system you can only enter the host name of the server.
2. Enter the Port that the database listens on. The default port is1433 for an SQL Database.
3. Enter the Name of the database instance that you created. (See Walkthrough: Setting up a SQL Server database   )
4. Enter the Login Name and Login Password that you created for the database. (See Walkthrough: Setting up a SQL Server database   )
5. Click Next.

A summary of the database parameters, default installation location, Application Server base port, and file server parameters is displayed.

The name of the local super user for RSCD Agent mapping is also listed.

Click Customize Configuration.

The Installation Directory tab displays the path where BSA is installed. The default path is C:\Program Files\BMC Software\BladeLogic\ for Windows. You can customize the Installation Directory based on your requirements.

Click the File Server tab and enter the file server details.

1. To install the file server on a separate machine, select the Install file server on a separate host option (In version 8.6 this option was called Use Remote file server).
2. Because we have not manually installed the RSCD Agent on the file server, we must ensure that the RSCD agent is already installed option is not selected.
3. Enter the Host name or IPv4 address of the file server. Note that if your server is on an IPv6 address system, you can only enter the host name of the server.
4. Enter the directory on the file server where data is stored.
5. Select Windows as the operating system that runs on the separate file server.
6. Enter the name of a Windows user with administrator permissions.
7. Enter the password of the Windows user with administrator permissions.
8. Confirm the password.

Note: If the file server is on a separate machine and if it runs on Windows, ensure that you have configured the default Application Server as a PsExec server.

Click the Ports tab at the top of the screen.

Enter the Application Server Base port. Application Server ports are normally configured from a base port, with 9800 being the default base port. Arbitrary port assignments can be made in all cases. For more information, see Application Server ports.

Click the Passwords tab at the top of the screen.

Enter new passwords in each for the fields based on the guidelines given below.

Note: The default password for each entry is password. However, BMC does not recommend using the default passwords provided by the system.

• Certificate Password
  The BSA Application Server installation program needs a certificate password to generate a self-signed X.509 certificate.

   Click here for more information.

  Communication between BSA and servers being provisioned between the Application Server and the process spawner uses the Transport Layer Security (TLS) protocol and X.509 certificates.The password must be at least 6 characters. For more information about certificates and the TLS protocol, see Authentication. 

• BLAdmin Password
  BSA creates a built-in user called BLAdmin during the installation process.

   Click here for more information.

  The BLAdmin user is only assigned the BLAdmins role.
  To activate the default user, it must be assigned a password and granted access to servers in your network. You can use the RBAC Manager folder to perform these actions, but to start the console the first time, you must define a password for the BLAdmin user. For more information, see RBACAdmin and BLAdmin users.

• RBACAdmin Password
  BSA creates a built-in user called RBACAdmin during the installation process.

   Click here for more information.

  The RBACAdmin user is only assigned the RBACAdmins role.
  To activate the default user, it must be assigned a password and granted access to servers in your network. You can use the RBAC Manager folder to perform these actions, but to start the console the first time, you must define a password for the RBACAdmin user. For more information, see RBACAdmin and BLAdmin users.

Click the Agent Mapping tab.

Enter the name of the local super user, that is, a local Administrator or Administrator-equivalent local user, to which the RSCD Agent should map incoming connections during the installation.

The default user name is Administrator.

Click Install to proceed with the installation.

The unified product installer performs the following setup operations:

• Creates a BSA schema in the database
• Installs the default application server
• Installs the console
• Installs a PXE/TFTP server
• Installs the Network Shell
• Connects the default Application Server machine to the database
• Installs the separate file server and the RSCD agent
• Installs out-of-the-box compliance content
• Installs pre-packaged sample content (blcontent) and imports various zipkits with pre-defined content for specific tasks

If you encountered any errors while installing, click View Log to view a detailed report of the installation.

Tip: BMC recommends that you save a copy of the log, before you contact technical support for further assistance. You can also find more information about resolving common issues in Troubleshooting the unified product installer.

If all operations are completed successfully, click Done to exit the wizard.

You can import multiple servers by specifying a text file that contains a list of server names and properties assigned to each server.

Create a server import text file using a comma-separated values (CSV) format, use the following syntax:

• The first line of the file must contain the column header Name followed by optional comma-separated property names for any properties you want to set for each server. Any property name you include in this import file must already exist in the Property Dictionary. For information about how to add a property to the property dictionary, see Managing properties using the Property Dictionary.

• Subsequent lines of the file must contain valid host names for each server you want to add, followed by optional comma-separated property values for each server.

Save the text file (say Servers.txt) at any location in the default Application Server node (for example, C:\Program Files\BMC Software\BladeLogic\appserver).

For this walkthrough we will be adding two servers to the BSA environment (without properties).

• clm-pun-016803 – Windows (64 bit)
• clm-pun-016809 – Linux (64 bit)

Name
host1
host2
host3

Name,Customer
host1,CustomerA
host2,CustomerB
host3,CustomerC

Name,Customer
host1,"Customer A"
host2,"Customer B"
host3,"Customer C"

Log on to the BSA Console.

1. Start the BSA Console.
2. Log on to the Console using the BLAdmin username and password that you created during installation.
3. The system uses a default authentication profile (defaultProfile) to log you on to the Console. BSA clients use authentication profiles to facilitate single sign-on feature. For more information about why we use Authentication Profiles, see System capabilities related to security.
4. Click Connect.

The quick start page (BMC Welcome Page) appears.

To enroll servers, click Enroll, under Server Enrollment.

Alternative step: To Import Servers wizard, right-click the Servers folder and select Import Servers.

The Import Servers wizard appears.

Use the File selection tree to select the text file (Servers.txt) you created at the beginning. Ensure that the If agent does not exist, install using Agent installer job option is not selected. We will be installing agents on the servers later in the walkthrough.

Click Finish.

Note: For the purpose of this walkthrough, we do not need to add any additional ACL policies. However if you need to control server access with agent ACLs click Next.

For more information about the UI elements on the Permissions screens, see Import Servers - Permissions.

For more information about ACL policies, see Controlling server access with agent ACLs. 

The next step is to install RSCD agents on the enrolled servers.

From the quick start page, under Server Enrollment, click Install, on the quick start page.

Alternative step: To start the unified agent installer, right-click the Servers folder and select Unified Agent Installer.

The Unified Agent Installer wizard appears.

Provide a prefix that is attached to the name of all objects that unified agent installer creates.

Click Next.

Perform the following steps:

1. Select the platforms on which agents can be installed.
2. Specify the depot folder where agent bundles are stored.
3. Continue to click Next in the wizard until you arrive at the Remote Host Authentication (non-Windows) window.

Note: The unified agent installer uses the information you provide on this panel to create an agent bundle. For detailed information about this type of object, see Creating an agent bundle.

The Remote Host Authentication (non-Windows) window lets you provide the following information, which is used for authenticating to agentless devices. If you are installing on multiple platforms, typically you define at least one set of authentication information for each platform.

1. Select SSH (Non-Windows) to execute commands directly on an agentless host using the credentials defined in an automation principal that you specify on this panel.
2. Specify the SSH port number that is used by the SSH service running on the remote host. The default port is 22.
3. Select Create new automation principal. You must provide a user name and password for the automation principal. These credentials are used to execute commands on your agentless hosts.
    
4. Click OK.

For more information about the different authentication protocols that you can use, see Unified Agent Installer - Remote Host Authentication (non-Windows). This page also provides information about selecting an existing automation principal. 

1. Click Next to go to the the Remote Host Authentication (Windows) window in the wizard.
2. Click Add  to open the Add Remote Host Authentication (Windows) window.

The Remote Host Authentication (Windows) window lets you provide the following information, which is used for authenticating to agentless devices. If you are installing on multiple platforms, typically you define at least one set of authentication information for each platform.

1. Select or create one of the following automation principals:
   
   • Select existing automation principal  - Click Browse to navigate to an automation principal.
   • Create new automation principal - Provide a user name and password for the automation principal. Optionally, you can identify a domain for the user.
2. PsExec server — Identify a live Windows server where PsExec is installed. Multiple remote host authentication definitions can use the same PsExec server.
3. Click OK.
4. Click Next to open the Remote Host Authentication Rule window.
   
   

Click Add  to open the New Rule wizard.

The unified agent installer uses the information you provide on this panel to create remote host authentication rules. These rules match remote host authentication definitions with agentless devices. For detailed information about this type of object, see Creating or modifying rules for remote host authentication.

Click Add Property Condition. A window opens.

1. In the first text box at left, click . You can view a subordinate list of properties by clicking the right arrow that appears next to the TARGET* property. When defining remote host authentication rules, use any of following subordinate properties:
   • TARGET.FQ_HOST — Fully qualified name of the target device
   • TARGET.IP_ADDRESS — IP address (IPv4 or IPv6) of the target device
   • TARGET.NAME — Name of the target device
   In this walkthrough we are using the TARGET.NAME property.
2. In the next drop-down box to the right, select equals.
3. In this walkthrough, enter the system name (for example, clm-pun-016809, the Linux target server). You can also view a subordinate list of properties to specify the target that we want to set this condition for.
4. Click OK. The Rule Definition panel shows the condition. Click Next.

Select the non-Windows remote host authentication (created earlier) that should be used to authenticate the clm-pun-016809 server. Click the right arrow to move your selection to the list on the right.

Click Finish.

Create a similar rule for clm-pun-016803, but this time using the Windows remote host authentication that we created.

Click Next.

1. Specify the operating system of the servers you want to select. To display servers running any operating system, select All.
2. Select the servers that you want to run the Agent installer job on the left and click the right arrow to move your selection to the list on the right.
3. Optionally, select Execute job now to run the Job immediately after the exiting the unified agent installer. By default, this option is not selected, as shown in this walkthrough. You can execute the job later from the specified job folder.
4. Click Next.

The RSCD agents are successfully installed on the target servers.

Note: Although you have different installers for 32-bit and 64-bit Windows for most components, for installing a a PXE/TFTP server you only have a 32-bit installer that you must use in both cases.

Navigate to the directory containing the installation files that you copied from the Application Server and run the installation program for the console. Different installers are provided for 32-bit and 64-bit Windows.

In this example, we are running the BBSACONSOLE87-WIN64 file on the Windows machine on which you plan to install the console.

Select a language to use for the installation and click OK. 

The installer extracts the installation files, and the Introduction window opens.

Ensure that you have closed all applications before you proceed.

Click Next.

The Review License Agreement window opens.

Read the End User License Agreement (EULA) and select I agree to the terms of the license agreement if you wish to proceed.

Click Next.

The Directory Selection window opens.

The default installation location for the console is C:\Program Files\BMC Software\BladeLogic. Click Next to use the default location.

Alternatively, you can click Browse to change the installation location.

A window opens in which you can select components to install. By default, all components are selected.

The Network Shell is automatically installed when you install the console.

Note: If you clear the BMC Server Automation Console Upgrade Service check box, the BMC Server Automation Console Upgrade Service is not installed. This service is required for automatically upgrading the BMC Server Automation Console when you upgrade the Application Server.

Click Next.

In case you encountered any errors while installing you can click View Log to view a detailed report of the installation.

Tip: BMC recommends that you save a copy of the log, before you contact technical support for further assistance. You can also find more information about resolving common issues in Troubleshooting the unified product installer.

If all operations are completed successfully, click Done to exit the wizard.

Start the console.

To configure the console so that it connects to the default Application Server, click Options.

Click on the Authentication Profiles tab and click Add.

BSA clients use authentication profiles to facilitate single sign-on feature. You must create an Authentication profile before you start using the Console. For more information about why we use Authentication Profiles, see System capabilities related to security.

Enter the following information.

1. Assign a name to the authentication profile. For example, you could assign a name such as QATeam or DevTeam.
2. Enter the name or IP address (IPv4 or IPv6) of the default Application Server to which the client should connect.
3. Enter an Authentication Port number to which the client should connect. The same port is used for all BMC Server Automation authentication mechanisms. The default Port is 9840. For more information about Console ports, see BMC Server Automation ports.

4. Select any one authentication mechanism for the authentication profile:

   • Secure Remote Password.
   • AD/Kerberos Single Sign-on.
   • Domain Authentication.
   • LDAP.
   • RSA SecurID Authentication.
   • Public Key Infrastructure Authentication.
   In this walkthrough we will use the Secure Remote Password mechanism. For information about implementing the other authentication mechanisms, see Implementing authentication. 
5. Click OK.

You can now log on the the Console using the BLAdmin user that is created while installing the default Application Server node, see step 10.

The quick start page is the first page that is displayed once you log on the the BSA Console. It introduces you to the main use cases of BMC Server Automation and allows you to execute them from a centralized UI immediately after installing the BSA set up. For information about using the quick start page, see Quick start page.

For general information about the UI of the BSA Console, see Navigating the interface.

1. Navigate to the directory containing installation files.
2. Run the PXE<version>-WIN32 installer file on the Windows machine you plan to install the PXE/TFT server.
3. Click Run.
4. Select the language in which you want to run the installer and click Next.

The PXE/TFTP installation wizard introduces you to the installation process.

Click Next.

Read the End User License Agreement (EULA) and click Yes to proceed.

The Customer Information window opens.

Enter your name and the name of your organization, and then click Next.

The Choose Destination Location window opens.

The default installation location for the PXE is C:\Program Files\BMC Software\BladeLogic\PXE.

Alternatively, you can click Browse to change the installation location.

 Click Next to use the default location.

The Network Configuration window opens.

• The computer on which you are installing the PXE server, select Locally (On this server).

• Another server or network device, select Externally (On another server). If the DHCP server is located on another host computer, the installation program automatically configures this server to function as a DHCP proxy.

  Note: You must configure the DHCP server differently, depending on whether it is installed on the same computer as the PXE server. For more information on configuring the DHCP server, see Configuring a DHCP server on Windows and Configuring a DHCP server on Linux. BMC recommends that you install the PXE server and the DHCP server on different host computers.

Click Next.

The TFTP Root window opens.

Do one of the following:

• Accept the default TFTP root directory, which is C:\Program Files\BMC Software\BladeLogic\PXE\tftproot. 
• Choose another directory, click Browse.

The TFTP server must reside on the same server as the PXE server. The TFTP server downloads the boot image during the provisioning process. The TFTP root directory is the location from which the files are read.

Click Next.

The Selected Components window opens.

Review the current settings to confirm that you have specified the correct installation configuration, and then click Next.

A progress bar indicates the progress of the installation until the Post-Configuration Options window opens.

The PXE/TFTP server is installed.

You can configure the PXE server as part of the installation by selecting the Configure the PXE server option and clicking Next.

(See Configuring the PXE and TFTP servers for more information about this option.)

Alternatively, you can configure the PXE/TFTP server at a later time by using the PXE/TFTP Server configuration tool.