Installing

As a system programmer, this section guides you through the installation and configuration procedures. When you complete the procedures, all necessary system updates (such as library authorization and external security manager definitions) are complete, the started task is active, and users (such as application developers and security administrators) can use the product.

Related topics

Upgrading

The BMC AMI Resident Security Server (RSS) product suite contains the following products in one zip file:

  • BMC AMI Enterprise Connector for Illumio
  • BMC AMI Enterprise Connector for Venafi
  • BMC AMI Security Policy Manager
  • BMC AMI Security Privileged Access Manager
  • BMC AMI Security Self Service Password Reset

BMC AMI Resident Security Server is an infrastructure component that is automatically installed with the products.

Important

If you are installing more than one product, download the product suite only once. Likewise, if you want to install another product in the suite later, do not download the suite again.

You control product activation with license keys.

The installation package is provided as a binary offload of a z/OS XMIT file. You upload this file to the z/OS system by using FTP (or IND$FILE if you do not have access to FTP) and then load it by using the TSO RECEIVE command. This creates a single installation package data set from which you run the supplied INSTALL procedure.

BMC AMI Security Policy Manager requires one master address space and one SPM server address space for each LPAR. The installations are the same and the address spaces communicate through XCF by using the RSSID parameter in the JCL. For more information about the product deployment, see Master-and-server-address-spaces.

You can access the complete set of documentation for the RSS product suite from the BMC AMI Resident Security Server documentation.

Perform the following tasks to install the product:

Task

Preinstallation tasks

 Reference

 1

Review system requirements.

 2

Prepare your system for installation, including the following tasks:

  • Preparing a computer for product use
  • Uploading the binary files
  • Unloading the installation data set

Task

Installation tasks

Reference

1

Run the INSTALL procedure from the installation data set. Review and run the JCL deck it builds.

2

Create the external security manager (ESM) resources and make sure that all users have read access to the required resources according to their authority level.

For use with CA Top Secret, install the Top Secret installation exit TSSINSTX.

3

Create a database directory.

4

Define a checkpoint data set.

5

Create the BMC license data set. Make sure you first obtain a product license key from BMC Support.

6

Copy and edit the configuration in your hlq.RSSPARM data set so that it conforms to your installation requirements.

7

Authorize the load library.

8

Update the global RSS configuration parameters.

9

Start the product and connect to the HTTP(S) port to verify that the installation process has been successful.

You do not have to perform a full installation of the product on each system on which it is required. Perform one full SMP/E installation on one system and then migrate the runtime data sets to any other required target systems. For more information, see Migrating to other systems.

After you install the product, create and define the started task, and configure the product using a series of parameters defined in one or more members of a partitioned data set. For more information, see Configuring-after-installation.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*