Wednesday, June 3, 2015

RSA to CPASS migration on windows platform



For IIS7

Prerequisites
  • Put agent installer here.  E:\csapps\PolicyAgentIIS7
  • Site should not be a virual directory(i.e. is being in default website folder), if it is so , you will have first make it as website and it should have dedicated application pool.
  • To check if it’s a dedicated or not . Goto “application pool” and check number of application associated with that app pool
  • Also check in the bindings of the application if the URL is “organisation1.com”, if not create new host name with organisation1.com domain name and get that configured with the help of IP DOMAIN team and after that manually enter in bindings too.
  • Close IIS manager



Configuring CPASS
  1. Create a friendly text file and copy password in the bin folder of the installer at E:\csapps\PolicyAgentIIS7. Alternatively, for IIS6 the path will be E:\csapps\sun\webaggents
  2. Cmd>installer bin>cscript IIS7CreateConfig.vbs ABCconf.txt
 Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\neha>e:

E:\>cd csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin

E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin>cscript IIS7CreateConfig.vbs ABCconf.txt
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.


Copyright c 2009, 2011, Oracle and/or its affiliates. All rights reserved.
---------------------------------------------------------
Microsoft (TM) Internet Information Server (7.0)
---------------------------------------------------------
Enter the Agent Resource File Name [IIS7Resource.en] :

Enter the Agent URL (Example: http://agent.example.com:80) :
http://application1.lvs.organisation1.com:80

Displaying the list of Web Sites and its corresponding Identifiers (id)

SITE "Default Web Site" (id:1,bindings:http/xxx.xxx.xx.xxx:80:,http/xxx.xxx.xx.xxx:80:server.organisation1.net,http/xxx.xxx.xx.xxx:80:www8t.lvs.organisation.com,net.tcp/808:*,net.pipe/*,net.msmq/localhost,msmq.formatname/localhost,state:Starte)

SITE "Microsoft SharePoint Administration" (id:2,bindings:http/xxx.xxx.xx.xxx:6181:,state:Started)

SITE "application1"(id:7,bindings:http/xxx.xxx.xx.xxx:80:application1.lvs.organisation1.com,state:Started)

Web Site Identifier :
7
------------------------------------------------
Oracle OpenSSO Enterprise 8.0
------------------------------------------------
Enter the URL where the OpenSSO server is running. Please include the deployment
URI also as shown in the example (Example: http://opensso.example.com:58080/ope
nsso):
https://eifed-3-qa.organisation1.com:443/opensso

Please enter the Agent Profile name :
ABC

Enter the Agent profile password file :
ABCpwd.txt

-----------------------------------------------------
Agent Configuration file created : ABCconf.txt
------------------------------------------------------

3. Now,  Configure this config file with the help of this other script “IIS7Admin.vbs”

E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin>cscript IIS7Admin.vbs -config ABCconf.txt
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Copyright c 2009, 2011, Oracle and/or its affiliates. All rights reserved.

Enter the Agent Resource File Name [IIS7Resource.en] :

Creating the Agent Config Directory
Creating the OpenSSOAgentBootstrap.properties and OpenSSOAgentConfiguration.properties File
Updating the Windows Product Registry
Installing the module into IIS.
Completed Configuring the IIS 7.0 Agent

4. Restart the iis service

5. Check if the CPASS is installed by following process
Go to instance in IIS> modules
See if the iis.dll is present



UNCONFIGURING CPASS
1. E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin>cscript IIS7Admin.vbs –unconfig itprodconf.txt
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Copyright c 2009, 2011, Oracle and/or its affiliates. All rights reserved.

Enter the Agent Resource File Name [IIS7Resource.en] :


Removing the Agent Bootstrap file
Removing the Agent Config file
Removing the Agent Config Directory
E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\Identifier_14\config
Removing the entries from Windows Product Registry
Removing the module from IIS.
Completed Unconfiguring the IIS 7.0 Agent


2. Restart IIS service

3. If its still not visible in the module add the “maps” in  “configuration” manually and then restart IIS

Regedit>HKEY_LOCAL_MACHINE>SOFTWARE>ORACLE>OPENSSO>IIS6AGENT>

If this identifier is not present then make it

NOTE
Site should not be a virtual directory(i.e. being in default website folder), if it is so then you will have to first make its website and then it should have dedicated application pool.

No comments:

Post a Comment