Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 User manual

Novell®

www.novell.com

novdocx (en) 17 September 2009

AUTHORIZED DOCUMENTATION

ZENworks Endpoint Security Management Installation Guide

ZENworks

Endpoint Security Management

3.5

July 31, 2009

Installation Guide

novdocx (en) 17 September 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities

on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export

laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.

See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information

on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4ZENworks Endpoint Security Management Installation Guide

novdocx (en) 17 September 2009

Contents 5

Contents

novdocx (en) 17 September 2009

About This Guide 7

1 ZENworks Endpoint Security Management Overview 9

1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

1.2 About the ZENworks Endpoint Security Management Manuals. . . . . . . . . . . . . . . . . . . . . . . . 11

2 Installing ZENworks Endpoint Security Management 13

2.1 Pre-installation Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.2 Installation Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.2.1 About the Master Installer Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.3 Installation Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.4 Installation Order . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.5 Before Installing ZENworks Endpoint Security Management. . . . . . . . . . . . . . . . . . . . . . . . . . 14

3 Performing a Single-Server Installation 19

3.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3.2 Starting the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

4 Performing a Multi-Server Installation 23

5 Performing the Policy Distribution Service Installation 25

5.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

5.1.1 Typical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

5.1.2 Custom Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

5.2 Starting the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

6 Performing the Management Service Installation 33

6.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

6.1.1 Typical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

6.1.2 Custom Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

6.2 Starting the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

7 Performing the Management Console Installation 45

7.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

7.1.1 Typical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

7.1.2 Custom Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

7.2 Starting the Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

7.2.1 Adding eDirectory Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

7.2.2 Configuring the Management Console’s Permissions Settings . . . . . . . . . . . . . . . . . 50

7.2.3 Publishing a Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

6ZENworks Endpoint Security Management Installation Guide

novdocx (en) 17 September 2009

8 Endpoint Security Client 3.5 Installation 55

8.1 Basic Endpoint Security Client 3.5 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

8.2 MSI Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

8.2.1 Command-line Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

8.2.2 Distributing a Policy with the MSI Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

8.2.3 User Installation of the Endpoint Security Client 3.5 from MSI . . . . . . . . . . . . . . . . . 62

8.3 Running the Endpoint Security Client 3.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

9 Endpoint Security Client 4.0 Installation 63

9.1 Basic Endpoint Security Client 4.0 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

9.2 MSI Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

9.2.1 Using the Master Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

9.2.2 Using the Setup.exe File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

9.2.3 Completing the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

9.2.4 Command Line Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

9.2.5 Distributing a Policy with the MSI Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

9.3 Running the Endpoint Security Client 4.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

9.4 Features Not Supported In the Endpoint Security Client 4.0 . . . . . . . . . . . . . . . . . . . . . . . . . . 70

10 ZENworks Endpoint Security Management Unmanaged Installation 71

10.1 Unmanaged Endpoint Security Client Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

10.2 Stand-Alone Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

10.3 Distributing Unmanaged Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

11 Upgrading 73

A Documentation Updates 75

A.1 July 31, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

A.2 January 5, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

About This Guide 7

novdocx (en) 17 September 2009

About This Guide

This Novell®ZENworks®Endpoint Security Management Installation Guide provides complete

installation instructions for the ZENworks Endpoint Security Management components and assists

administrators in getting those components up and running.

The information in this guide is organized as follows:

Chapter 1, “ZENworks Endpoint Security Management Overview,” on page 9

Chapter 2, “Installing ZENworks Endpoint Security Management,” on page 13

Chapter 3, “Performing a Single-Server Installation,” on page 19

Chapter 4, “Performing a Multi-Server Installation,” on page 23

Chapter 5, “Performing the Policy Distribution Service Installation,” on page 25

Chapter 6, “Performing the Management Service Installation,” on page 33

Chapter 7, “Performing the Management Console Installation,” on page 45

Chapter 8, “Endpoint Security Client 3.5 Installation,” on page 55

Chapter 9, “Endpoint Security Client 4.0 Installation,” on page 63

Chapter 10, “ZENworks Endpoint Security Management Unmanaged Installation,” on page 71

Audience

This guide is written for the ZENworks Endpoint Security Management administrators.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to the Novell Documentation Feedback site (http://www.novell.com/

documentation/feedback.html) and enter your comments there.

Additional Documentation

ZENworks Endpoint Security Management is supported by other documentation (in both PDF and

HTML formats) that you can use to learn about and implement the product. For additional

documentation, see the ZENworks Endpoint Security Management 3.5 documentation Web site

(http://www.novell.com/documentation/zesm35).

8ZENworks Endpoint Security Management Installation Guide

novdocx (en) 17 September 2009

ZENworks Endpoint Security Management Overview

novdocx (en) 17 September 2009

ZENworks Endpoint Security

Management Overview

Novell®ZENworks®Endpoint Security Management consists of four high-level functional

components: the Policy Distribution Service, the Management Service, the Management Console,

and the Endpoint Security Client. The figure below shows these components in the architecture:

Figure 1-1 ZENworks Endpoint Security Management Architecture

The Endpoint Security Client is responsible for enforcement of the distributed security policies on

the endpoint system. When the Endpoint Security Client is installed on all enterprise PCs, these

endpoints can now travel outside the corporate perimeter and maintain their security; endpoints

inside the perimeter receive additional security checks within the perimeter firewall.

The following components are installed on servers that are secured inside the corporate perimeter:

Policy Distribution Service: Responsible for the distribution of security policies to the

Endpoint Security Client and retrieval of reporting data from the Endpoint Security Client. The

Policy Distribution Service can be deployed in the DMZ, outside the enterprise firewall, to

ensure regular policy updates for mobile endpoints.

Management Service: Responsible for user policy assignment and component authentication,

reporting data retrieval, creation and dissemination of ZENworks Endpoint Security

Management reports, and security policy creation and storage.

Management Console: The visible user interface, which runs directly on the server hosting the

Management Service or on a workstation residing inside the corporate firewall with connection

to the Management Service server. The Management Console is used to both configure the

Management Service and to create and manage user and group security policies. Policies are

created, copied, edited, disseminated, and deleted using the Management Console.

Management

Service

Policy

Distribution

Service

ZENworks

Security

Client

Enterprise

Web Server

Active Directory,

LDAP, or NT Domain

Directory Service

SQL

Database

SSL Link

Office

Home

Encrypted

Policy

Reporting

Information

Management

Console

Group

Info

Central Management

Location Secure

Enterprise Perimeter

ZENworks

Endpoint Security Management

Coffee

Shop

On The

Road

DMZ

(Demilitarized Zone)

10 ZENworks Endpoint Security Management Installation Guide

novdocx (en) 17 September 2009

1.1 System Requirements

Table 1-1 Server Requirements

Table 1-2 Standalone Management Console Requirements

Table 1-3 Client Requirements

Item Requirement

Operating System Microsoft* Windows* 2003 Server (32-bit)

Processor Determined by operating system

Disk Space 500 MB if the Microsoft SQL database is not installed locally

5 GB if the Microsoft SQL database is local; a SCSI drive is

recommended

Software One of the following relational database management systems

(RDBMS): SQL Server Standard, SQL Server Enterprise, Microsoft

SQL Server 2000 SP4, SQL 2005; server authentication must be set

to mixed mode to allow both SQL Server and Windows

Authentication mode authentication

Microsoft Internet Information Services (configured for SSL)

Directory Services: eDirectoryTM or Active Directory*

.NET framework 3.5

Item Requirement

Software One of the following relational database management systems

(RDBMS): SQL Server Standard, SQL Server Enterprise, Microsoft

SQL Server 2000 SP4, SQL 2005, SQL Express, SQL Server 2008;

server authentication must be set to mixed mode to allow both SQL

Server and Windows Authentication mode authentication

Item Requirement

Operating System for Endpoint

Security Client 3.5

Windows XP SP1

Windows XP SP2

Windows 2000 SP4

The operating system must have Windows Installer 3.1 installed and

all operating system updates applied

Operating System for Endpoint

Security Client 4.0

Windows Vista SP1 (32-bit)

Processor Determined by operating system

Disk Space 5 MB required, 5 additional MB recommended for reporting data

Other manuals for ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5

Table of contents

Other Novell Software manuals

Novell

Novell GROUPWISE 7 - TROUBLESHOOTING 3 User manual

Novell

Novell LINUX ENTERPRISE DESKTOP 11 - ADMINISTRATION GUIDE... Quick reference guide

Novell

Novell LINUX ENTERPRISE 11 - SUBSCRIPTION MANAGEMENT TOOL GUIDE... User manual

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 User manual

Novell

Novell IDENTITY MANAGER 3.6.1 User manual

Novell

Novell EDIRECTORY 8.8 SP5 - GUIDE 12-2009 User manual

Novell

Novell GROUPWISE 7 - SECURITY POLICIES User manual

Novell

Novell GROUPWISE 8 - LIBRARIES AND DOCUMENTS User manual

Novell

Novell IDENTITY MANAGER 3.6.1 - PASSWORD MANAGEMENT User manual

Novell

Novell EDIRECTORY 8.8 - GUIDE User manual

Novell

Novell GROUPWISE 8 - MONITOR User manual

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... User manual

Novell

Novell GROUPWISE 7 - SECURITY POLICIES User manual

Novell

Novell PLATESPIN ORCHESTRATE 2.0.2 - ADMINISTRATOR REFERENCE... Service manual

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION 8.0.1 -... User manual

Novell

Novell OPEN ENTERPRISE SERVER 2 SP2 -... User manual

Novell

Novell XDASV2 - ADMINISTRATION GUIDE V1 Instruction Manual

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION User manual

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 - KDE... User manual

Novell

Novell ZENWORKS 7.2 LINUX MANAGEMENT - SCENARIOS 1... User manual

Novell

Novell LINUX ENTERPRISE REAL TIME 10 SP1 User manual

Novell

Novell LINUX ENTERPRISE 11 - HIGH AVAILABILITY User manual

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.0 -... User manual

Novell

Novell ZENWORKS HANDELD MANAGEMENT 7 SP1 IR4 User manual

Popular Software manuals by other brands

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Adobe

Adobe 65007312 - Photoshop Lightroom Programmer's guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

HP ProLiant BL420c user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Oracle

Oracle Application 9i Configuration guide

Acer

Acer RDM user guide

Canon

Canon Vixia HF21 instruction manual

Canon

Canon ZR950 instruction manual

Samsung

Samsung Auto Backup user manual

Polycom

Polycom Vortex EF2201 Application note

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c user manual

Lexmark

Lexmark Apps Administrator's guide