Installation Notes for Softerra Adaxes 2010.2

This document contains requirements and instructions on how to install Softerra Adaxes 2010.2.

System Requirements | Installation | Uninstallation | Additional Components | How Do I

System Requirements

The tables below outline software and hardware requirements for installing and running the Softerra Adaxes components.

Supported Operating Systems

Adaxes Service*	Service Administration Console
Windows Server 2003 R2 (x86) Windows Server 2003, Standard (x86) Windows Server 2003, Enterprise Windows Server 2003, Datacenter Windows XP Professional SP1 (x86) Windows XP SP1 (x64) Windows Vista SP2 Business Windows Vista SP2 Ultimate Windows Vista SP2 Enterprise Windows Server 2008 Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows Server 2008 R2	Windows XP SP2 Windows Server 2003 SP1 Windows Vista Windows Server 2008 Windows 7 Windows Server 2008 R2

---

* Prior to install Adaxes Service on Windows 7 or Windows Vista, you need to install Active Directory Lightweight Directory Services (AD LDS). For details, see How to install AD LDS on Windows 7 and Windows Vista.

Web Interface/SPML Web Service*	PowerShell Module for AD
Windows XP SP2 (x86) Windows XP (x64) Windows Server 2003 Windows Vista Windows Server 2008 Windows 7 Windows Server 2008 R2	Windows XP SP3 Windows Server 2003 SP2 Windows Vista SP1 Windows Server 2008 SP1 Windows 7 Windows Server 2008 R2

---

* It's highly recommended to install Web Interface and SPML Web Service on the server editions of Windows because when installed on workstations, IIS has a limitation on the number of simultaneous connections. In this case, the connection limit can be reached when, for example, only two or three persons are using the Web Interface at the same time.

Important: To install Softerra Adaxes, the target computer must be joined to an Active Directory domain.

Hardware Requirements

The minimum hardware required to install and run Softerra Adaxes components includes:

Note: Hardware requirements depend on the total number of objects managed by your Adaxes service.

Installation Prerequisites

Softerra Adaxes components require Microsoft .NET Framework 3.5 to be installed on the target system.
To install the framework, see How to install Microsoft .NET Framework 3.5.

To install Adaxes Service on Windows 7 or Windows Vista, first you need to install Active Directory Lightweight Directory Services (AD LDS). For details, see How to install AD LDS on Windows 7 and Windows Vista.

To use cmdlets included in PowerShell Module for Active Directory, Windows PowerShell 2.0 is installed on the target computer. For details, see How to install Windows PowerShell 2.0.

top of page

Installation

Note: To install Softerra Adaxes, you must log on to your computer using an account that belongs to the local Administrators group.

Installation Instructions

To install Softerra Adaxes:

1. Log on to the operating system under a user account that has local administrator permissions on the target computer and is a member of an Active Directory domain.
2. Install Microsoft .NET Framework 3.5, if not installed. For details, see How to install Microsoft .NET Framework 3.5.
3. Launch the Softerra Adaxes installation package (.msi) for the language and OS architecture you want.
   Note: All Softerra Adaxes components (Adaxes Service, Service Administration Console, Web Interface and SPML Web Service) are installed by a single MSI package.
4. The Welcome screen appears. Read the information provided and click Next.
5. Accept the license agreement and click Next.
6. Select the Adaxes components you would like to install and click Next.
   Please note that different Adaxes components have different system and hardware requirements. For details, see System Requirements.
   If you select none of the Adaxes components, only the Softerra Adaxes ADSI provider is installed.
7. If you have selected Adaxes Service, do the following:
   • On the Service Administrator page, specify the default administrator for the service. Service administrators have unrestricted access to the service configuration and can perfrom all service-related administrative tasks and all operations in the AD domains managed by the service. The account for the default service administrator also determines the security context, in which the Adaxes Service runs (the service will use this account to log on to the system).
     The default service administrator account should have enough privileges to publish and unpublish the Adaxes service in Active Directory (create/delete a service connection point). By default, domain administrators have the necessary permissions. For more information on how to grant these permissions to another user, see Grant Permissions to Publish Adaxes service.
     Note: Although the list of service administrators can be modified after the service installation, the default service administrator cannot be removed or changed.
     Click Next.
   • On the Service Configuration page, you can set up the new Adaxes service to join an existing Adaxes configuration set. In this case the service will share its configuration with all the services contained in the configuration set.
     To join an existing configuration set, click Share configuration, specify the DNS host name of any Adaxes service from the configuration set, and select an account with administrative credentials for the service. Usually, all default administrators of the services contained in a configuration set have the necessary administrative permissions.
     Click Next.
8. If you selected Web Interface, do the following:
   • On the Web Interface Configuration page, specify parameters for the IIS web site and select the components of the Adaxes Web Interface to be available for users.
     Click Next.
   • On the Service for Web Interface page, specify the DNS host name of the Adaxes service the Web Interface will connect to. If the specified Adaxes service shares its configuration with other Adaxes services, the Web Interface will connect to the nearest available Adaxes service contained in the configuration set.
     Note: This page is not available if you install Adaxes Service and Web Interface at the same time. In this case, the Web Interface will use the Adaxes service installed during this installation.
     Click Next.
9. If you selected SPML Web Service, do the following:
   • On the SPML Web Service Address page, configure IIS web site parameters of the SPML Provider and click Next.
   • On the AD Access for SPML Web Service page, specify how you want the Adaxes SPML Provider to access Active Directory. Adaxes SPML Provider can access Active Directory directly or via an Adaxes service. Provisioning Active Directory via the Adaxes service allows you to benefit from the Softerra Adaxes features such as Business Rules, Security Roles, Property Patterns. If the SPML Provider accesses Active Directory through an Adaxes service and this service shares its configuration with other Adaxes services, the SPML Provider will connect to the nearest available Adaxes service contained in the configuration set.
     Note: This page is not available if you install Adaxes Service and SPML Web Service at the same time. In this case, the SPML Web Service will use the Adaxes service installed during this installation.
     Click Next.
10. On the Ready to Install page, click Install to begin the installation.
    Depending on the features you've selected, the setup program may install additional components on your system. For details, see Additional Components.

Note: During the installation you might be prompted to provide the Windows installation files. It might be necessary to install Windows components used by Softerra Adaxes (e.g. Web Interface and SPML Web Service require Microsoft IIS that is a Windows component). If the Insert Disk dialog box appears, use one of the following methods: Insert your Windows CD-ROM into your CD-ROM or DVD-ROM drive, and then click OK. Click OK to locate your Windows installation files. In the Files Needed dialog box, click Browse, locate your Windows installation files, and then click Open. For example, the installation files might be in the D:\I386 folder.

Rights Granted to Adaxes Service Logon Account

Since the Adaxes service uses the account of the default service administrator to log on to the system, the setup program grants the 'Log on as service' right to this account.

When the Adaxes service is installed on a workstation rather than on a domain controller, this right is granted locally on this workstation via the Local Policy settings. If there is a conflicting domain-based Group Policy object that grants the 'Log on as service' right to other users, the local right granted by the setup program will be removed during the Group Policy refresh, because the domain-based Group Policy settings override the Local Policy settings. If this happens, the Adaxes service will not start. In this case contact your domain administrator to grant the 'Log on as service' right to the account of the default service administrator in a precedent domain-based Group Policy.

top of page

Uninstallation

Note: Before uninstalling Adaxes Service you may want to backup its configuration. For this purpose, use the Softerra.Adaxes.BackupRestore.exe tool.

To uninstall Softerra Adaxes:

1. If you want to uninstall the Adaxes Service, make sure that the service is running. It is necessary to correctly unregister the service from your system (remove the service connection points and clean up the configuration set metadata).
2. Open Add or Remove Programs and select the Softerra Adaxes product.
3. Click Remove and follow the steps provided.

top of page

Additional Components

Some of the Softerra Adaxes components require additional software to be installed in your operating system. All the additional software is installed automatically by the setup program, however you can do it manually if the automatic installation fails (the instructions are provided below).
The software components, the setup program is going to install, are listed on the Ready to Install page that is shown right before the installation process starts.

Additional software components installed automatically by the Adaxes setup program include:

Note: After Softerra Adaxes is uninstalled, the additional components installed automatically remain in the system.

top of page

How Do I

Install Microsoft .NET Framework 3.5

1. Visit http://www.microsoft.com/downloads/details.aspx?FamilyId=333325FD-AE52-4E35-B531-508D977D32A6.
2. Follow the instructions to download and install Microsoft .NET Framework Version 3.5.

---

Grant Permissions to Publish Adaxes Service

1. Open Active Directory Users and Computers on a domain controller.
2. Connect to the domain of the target computer (the computer on which you want to install Softerra Adaxes).
   • In the console tree, right-click Active Directory Users and Computers, and then click Connect to Domain.
   • Type the domain name and click OK.
3. On the View menu, select Advanced Features.
4. Right-click the computer object, on which you want to install Softerra Adaxes, and then click Properties.
5. On the Security tab, click Add and type the name of the user whom you want to grant the permissions to and then click OK.
6. Select the Allow check boxes for the Create All Child Objects and Delete All Child Objects permissions.
7. Click OK.

---

Install Microsoft Active Directory Application Mode (ADAM) SP1

To install ADAM, you must log on to your computer using an account that belongs to the local Administrators group.

To install ADAM on Windows Server 2003 or Windows XP:

1. Visit http://www.microsoft.com/downloads/details.aspx?familyid=9688f8b9-1034-4ef6-a3e5-2a2a57b5c8e4.
2. Follow the instructions to download and install Microsoft Active Directory Application Mode (ADAM) SP1.

To install ADAM on Windows Server 2003 R2:

1. Log on as an administrator, click Start, point to Control Panel, and then click Add or Remove Programs.
2. Click Add/Remove Windows Components.
3. In the Components list, select the check box next to Active Directory Services, and then click Details.
4. Select the check box next to Active Directory Application Mode (ADAM), click OK, and then click Next.
5. Review the message that appears. Based on the contents of message, do one of the following:
   • If the message "You have successfully completed the Windows Component Wizard" appears, click Finish.
   • If an error message appears, make a note of the error, click Finish, and then review the ADAM event messages in Event Viewer.

---

Install Microsoft Active Directory Lightweight Directory Services (LD LDS) Server Role

To install AD LDS, you must log on to your computer using an account that belongs to the local Administrators group.

To install the AD LDS server role on Windows Server 2008 and Windows Server 2008 R2:

1. Log on as an administrator, click Start, and then click Server Manager.
2. In the console tree, right-click Roles, and then click Add Roles.
3. Review the information on the Before You Begin page of the Add Roles Wizard, and then click Next.
4. On the Select Server Roles page, in the Roles list, select the Active Directory Lightweight Directory Services check box, and click Next.
5. Finish adding the AD LDS server role by following the instructions in the wizard.

---

Install Microsoft Active Directory Lightweight Directory Services (AD LDS)

To install AD LDS on Windows Vista:

1. Visit http://www.microsoft.com/downloads/details.aspx?FamilyID=E1B7F0A5-2131-44FD-9DDE-FA146154E13A.
2. Follow the instructions to download and install Microsoft Active Directory Lightweight Directory Services.

To install AD LDS on Windows 7:

1. Visit http://www.microsoft.com/downloads/details.aspx?familyid=A45059AF-47A8-4C96-AFE3-93DAB7B5B658.
2. Follow the instructions to download and install Microsoft Active Directory Lightweight Directory Services.

---

Install Microsoft Core XML Services (MSXML) 6.0

1. Visit http://www.microsoft.com/downloads/details.aspx?FamilyID=d21c292c-368b-4ce1-9dab-3e9827b70604.
2. Follow the instructions to download and install Microsoft Core XML Services (MSXML) 6.0.

---

Install Microsoft Internet Information Services (IIS) components

To install Microsoft IIS on Windows Server 2003:

1. Log on as an administrator, click Start, point to Control Panel, and then click Add or Remove Programs.
2. Click Add/Remove Windows Components.
3. In the Components list, select the Application Server check box, and then click Details.
4. Select the Internet Information Services (IIS) check box, and then click Details.
5. Select World Wide Web Service, and then select the check box.
6. Click OK two times to return to the Components list, and then click Next.
7. Click Finish when the IIS service is installed.

To install Microsoft IIS on Windows XP:

1. Log on as an administrator, click Start, point to Control Panel, and then click Add or Remove Programs.
2. Click Add/Remove Windows Components.
3. In the Components list, select the Internet Information Services (IIS) check box, and then click Details.
4. Select World Wide Web Service, and then select the check box.
5. Click OK two times to return to the Components list, and then click Next.
6. Click Finish when the IIS service is installed.

To install Microsoft IIS on Windows Vista and Windows 7:

1. Log on as an administrator, click Start, point to Control Panel.
2. Click Programs and Features.
3. Click Turn Windows features on or off to display the Windows Features dialog.
4. Click to expand Internet Information Services, and select the World Wide Web Service check box.
5. Click OK.

To install Microsoft IIS server role on Windows Server 2008 and Windows Server 2008 R2:

1. Log on as an administrator, click Start, point to Administrative Tools, and then click Server Manager.
2. In the console tree, right-click Roles, and then click Add Roles.
3. Review the information on the Before You Begin page of the Add Roles Wizard, and then click Next.
4. On the Select Server Roles page, in the Roles list, select the Web Server (IIS) check box, and then click Next.
5. Review the information on the Web Server (IIS) page of the Add Roles Wizard, and then click Next.
6. On the Select Role Services page, select the ASP.NET check box.
7. Finish adding the Web Server role by following the instructions in the wizard.

---

Install Windows PowerShell 2.0

1. Visit http://support.microsoft.com/kb/968929.
2. Follow the instructions to download and install Windows PowerShell 2.0.

Note: Windows 7 and Windows Server 2008 R2 have PowerShell 2.0 installed by default.

---

top of page

---

Copyright © 2009-2010 Softerra, Ltd. All Rights Reserved