How to configure Control Compliance Suite for Windows

Article:TECH114026  |  Created: 2008-01-24  |  Updated: 2008-01-08  |  Article URL http://www.symantec.com/docs/TECH114026
Article Type
Technical Solution


Issue






Solution



Follow these steps to configure bv-Control for Windows or Control Compliance Suite for Windows:

PART 1: INSTALL THE ECS
  1. Launch the RMS Console.
  2. In the left column at the bottom, click bv-Control for Windows.
  3. In the pane on the right, double click the bv-Control for Windows Configuration Wizard.
  4. In the Welcome pane, click Next.
  5. If this is the first time that bv-Control for Windows is being configured, select the radio button Install an ECS in your enterprise. Click Next. Otherwise, select the radio button to Use an existing ECS, then browse to the computer that hosts the Enterprise Configuration Service (ECS). Click Next.
  6. Click Yes, then browse to the location of the ECS install set. Click Next.
  7. In the destination computer field, select the name of the target computer that will host the new ECS.
    • NOTE: This can be the Information Server (IS) or another server-class computer.
  8. De-select the Use default settings box, then click Next.
  9. In the TCP/IP port field, enter a TCP port only if bv-Control for Windows will be reporting across a firewall. Otherwise, accept the default, then click Next.
  10. In the Set Service Firewall Scope Settings dialog box, accept the defaults "Enable Windows Firewall exception registration" and "Any computer including those on the internet." Click Next.
  11. In the Choose destination Location dialog box, click Browse to select the installation directory.
    • NOTE: The default path is C:\Program Files\Symantec\ECS.
  12. Click Next twice.
  13. Click Finish after the ECS installation complete.

PART 2: INSTALL THE QUERY ENGINE(S)
  1. Click the Install New Query Engine (QE) button. Click Next.
  2. In the Select Domain to Install To dialog box, verify the target domain name is correct. Click Next.
  3. In the list of available computers on the left, highlight the target computer(s) to install the query engine on.
    • NOTE: Use the CTRL key to select multiple computers to install QEs on several computers.
  4. Click the right >> arrow button to move the target computers to selected computers in the right column. Click Next.
  5. Clear the check box "Use default settings for the query engine". Click Next.
  6. Click the Assign button at the bottom right, then enter a TCP port IF AND ONLY IF the target query engine will report across a fire wall.
  7. In the Set Service Firewall Scope Settings dialog box, accept the defaults "Enable Windows Firewall exception registration" and "Any computer including those on the internet." Click Next.
  8. Click the Browse button to select an alternate destination installation directory.
    • NOTE: The default path is C:\Program Files\Symantec\BVNTQE.
  9. When prompted, enter the domain name, user ID, and password for the query engine service account, then click OK.
  10. Click Next, then click Finish.
  11. Repeat the above steps to install query engines for additional domains.


PART 3: CREATE THE CONNECTION AND CREDENTIAL DATABASES
  1. When the installation returns to the Install New Query Engine dialog box, click Next.
  2. In the Add/Remove Connection Database dialog box, click the link Click and edit here to add new connection database.
  3. Enter the new connection database name. For example, use "ConnDB" for the connection database name.
  4. Enter the connection database password twice. Consider using the same password used by the query engine service account in PART 2 above.
  5. Click Next.
  6. In the Select Query Engine dialog box, move the available master query engines (MQE) from the right column to the available connection database on the right. Click Next.
  7. Click the Verify All button. Each MQE should verify successfully with status "connected" before continuing.
  8. Click Next.
  9. In the Connection Database Assignment dialog box, select the connection database in the pick list at the top that will be the default. Click Next.
  10. In the Configure User Options dialog box, DO NOT select "Use credentials for query". Click Next twice.
  11. In the Add Credential Database dialog box, click the link Click and edit here to add new credential database.
  12. Enter a new credential database name. For example, use "CredDB" for the credential database name.
  13. Enter the credential database password twice, then click OK. Click Next.
  14. Expand Query Credentials > Microsoft Windows Network.
  15. Highlight the domain name, then click Add. When prompted, enter the fully qualified service account user ID and password, then click OK.
    • WARNING: No password challenge exists, so be sure to enter the correct user ID and password. The syntax for a fully qualified user ID is {Domain_name} \ {User_ID}
    • NOTE: The service account must have domain admin privileges in the target domain.
  16. Expand Query Credentials > Active Directory.
  17. Click Directory-{domain_name}, then click the Add button.
  18. Enter the fully qualified user ID and password again for the service account. Click OK twice, then click Next.
  19. In the Use Credential Database dialog box, select a credential database for each user in the list. Click Next twice.
  20. Click Finish. bv-Control for Windows is now configured.






Legacy ID



2008012414243253


Article URL http://www.symantec.com/docs/TECH114026


Terms of use for this information are found in Legal Notices