ACE MSA manual.pdf

(1457 KB) Pobierz
ACE Management Server Administrator’s Manual
ACE Management Server
Administrator’s Manual
VMware ACE 2.5
336568094.001.png
ACE Management Server Administrator’s Manual
ACE Management Server Administrator’s Manual
Item: EN-000042-00
You can find the most up-to-date technical documentation on the VMware Web site at:
http://www.vmware.com/support/
The VMware Web site also provides the latest product updates.
If you have comments about this documentation, submit your feedback to:
© 2007, 2008 VMware, Inc. All rights reserved. Protected by one or more U.S. Patent Nos. 6,397,242,
6,496,847, 6,704,925, 6,711,672, 6,725,289, 6,735,601, 6,785,886, 6,789,156, 6,795,966, 6,880,022,
6,944,699, 6,961,806, 6,961,941, 7,069,413, 7,082,598, 7,089,377, 7,111,086, 7,111,145, 7,117,481,
7,149,843, 7,155,558, 7,222,221, 7,260,815, 7,260,820, 7,269,683, 7,275,136, 7,277,998, 7,277,999,
7,278,030, 7,281,102, 7,290,253, 7,356,679, 7,409,487, 7,412,492, 7,412,702, and 7,424,710; patents
pending.
VMware, the VMware “boxes” logo and design, Virtual SMP, and VMotion are registered trademarks or
trademarks of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names
mentioned herein may be trademarks of their respective companies.
VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com
2
VMware, Inc.
Contents
About This Book 7
1 Introduction 9
Features of ACE Management Server 9
System Requirements 11
Required Hardware 11
Supported Operating Systems 11
Supported External Databases 12
Supported Proxies 12
Required Web Browsers 12
Licensing 12
2 Planning an ACE Management Server Deployment 13
Deployment Components 13
Host System Options 15
Windows Hosts 15
Linux Hosts 15
Server Appliance Option 15
Database Options 16
Active Directory Authentication Options 17
Performing Capacity Planning 17
Database Throughput and Scalability 18
LDAP Throughput 18
Network Bandwidth and Policy Update Frequency 19
ACE Policy Configuration 20
Load Balancers 20
Security Features and Considerations 20
Using SSL Certificates and Protocol 21
Accessing ACE Management Server from Outside the Corporate Firewall 22
Deployment Planning Worksheet 24
VMware, Inc.
3
ACE Management Server Administrator’s Manual
3 Installing and Configuring ACE Management Server 25
Preparing for Installation 25
Configure TLS in Your Browser 26
Installing and Upgrading ACE Management Server 26
Install an ACE Management Server on a Windows Host 27
Install ACE Management Server on a Linux System 28
Install an ACE Management Server Appliance 29
Verify That the Apache Service Is Started or Restarted 31
Start and Configure ACE Management Server 33
Log In to ACE Management Server 34
4 Configuration Options for ACE Management Server 37
Prerequisites for Configuring the Server 37
Create Users and Groups for Integration with Active Directory 38
Set Up an External Database 39
Creating a System DSN Entry for an External Database 40
Increase the Number of Database Connections Allowed 42
Enable Database Connection Pooling on Linux 43
Set Up a Connection Between the Server Appliance and an External 
Database 43
Prepare Custom Security Certificates 44
View the Properties of the Self‐Signed Certificate File 45
Starting ACE Management Server Configuration 45
Viewing and Changing Licensing Information 46
Using an External Database 46
Creating Access Control 47
Uploading Custom SSL Certificates 48
Logging Events 49
Applying Configuration Settings 50
5 Load‐Balancing Multiple ACE Management Server Instances 51
Typical Setup Using Load‐Balanced ACE Management Server Instances 52
Install the Required Services for Load Balancing 53
Use the Same SSL Certificate on All Servers 53
Create New SSL Certificates and Keys for Each Server 55
Installing and Configuring the Load Balancer 57
Verify That ACE Instances Are Using the Load Balancer 57
4
VMware, Inc.
Contents
6 Managing ACE Instances 59
Viewing ACE Instances That the Server Manages 60
Use the VMware ACE Help Desk Application 60
Use the Instance View in Workstation 61
Search for an Instance 62
Sort by Column Heading and Change Column Width 63
Show, Hide, and Move Columns in the Instance View 64
Create or Delete Custom Columns in the Instance View 64
View Instance Details 65
Reactivate, Deactivate, or Delete an ACE Instance 65
Change a Copy Protection ID 66
Reset the Authentication Password 66
Add Information for Custom Columns 67
7 Troubleshooting and Maintenance 69
Troubleshooting Configuration Problems 69
Connection Problems Between a Linux ACE Instance and ACE Management 
Server 69
Change the Port Assignment for ACE Management Server 70
Delete the Server Configuration File and Set a New Administrator 
Password 71
Restore a Backup Copy of an SSL Certificate 72
Configuring Multiple ACE Management Server Instances to Use SSL 73
Database Backup 74
Appendix: Database Schema and Audit Event Log Data 75
Using Database Reporting Tools 75
Database Schema 76
Querying the Audit Event Log Data 81
Glossary 85
Index 89
VMware, Inc.
5
Zgłoś jeśli naruszono regulamin