RSA SecurID Ready Implementation Guide
Last Modified 02/04/2004
1. Partner Information
Partner Name
Web Site
BMC Software
Product Name
Version & Platform
Product Description
CONTROL-SA/Agent for RSA ACE/Server
CONTROL-SA 3.x
CONTROL-SA is the foundation for secure identity management. It is a
solution for centrally managing users’ information and access across the
various distributed security systems in the organization. CONTROL-SA
integrates with numerous systems and applications via CONTROL-
SA/Agents. CONTROL-SA/Agent for RSA ACE/Server is designed to
integrate CONTROL-SA with RSA SecurID system by allowing bi-
directional management of SecurID security entities between CONTROL-
SA Enterprise SecurityStation (ESS) and RSA ACE/Server.
User Management
Product Category
Internal and External Users
Applications
Directory
Services
Mid-range/OS
Databases
Mainframe
1
4. Product Requirements
Hardware requirements
Component Name: CONTROL-SA/Agent for RSA ACE/Server on Windows
CPU make/speed required Any hardware configuration supported by Microsoft Windows operating
system (e.g., Intel Pentium processor).
Memory
128 MB RAM
Disk space
Installation device
32 MB of available disk space required, preferably on the local drive
CD-ROM drive
Software requirements
Component Name: CONTROL-SA/Agent for RSA ACE/Server on Windows
Operating System
Version (Patch-level)
Windows
NT 4.0 (Server and Workstation)
Windows
2000 (Server and Advanced Server)
Windows
Server 2003
5.0.1
5.1
RSA ACE/Server
RSA ACE/Server
RSA ACE/Server
5.2
5. Partner Configuration
Installation Prerequisites
Note: For a comprehensive list of all Installation Prerequisites, and Hardware and
Software requirements, consult the CONTROL-SA®/Agent for RSA ACE/Server®
Administrator Guide
•
•
CONTROL-SA/Agent for RSA ACE/Server should be installed on the same machine
running the RSA ACE/Server managed.
Administrative Software: it is required to install and configure CONTROL-SA Enterprise
SecurityStation (ESS), version 3.1.00 or above, as specified in the CONTROL-
SA®/Agent for RSA ACE/Server® Administrator Guide.
CONTROL-SA ESS allows central user management of RSA SecurID together with other
security systems across the organization.
Product Configuration
The following is a basic overview of the necessary steps to Install and Configure the CONTROL-
SA®/Agent for RSA ACE/Server:
3
1. Install and configure CONTROL-SA ESS (Enterprise SecurityStation) – as described in
the relevant installation, administration and user guides.
2. Install and configure CONTROL-SA/Agent for RSA ACE/Server – as described in the
CONTROL-SA®/Agent for RSA ACE/Server® Administrator Guide.
3. Configure ESS to integrate with CONTROL-SA/Agent for RSA ACE/Server – as
described in the ESS administrators’ guide.
4. Perform initial download to retrieve RSA SecurID users and groups.
5. Load resources to retrieve RSA SecurID tokens.
Note that the procedures above are a general overview of the appropriate configuration steps. For
comprehensive information on installing the Install and Configure the CONTROL-SA®/Agent for RSA
ACE/Server, consult the CONTROL-SA®/Agent for RSA ACE/Server® Administrator Guide.
4
Example Screenshots
The following screenshots are intended to demonstrate some of the functionality of the BMC CONTROL-
SA®/Agent for RSA ACE/Server®:
SecurID Group Membership:
5
SecurID Token Management
ACE/Server User Management
6
6. Certification Checklist
Date Tested: 11/11/2003
Product
ACE/Server
Tested Version
5.1.00
ACE/Agent
5.5.0.117
CONTROL-SA/Agent for RSA ACE/Server
3.1.07
Test
Pass
Fail
1st time connection to ACE/Server Database
P
User Management
Add a user
Modify a user’s information
Assign a token
P
P
P
Un-assign a token
P
Assign a password
P
Un-assign a password
Enable a user’s token
Disable a user’s token
Clear a user token’s PIN
Delete a user
P
P
P
P
P
Activate a user on a client**
De-Activate a user on a client**
Add a user to a group
Remove a user from a group
N/A
N/A
P
P
N/A
No ACE/Server
JEC
*P=Pass or Yes F=Fail N/A=Non-available function
** CONTROL-SA/Agent for RSA ACE/Server currently does not include management of clients. However,
this is in the work plan for future versions.
7. Known Issues
There are no known issues.
7
|