Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 User manual

Novell®
www.novell.com
novdocx (en) 17 September 2009
AUTHORIZED DOCUMENTATION
ZENworks Endpoint Security Management Installation Guide
ZENworks ® Endpoint Security Management
3.5
July 31, 2009
Installation Guide

novdocx (en) 17 September 2009
Legal Notices
Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.
See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information
on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export
approvals.
Copyright © 2007-2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.

4ZENworks Endpoint Security Management Installation Guide
novdocx (en) 17 September 2009

Contents 5
Contents
novdocx (en) 17 September 2009
About This Guide 7
1 ZENworks Endpoint Security Management Overview 9
1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.2 About the ZENworks Endpoint Security Management Manuals. . . . . . . . . . . . . . . . . . . . . . . . 11
2 Installing ZENworks Endpoint Security Management 13
2.1 Pre-installation Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.2 Installation Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.2.1 About the Master Installer Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.3 Installation Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.4 Installation Order . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.5 Before Installing ZENworks Endpoint Security Management. . . . . . . . . . . . . . . . . . . . . . . . . . 14
3 Performing a Single-Server Installation 19
3.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
3.2 Starting the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
4 Performing a Multi-Server Installation 23
5 Performing the Policy Distribution Service Installation 25
5.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
5.1.1 Typical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5.1.2 Custom Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
5.2 Starting the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
6 Performing the Management Service Installation 33
6.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
6.1.1 Typical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
6.1.2 Custom Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
6.2 Starting the Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
7 Performing the Management Console Installation 45
7.1 Installation Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
7.1.1 Typical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
7.1.2 Custom Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
7.2 Starting the Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
7.2.1 Adding eDirectory Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
7.2.2 Configuring the Management Console’s Permissions Settings . . . . . . . . . . . . . . . . . 50
7.2.3 Publishing a Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

6ZENworks Endpoint Security Management Installation Guide
novdocx (en) 17 September 2009
8 Endpoint Security Client 3.5 Installation 55
8.1 Basic Endpoint Security Client 3.5 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
8.2 MSI Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
8.2.1 Command-line Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
8.2.2 Distributing a Policy with the MSI Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
8.2.3 User Installation of the Endpoint Security Client 3.5 from MSI . . . . . . . . . . . . . . . . . 62
8.3 Running the Endpoint Security Client 3.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
9 Endpoint Security Client 4.0 Installation 63
9.1 Basic Endpoint Security Client 4.0 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
9.2 MSI Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
9.2.1 Using the Master Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
9.2.2 Using the Setup.exe File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
9.2.3 Completing the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
9.2.4 Command Line Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
9.2.5 Distributing a Policy with the MSI Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
9.3 Running the Endpoint Security Client 4.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
9.4 Features Not Supported In the Endpoint Security Client 4.0 . . . . . . . . . . . . . . . . . . . . . . . . . . 70
10 ZENworks Endpoint Security Management Unmanaged Installation 71
10.1 Unmanaged Endpoint Security Client Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
10.2 Stand-Alone Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
10.3 Distributing Unmanaged Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
11 Upgrading 73
A Documentation Updates 75
A.1 July 31, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
A.2 January 5, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

About This Guide 7
novdocx (en) 17 September 2009
About This Guide
This Novell®ZENworks®Endpoint Security Management Installation Guide provides complete
installation instructions for the ZENworks Endpoint Security Management components and assists
administrators in getting those components up and running.
The information in this guide is organized as follows:
Chapter 1, “ZENworks Endpoint Security Management Overview,” on page 9
Chapter 2, “Installing ZENworks Endpoint Security Management,” on page 13
Chapter 3, “Performing a Single-Server Installation,” on page 19
Chapter 4, “Performing a Multi-Server Installation,” on page 23
Chapter 5, “Performing the Policy Distribution Service Installation,” on page 25
Chapter 6, “Performing the Management Service Installation,” on page 33
Chapter 7, “Performing the Management Console Installation,” on page 45
Chapter 8, “Endpoint Security Client 3.5 Installation,” on page 55
Chapter 9, “Endpoint Security Client 4.0 Installation,” on page 63
Chapter 10, “ZENworks Endpoint Security Management Unmanaged Installation,” on page 71
Audience
This guide is written for the ZENworks Endpoint Security Management administrators.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation, or go to the Novell Documentation Feedback site (http://www.novell.com/
documentation/feedback.html) and enter your comments there.
Additional Documentation
ZENworks Endpoint Security Management is supported by other documentation (in both PDF and
HTML formats) that you can use to learn about and implement the product. For additional
documentation, see the ZENworks Endpoint Security Management 3.5 documentation Web site
(http://www.novell.com/documentation/zesm35).

8ZENworks Endpoint Security Management Installation Guide
novdocx (en) 17 September 2009

ZENworks Endpoint Security Management Overview
1
9
novdocx (en) 17 September 2009
1
ZENworks Endpoint Security
Management Overview
Novell®ZENworks®Endpoint Security Management consists of four high-level functional
components: the Policy Distribution Service, the Management Service, the Management Console,
and the Endpoint Security Client. The figure below shows these components in the architecture:
Figure 1-1 ZENworks Endpoint Security Management Architecture
The Endpoint Security Client is responsible for enforcement of the distributed security policies on
the endpoint system. When the Endpoint Security Client is installed on all enterprise PCs, these
endpoints can now travel outside the corporate perimeter and maintain their security; endpoints
inside the perimeter receive additional security checks within the perimeter firewall.
The following components are installed on servers that are secured inside the corporate perimeter:
Policy Distribution Service: Responsible for the distribution of security policies to the
Endpoint Security Client and retrieval of reporting data from the Endpoint Security Client. The
Policy Distribution Service can be deployed in the DMZ, outside the enterprise firewall, to
ensure regular policy updates for mobile endpoints.
Management Service: Responsible for user policy assignment and component authentication,
reporting data retrieval, creation and dissemination of ZENworks Endpoint Security
Management reports, and security policy creation and storage.
Management Console: The visible user interface, which runs directly on the server hosting the
Management Service or on a workstation residing inside the corporate firewall with connection
to the Management Service server. The Management Console is used to both configure the
Management Service and to create and manage user and group security policies. Policies are
created, copied, edited, disseminated, and deleted using the Management Console.
Management
Service
Policy
Distribution
Service
ZENworks
Security
Client
Enterprise
Web Server
Active Directory,
LDAP, or NT Domain
Directory Service
SQL
Database
SSL Link
Office
Home
Encrypted
Policy
Reporting
Information
Management
Console
Group
Info
Central Management
Location Secure
Enterprise Perimeter
ZENworks
Endpoint Security Management
Coffee
Shop
On The
Road
DMZ
(Demilitarized Zone)

10 ZENworks Endpoint Security Management Installation Guide
novdocx (en) 17 September 2009
1.1 System Requirements
Table 1-1 Server Requirements
Table 1-2 Standalone Management Console Requirements
Table 1-3 Client Requirements
Item Requirement
Operating System Microsoft* Windows* 2003 Server (32-bit)
Processor Determined by operating system
Disk Space 500 MB if the Microsoft SQL database is not installed locally
5 GB if the Microsoft SQL database is local; a SCSI drive is
recommended
Software One of the following relational database management systems
(RDBMS): SQL Server Standard, SQL Server Enterprise, Microsoft
SQL Server 2000 SP4, SQL 2005; server authentication must be set
to mixed mode to allow both SQL Server and Windows
Authentication mode authentication
Microsoft Internet Information Services (configured for SSL)
Directory Services: eDirectoryTM or Active Directory*
.NET framework 3.5
Item Requirement
Software One of the following relational database management systems
(RDBMS): SQL Server Standard, SQL Server Enterprise, Microsoft
SQL Server 2000 SP4, SQL 2005, SQL Express, SQL Server 2008;
server authentication must be set to mixed mode to allow both SQL
Server and Windows Authentication mode authentication
Item Requirement
Operating System for Endpoint
Security Client 3.5
Windows XP SP1
Windows XP SP2
Windows 2000 SP4
The operating system must have Windows Installer 3.1 installed and
all operating system updates applied
Operating System for Endpoint
Security Client 4.0
Windows Vista SP1 (32-bit)
Processor Determined by operating system
Disk Space 5 MB required, 5 additional MB recommended for reporting data