ca governanceminder r12.6 - platform support matrix following matrix lists the ca governanceminder...

Copyright © 2011 CA. All rights reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies. CA confidential and proprietary information. No unauthorized copying or distribution permitted.

1

CA GovernanceMinder r12.6 - Platform Support Matrix

Revised: August 19, 2012

The following matrix lists the CA GovernanceMinder r12.6 supported platforms as follows:

Server Environments - Platforms that are supported as environments for hosting CA GovernanceMinder server components.

Client Environments - Platforms that are supported as environments for hosting CA GovernanceMinder Client components.

Connectors – Platforms that are supported as targets for import and export.

Password Management Components - Platforms that are supported for password management.

Server Environments

The following section describes the supported environments (such as operating systems, application servers, and RDBMS) for

hosting the CA GovernanceMinder server components.

Operating Systems

Operating System Release Additional Information

Microsoft Windows XP SP3 (32 bit) / SP2 (64 bit)

2003 Server SP2 (64 bit)

2003 R2 Server SP2 (64 bit)

2008 Server SP2 (64 bit)

2008 Server R2 SP1 (64 bit)

Virtualization supported

on vSphere 4.1 & 5

RHEL Red Hat 5.5 ,6.2 (64bit) Virtualization supported

on vSphere 4.1 & 5


2

Application Servers

Application Server Release Java Virtual Machine

IBM WebSphere

(LINUX)

7.0 1.6.0 (JDK version is IBM JDK that

comes with Web Sphere version)

JBoss (Windows and

LINUX)

5.1 1.6_23

Repositories

Databases

The following matrix describes the supported CA GovernanceMinder databases. The database is a required repository for storing

environment configuration information, workflow configuration and status, task history information and optionally (if

configured) audit records.

Repository Release Additional Information

Microsoft SQL Server 2005 SP4, 2008

SP2, 2008 R2

Standard & Enterprise Editions

Oracle 10.2g and 11g R2 Standard & Enterprise Editions,

Oracle RAC

Additional CA Interoperability Matrix

The following matrix describes CA GovernanceMinder additional interoperability with other CA products.

CA Product Release Additional Information

CA Identity Minder r12.5 SP8 and above, r12.6

GA

CA User Activity

Reporting Module

(Enterprise Log

Manager )

r12.5 SP4

CA SiteMinder r12.0 SP3 and later Including SiteMinder Multi

zones


3

Client Environments

The following matrix describes the supported CA GovernanceMinder client environments. It includes supported web browsers

and operating systems for running the CA GovernanceMinder Client Tools and the workflow designer tool.

Supported Operating Systems

Operating System Release Additional Information

Microsoft Windows XP SP3 (32 bit) / SP2 (64 bit)

2003 Server SP2 (32 & 64 bit)

2003 R2 Server SP2 (32 & 64 bit)

2008 Server SP2 (32 & 64 bit)

2008 Server R2 Sp1 (64 bit)

Windows 7 SP1

Virtualization supported

on vSphere 4.1 & 5

Supported Web Browsers

Web Browser Release Additional Information

Microsoft Internet Explorer 7.0 / 8.0/9.0 IE9 – compatibility mode

only

Reporting Server

CA GovernanceMinder Media includes a CA Installer for Business Objects reporting server. The table below describes the

supported versions of Business Objects:

Item Release Version of

CA

Business

Intelligence

Platforms


4

SAP Business

Objects

BOXI R3.1

SP5

CABI 3.2

SP5 & CABI

3.3

Microsoft Windows 2003 R2 SP2, 2008

R2, 2008 R2 SP1

Red Hat Enterprise Linux 5.x, 6.x

Support for the following databases:

o SQL 2005, 2008, 2008 R2

o Oracle 10g R2(Including RAC), 11g

R2 (Including RAC)

o MySQL (provided by the SAP

Business Objects installer)

Connectors

SUPPORTED CONNECTOR SERVERS

The following are software prerequisites for installing the CA IAM Connector Server (CA IAM CS) and the C++ Connector Server

(CCS). OS Release CA IAM

CS CCS Version/Level

Microsoft Windows 2003 SP2

2003 R2 SP2

2008 SP2

2008 R2, 2008

R2 SP1

Yes Yes 64-bit support only for CA IAM CS Standard Edition and Enterprise Edition are

supported Support for 32-bit mode on 64-bit machines

only for CCS

Sun Solaris 9, 10 Yes Yes • SPARC 64-bit machines (UltraSPARC IIIi, T1). • On Solaris 10 – Support for LDOMS and Zones

– Whole Root and Sparse. • Limited connectors are supported on CCS

(UNIX ETC, UNIX NIS, Access Control). Redhat Linux 5.x,6.x Yes No • 64-bit support only

VMware ESX 4.x,5.x Yes Yes Support for the Windows and Linux


5

platforms as listed in this table. SUPPORTED CONNECTOR XPRESS PLATFORMS

The following are software prerequisites for installing Connector XPress. OS Release Version/Level Microsoft Windows 2003

SP2,

2003 R2

SP2

2008

SP2

2008 R2,

2008 R2

SP1

• 32-bit and 64-bit.

• Support for Standard Edition and Enterprise Edition.

CERTIFIED CONNECTOR XPRESS ENDPOINT TYPES Connector Xpress allows for the creation of dynamic connectors, generated using the Connector Xpress for RDBMS

(JDBC) wizard or Connector Xpress for LDAP (JNDI) wizard to manage rows in arbitrary database tables or LDAP

repositories.

CA GovernanceMinder Mapping (Deep and Shallow use cases):

Deciding on your role modeling strategy affects how you map endpoint objects to CA GovernanceMinder objects when

connecting to endpoint systems. You can use CA GovernanceMinder to manage your organizational role model in the

following two ways: You can analyze your roles based on business roles. This concept allows you to design your role

model around the roles in your entire organization. This defines the shallow use case.

You can analyze your roles based on application. This concept allows you to design your role model around privileges

You want to give to users per application. This defines the deep use case.

The endpoint versions certified with Connector Xpress by CA Technologies are:

http://lod1218.ca.com/ROLECM/CA-ROLECM-r12.5SP4-Bookshelf/Bookshelf_Files/HTML/1704329.html

http://lod1218.ca.com/ROLECM/CA-ROLECM-r12.5SP4-Bookshelf/Bookshelf_Files/HTML/1704328.html


6

Endpoint

Endpoint

Release

Compliance

GovMinder

GovMinder

Mapping

(Shallow/Deep

/Both)

Integrated

IDM&Gov

Minder

Server

Platform Agentless Comment

CA Directory r12 SPx Yes Shallow Yes

CA IAM

CS Yes LDAP

Microsoft ADAM

2003 SP2

Enterprise

, 2003 R2

SP2

2008 SP2,

2008 R2

SP1 (AD

LDS) Yes Shallow Yes

CA IAM

CS Yes LDAP

Sun One Directory 6.3, 7.x Yes Shallow Yes

CA IAM

CS Yes LDAP

Novell eDirectory 8.8.x Yes Shallow Yes

CA IAM

CS Yes LDAP

Oracle Internet Directory 10g, 11g Yes Shallow Yes

CA IAM

CS Yes LDAP

Microsoft SQL Server

2005 SP4

2008 SP2,

2008 R2

SP1 Yes Both Yes

CA IAM

CS Yes RDBMS

Oracle

10g r2

11g r2 Yes Both Yes

CA IAM

CS Yes RDBMS

IBM DB2 9.x Yes Both Yes

CA IAM

CS Yes RDBMS

IBM DB2 for z/OS

9.1, 10.1

Yes Both Yes

CA IAM

CS Yes RDBMS

IBM DB2 for iSeries/400

6,1, 7.1

Yes Both Yes

CA IAM

CS Yes RDBMS

Sybase Adaptive

Enterprise Server v15.01 Yes Both Yes

CA IAM

CS Yes RDBMS


7

MySQL Enterprise Server 5.0, 5.5 Yes Both Yes

CA IAM

CS Yes RDBMS

Informix 11.5 Yes Both Yes

CA IAM

CS Yes RDBMS

SUPPORTED CONNECTOR ENDPOINT TYPES

The following matrix lists the supported endpoints for which connectors are formally provided.

Note: The CCS is accessed via the CA IAM CS

Endpoint

Endpoint

Release

RCM

RCM

Mapping

(Shallow/

Deep)

IDM

Integrated

IDM&RCM

Server

Platform

Agent -

less Comments

CA Access Control

(Unix)

r12, r12 SP1,

r12.5 SP2 --

> SP5,12.6 Yes Shallow Yes Yes CCS Yes

CA Access Control

(Windows)

r12, r12.5

SP2 -->

SP5,12.6 Yes Shallow Yes Yes CCS Yes

CA Arcot WebFort 6.2.2 Yes Shallow Yes Yes

CA IAM

CS

Yes

• Arcot Platform

1.0.8.3 (or higher) is

required.

CA Arcot RegFort 5.8.1 Yes Shallow Yes Yes

CA IAM

CS Yes

• RegFort should be

configured to share

UDS with Webfort

CA Data Loss

Prevention r12.5, r14 Yes Shallow Yes Yes

CA IAM

CS Yes

CA Single Sign-On r12.1 No N/A Yes

See

comments CCS Yes • See note 7.

CA-ACF2 14, 15 No Shallow Yes Yes IMPS No

• Requires CA LDAP

Server for z/OS


8

r14.1 or r15

CA-ACF2 ACFESAGE 14, 15 Yes Both No No

CA IAM

CS

See

comme

nts

• Requires

ACFESAGE utility

(contact CA

mainframe support)

to extract data from

mainframe system.

• Version PTF -

R034346 of the

ACFESAGE utility has

been certified.

CA-Top Secret 14,15 No Shallow Yes Yes IMPS No


Server for z/OS

r14.1 or r15

CA-Top Secret TSSCFILE 14, 15 Yes No Both No CA IAM

CS

See

comme

nts

• Requires TSSCFILE utility (contact CA mainframe support) to extract data from mainframe system. • r14 and r15 versions of the TSSCFILE utility have been certified.

Google Apps Yes Shallow Yes Yes

CA IAM

CS Yes

• Integration using

the “Google Apps

Provisioning API”

Version 2.0.

HP- Tru64 5.1B Yes Shallow Yes Yes CCS No • See note 4.

HP-UX 11i v3 Yes Shallow Yes Yes CCS No • See note 3.

IBM AIX 6.1, 7.1 Yes Shallow Yes Yes CCS No • See note 5.

IBM DB2 UDB 9.5 No N/A Yes No CCS Yes

• See note 6.

• See note 7.

IBM DB2 z/OS 9.1, 10.1 No N/A Yes No CCS Yes

• See note 6.

• See note 7.


9

IBM i5/OS (AKA

OS/400) 6.1 r1, 7.1 No N/A Yes No

CA IAM

CS Yes • See note 7.

IBM Lotus Notes

Domino Server 7.x, 8.x.x Yes Shallow Yes Yes

CA IAM

CS Yes

• Domino Server

supported on

Windows, AIX and

Linux.

• Domino Server

supported in 32-bit

mode only.

IBM RACF - Security

Server for z/OS

1.10, 1.11,

1.12, 1.13 No Shallow Yes Yes IMPS No


Server for z/OS

r14.1 or r15

IBM RACF IRRDBU00 1.9, 1.10 Yes Both Yes No CA IAM

CS

See comments

• Requires IRDBU00 utility (contact CA mainframe support) to extract data from mainframe system. • Version 1.9, 1.10 of the IRRDBU00 utility has been certified.

Kerberos 5.0 No N/A Yes No

CA IAM

CS Yes

• Sun

Implementation on

Solaris 10 only.

• See note 7.

Microsoft Active

Directory

2003 R2 SP2

2008, 2008

R2

2008 SP2

2008 R2 SP1,

2008 R2 SP2,

2008 R2 SP1

Core Yes Shallow Yes Yes CCS Yes

• 32-bit is only

supported for 2003

R2 and not 2008 R2.

• 2008 R2

Datacenter edition is

supported

• Microsoft Office

Communication

Server 2007 R2 and

Microsoft Live


10

Communications

Server 2003 are

supported

Microsoft Exchange

2003 SP2

2007 SP3

2010 SP2 Yes Shallow Yes Yes CCS No

• Remote agent for

certain features on

2003 SP2, and most

features on 2007

SP3 and 2010.

• CCR (Cluster

Continuous

Replication)

supported with MS

Exchange 2007 SP3

only.

• Exchange 2003

agent is 32-bit only.

• Exchange

2007/2010 agent is

64-bit only.

Microsoft SQL Server

2005 SP4,

2008 SP2,

2008 R2 SP1 Yes Shallow Yes Yes

CA IAM

CS Yes • See note 6.

Microsoft Windows 7 SP1 Yes Shallow Yes Yes CCS No

• Support for 32-bit

& 64-bit.

• Enterprise &

Ultimate Editions.

Microsoft Windows

Server

2003 SP2,

2003 R2 SP2,

2008 SP2,

2008 R2 SP1 Yes Shallow Yes Yes CCS No

• Windows Standard

Edition as well as

Windows Enterprise

Edition are

supported

• 2008 R2

Datacenter edition is

supported

Microsoft Windows SP2 Yes Shallow Yes Yes CCS No • Support for 32-bit.


11

Vista • Enterprise and

Business Edition are

supported.

Microsoft Windows XP

Professional SP3 Yes Shallow Yes Yes CCS No • Support for 32-bit.

Novell SuSE Linux

Enterprise Server 9, 10.1, 11.1 Yes Shallow Yes Yes CCS No • See note 2.

Oracle E-Business

Suite 11i, 12.1.x Yes Shallow Yes Yes CCS Yes

Oracle Server

10g r2, 11g

r2 Yes Shallow Yes Yes

CA IAM

CS Yes

• RAC not

supported.

• Oracle Server also

supported

dynamically via

Connector Xpress.

PeopleSoft HRMS 8.9, 9.1 Yes Both Yes Yes

CA IAM

CS Yes

• PeopleTools v8.48,

v8.49, v8.50

• PeopleTools v8.52

with PeopleSoft

HRMS 9.1 only

Red Hat Enterprise

Linux (AS, ES) 4.x, 5.x, 6.x Yes Shallow Yes Yes CCS No • See note 2.

RSA SecurID

6.1

7.1 SP4

Yes

(for

7.1

SP4

only) Both Yes Yes

See

commen

ts

See

comme

nts

• Windows 2003 SP2

and Solaris 10

support

• Red Hat Linux 5.x

supported for 7.1

only

• RSA SecurID 7.1

releases prior to SP3

are no longer

supported.

• Agent and CCS

required for RSA


12

SecurID 6.1.

• Agentless and CA

IAM CS for RSA

SecurID 7.1

Salesforce Yes Shallow Yes Yes

CA IAM

CS Yes

• Integration using

the “Force.com Web

Services API”

Version 17.0

SAP R/3

4.6C

(SP50+), 4.7

(EXT 110 -

SP51+), 4.7

(EXT 200 -

SP51+) Yes Shallow Yes Yes

CA IAM

CS Yes

•SAP 4.6C, minimum

Basis Support

Package level 50

•SAP 4.7 EXT 110 &

200, minimum Basis

Support Package

level 51

SAP NetWeaver (R/3)

2004 (Kernel

6.40), 7.0

(Kernel 7.0),

7.3 (Kernel

7.20) Yes Shallow Yes Yes

CA IAM

CS Yes

• Covers AS ABAP

type servers

• ECC 5.0 (6.40) &

ECC 6.0 (7.0)

supported

SAP UME

SAP

NetWeaver

2004 (SPS

14+)

SAP

NetWeaver

7.0 (SPS

05+) Yes Shallow Yes Yes

CA IAM

CS Yes

• Covers AS JAVA

type servers

Siebel CRM 7.8, 8.1 No N/A Yes No CCS Yes

• Not supported on

CCS running on

Windows 2008 R2

due the Siebel Client

support limitation

Sun Solaris 10, 11 Yes Shallow Yes Yes CCS No

• See note 1.

• Solaris 10 Zones


13

Note Comments

1 ETC, NIS, and NIS+ supported on SPARC and Intel/x86 platforms. The Solaris/SPARC remote agent works on SPARC

32-bit and 64-bit processors. The Solaris/Intel remote agent works on Intel x86 32-bit and AMD 64-bit processors.

2 ETC and NIS supported on Intel x86 platforms. The Linux/x86 remote agent works on Intel/AMD x86 32-bit, 64-bit, and

Itanium 64-bit processors. The Linux/S390 remote agent works on IBM s390 32-bit and s390x 64-bit processors.

3 ETC, NIS and TCB supported on Itanium 2. Shadow mode is supported. The HP-UX remote agent works on PA-RISC 32-

bit, 64-bit, and Itanium 64-bit processors.

4 ETC supported on alpha platform. The Tru64 remote agent works on Alpha 64-bit processors.

5 ETC and NIS supported on RS/6000 and Power platforms. The AIX remote agent works on Power PC 32-bit and 64-bit

processors.

6 Also available as a dynamic Connector via Connector Xpress.

7 In an Integrated deployment, this Connector supports Provisioning but not Compliance. To request Compliance support

for this Connector, please raise an enhancement request via CA Technologies support.

Supported Endpoints using Direct Connectivity

The following Endpoints apply only when CA GovernanceMinder connects directly to the endpoint (not using an identity

management system).

Endpoint Additional comments

CSV Files 7 CSV files in CA GovernanceMinder proprietary format

CSV Mapping Data mapping from standard CSV file

(Whole Root and

Sparse) are

supported.


14

LDIF Mapping Data mapping from standard LDIF file - only Base32

encoding

Supported Endpoint Connectivity using CA Identity Minder (Old Connectors)

Apply when connecting to endpoints using CA Identity Minder.

Endpoint integration is available using two methods: Legacy and Customizable Connector.

Note: These methods are supported for backward compatibility purpose only, will be supported for upgrading

customer only

For more details about the End points versions supported legacy connectors please refer to CA GovernanceMinder 12.5 SP3

support matrix.

Integration Examples for connectivity using Third-party Identity Management Systems

The following examples are available on request via CA Services.

IBM TIM

Sun IM

Sample Kettle PDI Data Transforms

CA GovernanceMinder provides the ability to invoke Pentaho Data Integration (PDI) transformations and jobs. This feature

allows for complex ETL (Extract, Transform, and Load) operations during data import. CA support site provides a list of the

available transforms.

Link: https://support.ca.com/irj/portal/anonymous/phpdocs?filePath=0/8247/8247_rcmdata.html

CA GovernanceMinder ships with PDI version 4.2. The installation process extracts the software with additional CA

GovernanceMinder dedicated input/output plugins for customers to use in their environment. For more information, check the

product documentation.

Please note that CA Technologies does not support the transforms.

https://support.ca.com/irj/portal/anonymous/phpdocs?filePath=0/8247/8247_rcmdata.html


15

Password Management Components

The following section describes the supported CA GovernanceMinder portal password management components.

Target System Additional comments

Microsoft Active

Directory

Windows 2003 or 2008 Server

CA eTrust Directory R12.0.x

CA SiteMinder r12.0 SP3 latest CR

CA Identity Minder R12.5 SP8 and above, R12.6 GA

ca governanceminder r12.6 - platform support matrix following matrix lists the ca governanceminder...

Documents