How to Install and Configure CA IT PAM for Integration with CA Service Catalog 12.6 on Windows 2008.

Document ID : KB000050279
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

This technical document outlines the prerequisites, installation procedure and configuration of CA IT PAM for the integration with CA Service Catalog 12.6. This also includes the configuration steps required for CA Service Catalog 12.6.

Solution:

This technical document assumes the following components have been installed:

  • CA EEM 8.4 SP4
  • CA Service Catalog 12.6

  1. Prerequisites

    • JRE 1.6 or higher

    • JDK 1.6_04



  2. Installing CA IT PAM

    1. Copy itpam_eem.xml from CD2\EEM of the ITPAM installation media to %IGW_LOC% (i.e. C:\Program Files\CA\SharedComponents\iTechnology) on the EEM server:

      Figure 1

    2. Open a command prompt, change directory into %IGW_LOC% and execute the following command making sure to replace <eiamadminpass> with the EiamAdmin password:

      safex.exe -h <localhost> -u EiamAdmin -p <eiamadminpass> -f itpam_eem.xml

      Figure 2

    3. Insert disc1 of the CA IT PAM Installation media into a drive or browse to the location where the installation files were copied previously from the installation media.

      If you have a 32-bit JDK installed then select Third_Party_Installer_Windows_32.exe installer, and if you have a 64-bit JDK installed then select Third_Party_Installer_Windows_64.exe.

      Figure 3

    4. Accept the licensing agreement and click Next:

      Figure 4

    5. Specify the destination directory to install the CA IT PAM Domain Orchestrator and click Next:

      Figure 5

    6. Click Next:

      Figure 6

    7. Verify the JBoss installation file location and click Next:

      Figure 7

    8. Verify the Hibernate File location and click Next:

      Figure 8

    9. Specify the JDBC drivers for the appropriate database to be used with CA IT PAM and click Next:

      Figure 9

    10. If you will be using Telephony Alerts add the location of your TAPI drivers and click Next:

      Figure 10

    11. On the confirmation screen click Next:

      Figure 11

    12. Insert the CA IT PAM installation disc2 or specify the directory that contains the files from the CA IT PAM installation media and click Finish:

      Figure 12

    13. After installing third party components, the installer will copy the CA IT PAM installer files to the host machine and start the Domain Orchestrator installer. On the Welcome page, click Next:

      Figure 13

    14. Accept the license agreement and click Next:

      Figure 14

    15. Browse to the JDK directory and click Next:

      Figure 15

    16. Appropriately configure SSO or clustered Domain Orchestrator if necessary and click Next:

      Figure 16

    17. Specify your company name and click Next:

      Figure 17

    18. Type a certificate password and click Next:

      Figure 18

    19. Specify a Start Menu folder and click Next:

      Figure 19

    20. Enter the General Properties for the Domain Orchestrator, select 'Install as Windows Service and click Next:

      Figure 20

    21. Select the security server type and click Next:

      Figure 21

    22. Provide the EEM hostname, 'ITPAM' as the EEM Application Name, the path to itpamcert.p12 (%IGW_LOC%\itpamcert.p12 by default), the EEM Certificate Password (itpamcertpass by default) and select 'Test EEM Settings':

      Figure 22

    23. Provide the credentials for itpamadmin and click Ok:

      Figure 23

    24. Verify the test completes successfully and click Ok and then Next:

      Figure 24

    25. Enter the database settings, click 'Create Database' and click Ok:

      Figure 25

    26. Click 'Test Database Settings', verify the test is successful and click Ok, and click Next:

    27. Select 'copy from main repository' and click Next:

      Figure 26

    28. Select the jdbc driver and click Next:

      Figure 27

    29. Select the appropriate connector(s) and click Next:

      Figure 28

    30. Once the installation completes click Finish:

      Figure 29

    31. From services.msc start the CA IT PAM Orchestrator service:

      Figure 30

    32. Verify you can correctly login to ITPAM as itpamadmin.:

      Figure 31

    33. Verify you can correctly launch the ITPAM Client. If Java Web Start does not get invoked, hold down Ctrl and click 'CA IT PAM Client':

      Figure 32

      Figure 33


  • Configuring the Integration:

    1. If you plan to connect to ITPAM using a CA EEM token instead of standard login credentials, first create the certificate as per the procedure on page 150 of the Integration Guide, otherwise skip to the next step.

    2. Login to Service Catalog as a Service Delivery Administrator and navigate to Administration -> Configuration -> CA IT Process Automation Manager. Specify the Domain Orchestrator hostname, port number , userid and password:

      Figure 34

    3. Select 'Test', verify the 'Connection Test is Successful' and click 'Ok':

      Figure 35

    4. Log out of Service Catalog and recycle the CA Service View service:

      Figure 36

    5. Login to Service Catalog as a Service Delivery Administrator and navigate to Administration -> Configuration -> CA IT Process Automation Manager.

    6. Select 'Load' and in the 'Load Configuration Dialog' select both 'Set imported version of IT PAM Objects as current version' and 'Make imported Custom Operators/Sensors available' and click 'Load':

      Figure 37

    7. After a successful load you will receive the following popup:

      Figure 38

    8. Log in to CA IT PAM client.

    9. In the Library Browser, navigate to the CA SLCM folder, and open the data set named SLCM_GlobalDataset:

      Figure 39

    10. Check Out the SLCM_GlobalDataset:

      Figure 40

    11. In the Value Definition palette of the data set, open the Login Parameters tab and verify that the values of the following options are correct for your implementation. Update these values as needed:

      Figure 41

    12. Also in the Value Definition palette of the data set, open the APP URLs tab and verify that the values of the following options are correct for your implementation. Update these values as needed:

      Figure 42

    13. Save the changes to the SLCM_GlobalDataset and Check In the same:

      Figure 43

    14. Make sure 'Set Current Version' is selected and click 'Ok':

    15. Login to Service Catalog as a Service Delivery Administrator and navigate to Administraion -> Tools -> Request/Subscription Item Change. By default Catalog is configured for CA IT PAM driven approval and simple fulfillment. To configure the complex fulfillment for use with CA Service Desk Manager please refer to Chapter 9 (specifically page 168) of the Integration Guide.

    16. At this point it is possible to test the integration with ITPAM by raising a request for a service which uses the 'Workflow driven approval process'. Once the request is submitted the status should be updated to 'Pending Approval':

      Figure 44