Single Copy Cluster (SCC) installation

Article
07/23/2014

Applies to: Forefront Security for Exchange Server

The following steps describe how to install Forefront Security for Exchange Server on the active and passive nodes of an SCC cluster. FSE is installed on the active node first, then the passive node.

To install Forefront Security for Exchange Server on the passive node, log on to the computer with an account that has administrator rights. This is necessary for Setup to be able to perform service registration. The CMS should still be running on the active node at this point. You will not need to configure Forefront Security for Exchange Server on the passive nodes separately. All configurations and registry settings will be automatically replicated to the passive nodes.

Ensuring that your SCC cluster drive is available during installation

You must determine before the installation whether your cluster drive has mount volume information. When you install FSE on an active node of an SCC cluster, you are asked to indicate the shared drive from a list. If the drive you want to install FSE on has mount volume information, you can skip to the section Installing FSE On an SCC Active Node. If not, Setup cannot obtain the shared drive information and it will not be included in the list. To preclude having to cancel the installation at that point, begin by invoking Setup.exe with the /c parameter and the shared drive letter. This places that shared drive in the list of available drives.

Using the driveletter switch

Run the Setup.exe file, which is available on your CD image or from the self-extracting package available at the Microsoft Volume Licensing Download Center. Be sure to use the /c parameter and the drive letter.

The syntax for the command line invocation is:

Setup /cdriveletter

There is no space between the /c and the drive letter, which must end in a colon. For example, to use the S: drive for the installation:

Setup /cS:
Now that you know the cluster drive will appear in the Disk Resource Name For Shared Drive list on the Forefront Server Security On an Active/Passive Cluster screen, you are ready to begin installation on the active node.

Installing FSE on an SCC active node

These are the steps to install FSE on an SCC active node. Click Next to continue after filling out a screen, unless otherwise directed.

Note

Like most installations, Setup updates shared Microsoft files on your computer. If you are requested to restart your computer, you should wait until Forefront Security for Exchange Server has been installed on all computers in the cluster before restarting.

To install Forefront Security for Exchange Server on an SCC active node

Run the Setup.exe file, which is available on your CD image or from the self-extracting package available at the Microsoft Volume Licensing Download Center.
The initial setup screen is Welcome. Click Next to continue.
Read the license at the License Agreement screen and click Yes to accept it.
On the Customer Information screen, enter User Name and Company Name, if needed.
On the Installation Location screen, select Local Installation.
On the Installation Type screen, select Full Installation.
On the Installing Forefront Server Security On an Active/Passive Cluster screen, enter your cluster drive information. Select the cluster drive from the list in the Shared Cluster Volume field and enter the Cluster Folder.
Setup checks to see if you have the correct version of the Windows Update Agent. If you do not have the correct version, at the end of the installation you are directed to the Microsoft Update Web site to do the opt-in manually. If you do have the correct version, Setup then checks if Microsoft Update is enabled. If it is not, the Use Microsoft Update dialog box appears, permitting you to enable it.
On the Quarantine Security Settings screen, select the desired setting.
- Secure Mode causes all messages and attachments delivered from Quarantine to be re-scanned for viruses and filter matches. This is the default.
- Compatibility Mode permits messages and attachments to be delivered from Quarantine without being scanned for filter matches. (Messages and attachments are always scanned for viruses.) Forefront Security for Exchange Server identifies these messages by placing special tag text in the subject line of all messages that are delivered from Quarantine.
On the Engine Updates Required screen, read the warning about engine updates.
To use a proxy server for scanner updates, select Use Proxy Settings and enter the proxy name or IP address and its port on the Proxy Server (optional settings) screen. This ensures that your proxy server is correctly configured from the start. If you are doing a fresh install, you may enter the proxy information. If this is an upgrade, and proxy data is available in the registry, this screen does appear and the existing data is preserved. Any changes to existing proxy information can be made in General Options.

Note

If a username and password are required for the proxy server, they must be entered through General Options once FSE has been installed. This must be done immediately, otherwise engine updates will fail.
On the Choose Destination Location screen, either accept the default destination folder for the product, or click Browse to select a different one.
Default: Program Files\Microsoft Forefront Security\Exchange Server
On the Select Program Folder screen, choose a program folder for Forefront. At this point, Setup checks for running services.
Default program folder: Microsoft Forefront Server Security\Exchange Server
On the Start Copying Files screen, review the data presented to you. If any changes have to be made, use the Back button to navigate to the screen to be changed. Otherwise, click Next to begin the installation. A progress bar indicates that the files are being copied.
On the Recycle CMS screen, read the notice about the need to recycle the Clustered Mailbox Server. You can skip this step and recycle the CMS later (clicking Cancel completes the installation), however, FSE will not be functional until you recycle the CMS.
On the Bringing Clustered Mailbox Servers Online screen, wait until the step has completed, and then click Next.
On the InstallShield Wizard Complete screen, you are advised to view the Readme file (recommended). If you opted to use Microsoft Update and you do not have the correct version of the Windows Update Agent, you are directed to a site to obtain it.
Click Finish to complete the installation.
Verify that the shared folder ForefrontCluster is on the shared drive. The database files (for example, scanjobs.fdb and incidents.fdb) are in this directory
Install FSE on the passive node.

Installing FSE on an SCC passive node