Windows Server 2008 R2 Logo Program - Compliance Documentation (FPSMC)

  • Article

 

Applies To: Microsoft Forefront Protection Server Management Console (FPSMC)

Silent/Unattended Install

The product will support the silent install for the following scenario:

  • Deployment of the FPSMC server in the Standalone role connecting to SQLExpress

To run the silent install, the following must be done:

  • Ensure that the server that the product is being deployed on meets the minimum system requirements. You can find the full list of requirements in the User Guide, in Verifying System Requirements.

  • Ensure that the following pre-requisites are met on the server before starting FPSMC deployment:

    • .NET Framework 3.5 SP1 or later framework

    • Microsoft Chart Controls for .NET 3.5 SP1

    • Latest Windows Update version

    • Internet Information Services (IIS) 7.0

      • IIS-WebServerRole

      • IIS-DefaultDocument

      • IIS-StaticContent

      • IIS-RequestFiltering

      • IIS-WebServerManagementTools

      • IIS-IIS6ManagementCompatibility

      • IIS-Metabase

      • IIS-WMICompatibility

      • IIS-LegacyScripts

      • IIS-ManagementScripting Tools

      • IIS-ManagementService

      • IIS-ManagementConsole

      • IIS-Security

      • IIS-BasicAuthentication

      • IIS-DigestAuthentication

      • IIS-WindowsAuthentication

      • IIS-ISAPIExtensions

      • IIS-ISAPIFilter

      • IIS-NetFxExtensibility

      • IIS-ASPNet

      • NetFx2Server Core

      • NetFx3ServerCore

      • NetFx3

    • SQL Server 2008 R2 Express

  • Launch the FPSMC silent install as follows:

    • Extract the setup file from the FPSMC self-extracting installer:

      • setup.exe /x:<path>

    • Launch the quiet installer

      • Setup.exe /q

The following scenarios are not supported for the silent install scenario:

  • Deployment of the FPSMC Server in the Standalone role connecting to a SQL Enterprise Server

  • Deployment of the FPSMC server in the Primary role

  • Deployment of the FPSMC Server in the Backup role

Installation Custom Actions

The following table displays all of the custom actions executed by Microsoft Installer (MSI) when you install FPSMC.

Custom Action Dll Entry Point Type Description

InstallationHelper

"[WindowsFolder]\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe" /LogToConsole=false /SEMBasePath="[INSTALLDIR]\"

/SEMServicesPath="[INSTALLDIR]\Services\\"

/SEMConsolePath="[INSTALLDIR]\Console\\"

/SEM_SQLSECURITY="[SEM_SQLSECURITY]"

/SEM_SQLSERVER="[SEM_SQLSERVER]"

/SEM_REPORTDB="[SEM_REPORTDB]"

/SEM_SEMDB="[SEM_SEMDB]"

/SEM_SMGRDOM="[SEM_SMGRDOM]"

/SEM_SMGRPASS="[SEM_SMGRPASS]"

/SEM_SMGRUSR="[SEM_SMGRUSR]" /UILEVEL="[UILevel]"

/SEM_SMGRPASS_ISPLAINTEXT="[SEM_SMGRPASS_ISPLAINTEXT]"

/SEM_KEEPEXISTINGDATA="[SEM_KEEPEXISTINGDATA]"

/SEM_SERVERROLE="[SEM_SERVERROLE]"

/SEM_DBVERSION="[SEM_DBVERSION]"

/SEM_PRIVATEKEY="[SEM_PRIVATEKEY]"

/SEM_PRIMARYSQLSERVER="[SEM_PRIMARYSQLSERVER}”

/SEM_BACKUPSQLSERVER="[SEM_BACKUPSQLSERVER]"

/SEM_CERTFILE="[SEM_CERTFILE]"

"[#SemInstall.Microsoft.FFSMC.InstallationHelper.dll]"

34+Deferred+TSAware

Configures the product following file and registry entries installation.

UninstallationHelper

"[WindowsFolder]\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe" /LogToConsole=false /uninstall

"[#SemInstall.Microsoft.FFSMC.InstallationHelper.dll]"

34+Deferred+TSAware

Prepares the product for uninstall prior to file and registry entries removal.

Rollback

"[WindowsFolder]\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe" /LogToConsole=false /action=rollback

"[#SemInstall.Microsoft.FFSMC.InstallationHelper.dll]"

34+Rollback+TSAware

Prepares the product for uninstall after an installation failure and prior to file and registry entries removal.

Engines_ExpandCAB

Engines_ExpandCAB

1+Continue+Deferred

Extracts engine files from the CAB file as part of the installation process.

SchedXmlFile

SchedXmlFile

1

(WiX) Used to add XML entries to the configuration file.

ExecXmlFile

ExecXmlFile

1+Deferred+NoImpersonate

(WiX) Adds the XML file entry to the configuration file during the installation process.

ExecXmlFileRollback

ExecXmlFileRollback

1+Rollback+NoImpersonate

(WiX) Removes XML entries from the configuration file when the product fails to install and is rolled back.

StartMetabaseTransaction

StartMetabaseTransaction

1+Deferred+NoImpersonate

(WiX) Start Transaction to the IIS Metabase.

WriteMetabaseChanges

WriteMetabaseChanges

1+Deferred+NoImpersonate

(WiX) Write Changes to the IIS Metabase.

AddCertificate

AddCertificate

1+Deferred+NoImpersonate

(WiX) Installs a certificate.

DeleteCertificate

DeleteCertificate

1+Deferred+NoImpersonate

(WiX) Uninstalls a certificate

RollbackMetabaseTransaction

RollbackMetabaseTransaction

1+Rollback+NoImpersonate

(WiX) Roll back Transaction to the IIS Metabase.

CommitMetabaseTransaction

CommitMetabaseTransaction

1+Commit+NoImpersonate

(WiX) Commit Transaction to the IIS Metabase.

ConfigureIIs

ConfigureIIs

1

(WiX) Installs the Web Application.

Internal Consistency Evaluators (ICE) Warnings

Code Warning

ICE82

WARNING schedxmlfile has duplicate sequence 4001 in installexecutesequence.

Installation Errors

  • The installer is accessing protected resources requiring Administrator rights, which is expected, and those are triggering AppVerifier 331B errors. If the installing user does not have administrative rights the Setup will fail and this is correct, expected behavior.

Application Data

The following files are left behind after FPSMC is uninstalled. These files are considered application data that should be preserved after an uninstallation.

  • %Program Files%\Microsoft Forefront Protection Server Management\Services\Redistribution\Cache\Engines\metadata\201008090001\engineinfo.cab

  • %Program Files%\Microsoft Forefront Security\Server\Server Management\Services\Redistribution\Cache\Engines\metadata\universalmanifest.cab

  • %Program Files%\Microsoft Forefront Security\Server\Server Management\Services\Redistribution\Cache\Engines\metadata\localenginemapping.cab

  • %Program Files%\Microsoft Forefront Security\Server\Server Management\Services\Redistribution\Cache\Engines\EngineUpdateLocks

  • D:\Program Files\Forefront Protection Server Management\Temp \charts\msc_cntr_0.txt

  • D:\Program Files\Forefront Protection Server Management\Diagnostics\FSSMCInfo.zip

The following registry keys are left behind after FPSMC is uninstalled. These files are considered application data that should be preserved after an uninstallation, to allow an administrator to allow upgrades.

  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Server Security\PrivKey]

  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Window s\CurrentVersion\Installer\Folders]

Required Credentials

This installation program—setup.exe—requires administrator execution level privileges, because it will:

  • Install files outside the per User tree—under C:\Program Files

  • Install registry keys outside the per User tree—under HKLM\Software.

  • Stop and start machine services

  • Log generator – This requires administrator credentials, for accessing log files.