Test Lab Guide: Installing Forefront Identity Manager 2010

Applies To: Forefront Identity Manager 2010

Authored By: Bill Mathers

A downloadable version of this document is available at Test Lab Guide: Forefront Identity Manger 2010 (https://go.microsoft.com/fwlink/?LinkID=205228).

Microsoft® Forefront® Identity Manager (FIM) 2010 changes the current state of identity management by providing powerful end user self-service capabilities. IT pros are also given more tools to solve day-to-day tasks, such as delegating administration and creating workflows for common identity management tasks. In addition, FIM 2010 is built on a .NET and WS-* based foundation for developers to build more customized and extensible solutions.

Microsoft Forefront Identity Manager 2010 helps IT pros achieve new levels of reliability with greater flexibility, enhanced user experiences, and increased protection for business communications by doing the following:

• Empowering people:

  • With FIM 2010 end-users can easily perform self-service tasks, such as group and distribution list management with self-help tools integrated into a Microsoft SharePoint® based console as well as directly in Microsoft Office Outlook®.

  • FIM 2010 provides IT professionals with the tools they need to manage identities through a SharePoint-based policy and workflow management console.

  • Developers have access to extensibility features through extensive public APIs.

• Delivering agility and efficiency:

  • FIM 2010 integrates an enterprises' heterogeneous infrastructure, including directories, databases, and line-of-business applications.

  • FIM 2010 enables management of heterogeneous strong-authentication systems, such as third-party certificate authorities.

• Increasing security and compliance:

  • FIM 2010 provides management features that enable system auditing and compliance. By integrating the tools IT pros use to manage identities, credentials, and resources, FIM 2010 helps organizations integrate policies across the organization and secure the enterprise.

  • Integrated management tools allow organizations to better enjoy the security benefits of strong authentication.

In This Guide

This guide contains instructions for setting up a test lab based on the Forefront Identity Manager 2010 Test Lab Guide and deploying Forefront Identity Manager 2010 using one new server computer, two preexisting server computers, and one preexisting client computer. The resulting Forefront Identity Manager 2010 test lab demonstrates and verifies installation. Future test lab guides will demonstrate the powerful functionalities of FIM 2010.

Test Lab Overview

In this test lab, Forefront Identity Manager 2010 is deployed with:

• One computer running the FIM Synchronization Service and FIM Portal named FIM1. FIM1 uses the Windows Server® 2008 R2 Enterprise Edition operating system.

• One preexisting server running SQL Server® 2008 Enterprise with Service Pack 2, named APP1.

• One preexisting server running Microsoft Exchange Server 2010 with Service Pack 1, named EX1.

The Forefront Identity Manager test lab uses the following subnet:

• The intranet established by the Base Configuration Test Lab Guide, referred to as the Corpnet subnet (10.0.0.0/24).

Computers on each subnet connect using a hub or switch. See the following figure.

This test lab will guide you through the Forefront Identity Manager 2010 installation process. The purpose of this test lab is to allow for the creation of a basic test lab environment that consists of Forefront Identity Manager 2010. This test lab guide can be used as a building block for additional test lab guides that demonstrate increased functionality or additional features of Forefront Identity Manager 2010.

Hardware and Software Requirements

The following are required components of the test lab:

• The product disc or files for Windows Server 2008 R2 Enterprise Edition.

• The product disc or files for Exchange Server 2010 with Service Pack 1.

• The product disc or files for SQL Server 2008 Enterprise .

• The product disc or files for Microsoft SQL Server 2008 Enterprise Service Pack 2 64-bit.

• The product disc or files for Windows SharePoint Services 3.0 with Service Pack 2.

• The product disc or files for Forefront Identity Manager 2010.

• The files for Forefront Identity Manager 2010 Synchronization Service Update (KB978864).

• The files for Forefront Identity Manager 2010 Service and Portal Update (KB978864).

• The files for Microsoft SQL Server 2008 Feature Pack, April 2009 - Microsoft SQL Server 2008 Native Client.

The following table provides a summary of the Microsoft software that is used in this guide.

Steps for Configuring the Forefront Identity Manager 2010 Test Lab

There are nine steps to follow when setting up the Forefront Identity Manager 2010 test lab based on the Forefront Identity Manager 2010 Test Lab Guide.

• Step 1: Set up the Base Configuration—The Base Configuration is the core of all Test Lab Guide scenarios. The first step is to complete the Base Configuration.

• Step 2: Set up the Exchange Server 2010 with Service Pack 1 Test Lab Guide (TLG)—The second step is to complete the Exchange Server 2010 with Service Pack 1 test lab guide. This provides Active Directory® attributes and e-mail functionality for the FIM Service account.

• Step 3: Set up the SQL Server 2008 Enterprise with Service Pack 2 TLG—The third step is to complete the SQL Server 2008 Enterprise with Service Pack 2 test lab guide. This provides the database server for your FIM installation.

• Step 4: Configure FIM1—The fourth step includes installing the operating system, and then configuring and joining FIM1 to the domain.

• Step 5: Install FIM 2010 Prerequisite Software—The fifth step walks you through installing prerequisite software.

• Step 6: Perform FIM 2010 Prerequisites Tasks—The sixth step includes performing prerequisite tasks.

• Step 7: Install FIM 2010 Synchronization Service and FIM Portal—The seventh step includes performing installation tasks.

• Step 8: Perform FIM 2010 Post-Installation Tasks— The eighth step includes performing post installation tasks

• Step 9: Verify the Installation— The ninth step includes verifying the installation was successful

This guide provides steps for configuring the computers of the Forefront Identity Manager 2010 test lab. The following sections provide details about how to perform these tasks.

Test Lab Guide Specific Information and Instructions

The following section is a list of additional information on configuring the test lab. It also includes items that may be omitted from the test lab guides that this test lab builds upon. This is to allow for quicker deployment.

• The Base Configuration TLG—EDGE1 and INET1 are not required. The steps requiring setup and configuration may be excluded from the setup of the base configuration.

• The Exchange Server 2010 with Service Pack 1 TLG— EX1 is not required but a valid mail attribute is required for the FIMService account. A work around is to populate the mail attribute using ADSIEDIT. Please note that future test lab guides that demonstrate workflow and notification will probably use an Exchange server.

• The SQL Server 2008 with SP 2 TLG—The SQL Server 2008 R2 TLG may be substituted for this TLG. SQL Server 2008 R2 is now fully supported with FIM 2010.

This guide provides steps for configuring the computers of the Forefront Identity Manager 2010 test lab. The following sections provide details about how to perform these tasks.