Step 8: Install FIM CM
Installation of the FIM CM consists of the following:
Install the FIM CM binaries on FIMCM1
Install the FIM CM binaries on DC1
Run the FIM CM Configuration Wizard
Install the FIM CM Update 1 on FIMCM1
Install the FIM CM Update 1 on DC1
Install the FIM CM binaries on FIMCM1
Install the FIM CM binaries on FIMCM1.
To install the FIM CM binaries on FIMCM1
Log on to FIMCM1 as CORP\Administrator.
Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 and double-click FIMSplash.htm. This will bring up the Forefront Identity Manager 2010 splash screen.
On the splash screen, click Install Certificate Management, 64 bit. Click Run. You will see a pop-up that says Do you want to run this software? Click Run. This will take a minute. Then you will see another pop-up asking Do you want to run this software? Click Run. This will start the Forefront Identity Manager Certificate Management Setup Wizard.
On the Welcome page, click Next.
On the End User License Agreement page, read the License Agreement, select I accept the terms in the license agreement, and then click Next.
On the Custom Setup page, click Next.
On the Virtual Web Folder page, click Next.
On the Install Forefront Identity Manager Certificate Management page, click Install.
Once the installation completes, click Finish.
Close the splash screen.
Install the FIM CM binaries on DC1
Install the FIM CM binaries on DC1.
To install the FIM CM binaries on DC1
Log on to DC1 as CORP\Administrator.
Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 and double-click FIMSplash.htm. This will bring up the Forefront Identity Manager 2010 splash screen.
On the splash screen, click Install Certificate Management, 64 bit. Click Run. You will see a pop-up that says Do you want to run this software? Click Run. This will take a minute. Then you will see another pop-up asking Do you want to run this software? Click Run. This will start the Forefront Identity Manager Certificate Management Setup Wizard.
On the Welcome page, click Next.
On the End User License Agreement page, read the License Agreement, select I accept the terms in the license agreement, and then click Next.
On the Custom Setup page, under Click on the icons in the tree below to change the way features will be installed:, click FIM CM Update Service and select This feature will not be available and click Next.
Warning
We are only installing the FIM CM CA Files so this should be the only feature that is selected.
On the Install Forefront Identity Manager Certificate Management page, click Install.
Once the installation completes, click Finish.
Close the splash screen.
Run the FIM CM Configuration Wizard
Once the binaries are installed we must run the FIM CM Configuration Wizard to create the FIM CM database and configure the service accounts.
To Run the FIM CM Configuration Wizard
Log on to FIMCM1 as CORP\Administrator.
Click Start and click Certificate Management Config Wizard.
On the Welcome to the Configuration Wizard page, click Next.
On the CA Configuration page, click Next.
On the Setup the SQL Server Database page, in the box under Name of SQL Server, enter APP1. Click Next.
On the Database Settings page, leave the default options configured and click Next.
On the Set up Active Directory page, leave the default setting in place and click Next.
On the Agents - FIM CM, clear Use the FIM CM default settings and then click Custom Accounts. This will bring up the Agents – FIM CM dialog box.
On the Agents - FIM CM dialog box, on the FIM CM Agent tab, in User name, type corp\FIMCMAgent. In Password and Confirm password, type Pass1word$. Select Use an existing user. Repeat this process for each of the items in the table below.
FIM CM Accounts
Agents Tab User name Password Use an existing user FIM CM Agent
corp\FIMCMAgent
Pass1word$
Checked
Key Recovery Agent
corp\FIMCMKRAgent
Pass1word$
Checked
Authorization Agent
corp\FIMCMAuthAgent
Pass1word$
Checked
CA Manager Agent
corp\FIMCMManagerAgent
Pass1word$
Checked
Web Pool Process Worker Agent
corp\FIMCMWebAgent
Pass1word$
Checked
Enrollment Agent
corp\FIMCMEnrollAgent
Pass1word$
Checked
Once this is complete click OK and click Next.
On Set up server certificates page, under Certificate template to be used for the recovery agent Key Recovery Agent certificate: from the drop-down, select FIMCMKeyRecoveryAgent.
On Set up server certificates page, under Certificate template to be used for the FIM CM Agent certificate: from the drop-down, select FIMCMUser.
On Set up server certificates page, under Certificate template to use for the enrollment agent certificate: from the drop-down, select FIMCMEnrollmentAgent.
Click Next.
On the Set up Email Server, Document Printing page, under Specify the name of the SMTP server you want to use to e-mail registration information, enter 10.0.0.5. This is the IP address of EX1. Click Next.
On the Ready to Configure page, click Configure.
When this completes click Finish.
Install the FIM CM Update 1 on FIMCM1
Install the FIM CM Update 1 binaries on FIMCM1.
To install the FIM CM Update 1 on FIMCM1
Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 Synchronization Service Update (KB978864) and double-click AMD64-all-fimcm_kb978864_d11c069c7099712849e8b21d6f5925dd365c71c3.exe. This will begin the update installation and start the Update Wizard.
On the Welcome page, click Update. This will begin the update.
Once the installation completes, click Finish.
Install the FIM CM Update 1 on DC1
Install the FIM CM Update 1 binaries on DC1.
To install the FIM CM Update 1 on DC1
Log on to DC1 as CORP\Administrator.
Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 Synchronization Service Update (KB978864) and double-click AMD64-all-fimcm_kb978864_d11c069c7099712849e8b21d6f5925dd365c71c3.exe. This will begin the update installation and start the Update Wizard.
On the Welcome page, click Update. This will begin the update.
Once the installation completes, click Finish.