Step 8: Install FIM CM

Installation of the FIM CM consists of the following:

  • Install the FIM CM binaries on FIMCM1

  • Install the FIM CM binaries on DC1

  • Run the FIM CM Configuration Wizard

  • Install the FIM CM Update 1 on FIMCM1

  • Install the FIM CM Update 1 on DC1

Install the FIM CM binaries on FIMCM1

Install the FIM CM binaries on FIMCM1.

To install the FIM CM binaries on FIMCM1

  1. Log on to FIMCM1 as CORP\Administrator.

  2. Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 and double-click FIMSplash.htm. This will bring up the Forefront Identity Manager 2010 splash screen.

  3. On the splash screen, click Install Certificate Management, 64 bit. Click Run. You will see a pop-up that says Do you want to run this software? Click Run. This will take a minute. Then you will see another pop-up asking Do you want to run this software? Click Run. This will start the Forefront Identity Manager Certificate Management Setup Wizard.

  4. On the Welcome page, click Next.

    Configuration Wizard 8

  5. On the End User License Agreement page, read the License Agreement, select I accept the terms in the license agreement, and then click Next.

  6. On the Custom Setup page, click Next.

  7. On the Virtual Web Folder page, click Next.

  8. On the Install Forefront Identity Manager Certificate Management page, click Install.

  9. Once the installation completes, click Finish.

  10. Close the splash screen.

Install the FIM CM binaries on DC1

Install the FIM CM binaries on DC1.

To install the FIM CM binaries on DC1

  1. Log on to DC1 as CORP\Administrator.

  2. Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 and double-click FIMSplash.htm. This will bring up the Forefront Identity Manager 2010 splash screen.

  3. On the splash screen, click Install Certificate Management, 64 bit. Click Run. You will see a pop-up that says Do you want to run this software? Click Run. This will take a minute. Then you will see another pop-up asking Do you want to run this software? Click Run. This will start the Forefront Identity Manager Certificate Management Setup Wizard.

  4. On the Welcome page, click Next.

  5. On the End User License Agreement page, read the License Agreement, select I accept the terms in the license agreement, and then click Next.

  6. On the Custom Setup page, under Click on the icons in the tree below to change the way features will be installed:, click FIM CM Update Service and select This feature will not be available and click Next.

    Warning

    We are only installing the FIM CM CA Files so this should be the only feature that is selected.

    Configuration Wizard 8

  7. On the Install Forefront Identity Manager Certificate Management page, click Install.

  8. Once the installation completes, click Finish.

  9. Close the splash screen.

Run the FIM CM Configuration Wizard

Once the binaries are installed we must run the FIM CM Configuration Wizard to create the FIM CM database and configure the service accounts.

To Run the FIM CM Configuration Wizard

  1. Log on to FIMCM1 as CORP\Administrator.

  2. Click Start and click Certificate Management Config Wizard.

  3. On the Welcome to the Configuration Wizard page, click Next.

  4. On the CA Configuration page, click Next.

    Configuration Wizard

  5. On the Setup the SQL Server Database page, in the box under Name of SQL Server, enter APP1. Click Next.

    Configuration Wizard

  6. On the Database Settings page, leave the default options configured and click Next.

    Configuration Wizard

  7. On the Set up Active Directory page, leave the default setting in place and click Next.

    Configuration Wizard

  8. On the Agents - FIM CM, clear Use the FIM CM default settings and then click Custom Accounts. This will bring up the Agents – FIM CM dialog box.

  9. On the Agents - FIM CM dialog box, on the FIM CM Agent tab, in User name, type corp\FIMCMAgent. In Password and Confirm password, type Pass1word$. Select Use an existing user. Repeat this process for each of the items in the table below.

    Configuration Wizard 1

    FIM CM Accounts

    Agents Tab User name Password Use an existing user

    FIM CM Agent

    corp\FIMCMAgent

    Pass1word$

    Checked

    Key Recovery Agent

    corp\FIMCMKRAgent

    Pass1word$

    Checked

    Authorization Agent

    corp\FIMCMAuthAgent

    Pass1word$

    Checked

    CA Manager Agent

    corp\FIMCMManagerAgent

    Pass1word$

    Checked

    Web Pool Process Worker Agent

    corp\FIMCMWebAgent

    Pass1word$

    Checked

    Enrollment Agent

    corp\FIMCMEnrollAgent

    Pass1word$

    Checked

  10. Once this is complete click OK and click Next.

    Configuration Wizard 1

  11. On Set up server certificates page, under Certificate template to be used for the recovery agent Key Recovery Agent certificate: from the drop-down, select FIMCMKeyRecoveryAgent.

  12. On Set up server certificates page, under Certificate template to be used for the FIM CM Agent certificate: from the drop-down, select FIMCMUser.

  13. On Set up server certificates page, under Certificate template to use for the enrollment agent certificate: from the drop-down, select FIMCMEnrollmentAgent.

    Configuration Wizard 1

  14. Click Next.

  15. On the Set up Email Server, Document Printing page, under Specify the name of the SMTP server you want to use to e-mail registration information, enter 10.0.0.5. This is the IP address of EX1. Click Next.

    Configuration Wizard 1

  16. On the Ready to Configure page, click Configure.

  17. When this completes click Finish.

Install the FIM CM Update 1 on FIMCM1

Install the FIM CM Update 1 binaries on FIMCM1.

To install the FIM CM Update 1 on FIMCM1

  1. Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 Synchronization Service Update (KB978864) and double-click AMD64-all-fimcm_kb978864_d11c069c7099712849e8b21d6f5925dd365c71c3.exe. This will begin the update installation and start the Update Wizard.

  2. On the Welcome page, click Update. This will begin the update.

    Configuration Wizard 8

  3. Once the installation completes, click Finish.

Install the FIM CM Update 1 on DC1

Install the FIM CM Update 1 binaries on DC1.

To install the FIM CM Update 1 on DC1

  1. Log on to DC1 as CORP\Administrator.

  2. Navigate to the directory that contains the binaries for Forefront Identity Manager 2010 Synchronization Service Update (KB978864) and double-click AMD64-all-fimcm_kb978864_d11c069c7099712849e8b21d6f5925dd365c71c3.exe. This will begin the update installation and start the Update Wizard.

  3. On the Welcome page, click Update. This will begin the update.

  4. Once the installation completes, click Finish.