Cluster Continuous Replication (CCR) installation

  • Article

 

Applies to: Forefront Security for Exchange Server

Ensure that the user doing the installation is a domain user with administrative privileges on the system on which FSE is being installed.

You must first install FSE on the active node and then on the passive node. Click Next to continue after filling out a screen, unless otherwise directed.

You cannot perform a remote installation of a CCR cluster. Use a terminal server session or the Forefront Server Security Management Console (FSSMC) instead. FSSMC provides support for remote installations.

Note

As in most installations, Setup updates shared Microsoft files on your computer. If you are requested to restart your computer, you do not have to do that immediately, but it may be necessary for certain FSE features to work correctly.

To install FSE on the active node of a new CCR cluster system

  1. Run the Setup.exe file, which is available on your CD image or from the self-extracting package available at the Microsoft Volume Licensing Download Center.

  2. The initial setup screen is Welcome. Click Next to continue.

  3. Read the license at the License Agreement screen and click Yes to accept it.

  4. On the Customer Information screen, enter User Name and Company Name, if needed.

  5. On the Installation Location screen, select Local Installation.

  6. On the Installation Type screen, select Full Installation.

  7. Setup checks to see if you have the correct version of the Windows Update Agent. If you do not have the correct version, at the end of the installation you are directed to the Microsoft Update Web site to do the opt-in manually. If you do have the correct version, Setup then checks if Microsoft Update is enabled. If it is not, the Use Microsoft Update dialog box appears, permitting you to enable it.

  8. On the Quarantine Security Settings screen, select the desired setting.

    • Secure Mode causes all messages and attachments delivered from Quarantine to be re-scanned for viruses and filter matches. This is the default.

    • Compatibility Mode permits messages and attachments to be delivered from Quarantine without being scanned for filter matches. (Messages and attachments are always scanned for viruses.) Forefront Security for Exchange Server identifies these messages by placing special tag text in the subject line of all messages that are delivered from Quarantine.

  9. On the Engine Updates Required screen, read the warning about engine updates.

  10. To use a proxy server for scanner updates, select Use Proxy Settings and enter the proxy name or IP address and its port on the Proxy Information screen This ensures that your proxy server is correctly configured from the start. If you are doing a fresh install, you may enter the proxy information. If this is an upgrade, and proxy data is available in the registry, this screen does not appear and the existing data is preserved. Any changes to existing proxy information can be made in General Options.

    Note

    If a username and password are required for the proxy server, they must be entered through General Options once FSE has been installed. This must be done immediately, otherwise engine updates will fail.

  11. On the Choose Destination Location screen, either accept the default destination folder for the product, or click Browse to select a different one. FSE must be installed in the same corresponding directory on the active and passive nodes.
    Default: Program Files\Microsoft Forefront Security\Exchange Server

  12. On the Select Program Folder screen, choose a program folder for Forefront. At this point, Setup checks for running services.
    Default program folder: Microsoft Forefront Security for Exchange Server

  13. On the Start Copying Files screen, review the data presented to you. If any changes have to be made, use the Back button to navigate to the screen to be changed. Otherwise, click Next to begin the installation. A progress bar indicates that the files are being copied.

  14. On the Recycle CMS screen, read the notice about the need to recycle the Clustered Mailbox Server, and then click Next to have Setup stop and restart the CMS or Cancel to skip the step for now.

    Note

    The CMS must be recycled before FSE is used for the first time. FSE will not be functional until you recycle the CMS.

  15. On the Clustered Mailbox Servers Offline screen, wait for the clustered servers to be taken offline before clicking Next.

  16. On the Bringing Clustered Mailbox Servers Online screen, wait for the clustered servers to be brought back online before clicking Next.

  17. On the InstallShield Wizard Complete screen, you are advised to view the Readme file (recommended). If you opted to use Microsoft Update and you do not have the correct version of the Windows Update Agent, you are directed to a site to obtain it. Click Finish to complete the installation.

  18. Repeat the same steps to install FSE on the passive node. The CMS should still be running on the active node at this point; do not failover to the passive node.

Note

When the Proxy Information dialog box appears during passive node installation, you can leave the information blank, even if you filled it in for the active node. The cluster replication process overwrites the settings on the passive node with those of the active node.