siteminder6 compatibility

18
1 Last Updated: January 11 2013. Changes from the previous version are in green. SITEMINDER 6.0 22,29 PLATFORM SUPPORT 1. Policy Server 11, 28 .......................................................................................................................................................................................................................................................... 2 2. 31-bit/32-bit Web Agents11, 25.................................................................................................................................................................................................................................... 2 3. SAML Affiliate Agent .................................................................................................................................................................................................................................................. 4 4. Web Agent Option Pack 10, 11 ......................................................................................................................................................................................................................................... 5 5. SDK 5, 9 .......................................................................................................................................................................................................................................................................... 5 6. Mainframe Support ....................................................................................................................................................................................................................................................... 6 7. 64-bit Support ............................................................................................................................................................................................................................................................... 7 8. SiteMinder Policy Server 6.0 Directory Support ........................................................................................................................................................................................................ 11 9. SiteMinder 6.0 Components ....................................................................................................................................................................................................................................... 12 10. SiteMinder Policy Server compatibility with Other SiteMinder Components .......................................................................................................................................................... 14 11. RSA ACE Server, Secure ID, iRecorder ................................................................................................................................................................................................................... 14 12. SiteMinder 6.0 Platform Support Japanese Extended Certification .......................................................................................................................................................................... 15 13. SiteMinder Policy Server 6.0 J Components ............................................................................................................................................................................................................ 15 14. SiteMinder 6.0 J Web Agent Support ....................................................................................................................................................................................................................... 16 15. SiteMinder Policy Server 6.0 J Directory Support .................................................................................................................................................................................................... 16 16. SiteMinder 6.0 Simplified Chinese Web Agent Support .......................................................................................................................................................................................... 17 17. Reasonable Commercial Effort Statement ................................................................................................................................................................................................................ 17 18. 2007 Daylight Savings Time Statement .................................................................................................................................................................................................................... 17 19. SiteMinder Support for Arcot Advanced Authentication Products ........................................................................................................................................................................... 17 20. Third Party Products End of Support Statement ................................................................................................................................................................................................ 17

Upload: harshad27

Post on 23-Oct-2015

186 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: Siteminder6 Compatibility

1

Last Updated: January 11 2013. Changes from the previous version are in green.

SITEMINDER 6.022,29 – PLATFORM SUPPORT

1. Policy Server11, 28

.......................................................................................................................................................................................................................................................... 2 2. 31-bit/32-bit Web Agents11, 25 .................................................................................................................................................................................................................................... 2

3. SAML Affiliate Agent .................................................................................................................................................................................................................................................. 4 4. Web Agent Option Pack

10, 11 ......................................................................................................................................................................................................................................... 5

5. SDK5, 9

.......................................................................................................................................................................................................................................................................... 5 6. Mainframe Support ....................................................................................................................................................................................................................................................... 6 7. 64-bit Support ............................................................................................................................................................................................................................................................... 7 8. SiteMinder Policy Server 6.0 Directory Support ........................................................................................................................................................................................................ 11 9. SiteMinder 6.0 Components ....................................................................................................................................................................................................................................... 12 10. SiteMinder Policy Server compatibility with Other SiteMinder Components .......................................................................................................................................................... 14 11. RSA ACE Server, Secure ID, iRecorder ................................................................................................................................................................................................................... 14 12. SiteMinder 6.0 Platform Support Japanese Extended Certification .......................................................................................................................................................................... 15 13. SiteMinder Policy Server 6.0 J Components ............................................................................................................................................................................................................ 15 14. SiteMinder 6.0 J Web Agent Support ....................................................................................................................................................................................................................... 16 15. SiteMinder Policy Server 6.0 J Directory Support .................................................................................................................................................................................................... 16 16. SiteMinder 6.0 Simplified Chinese Web Agent Support .......................................................................................................................................................................................... 17 17. Reasonable Commercial Effort Statement ................................................................................................................................................................................................................ 17 18. 2007 Daylight Savings Time Statement .................................................................................................................................................................................................................... 17 19. SiteMinder Support for Arcot Advanced Authentication Products ........................................................................................................................................................................... 17 20. Third Party Products End of Support Statement ................................................................................................................................................................................................ 17

Page 2: Siteminder6 Compatibility

2

Operating

System1, 4, 14, 17

Win

2003

Win

2003

R2

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC 16

Solaris

10 x86

HPUX

11.11

(PA-

RISC)

HPUX

11.23

(PA-

RISC)

HPUX

11.23

(Itani

um)

HPUX

11.31

(Itani

um)

AIX

5.323

AIX

6.123

Red

Hat

45, 32

Red Hat

51, 5, 32

Red Hat

6

Oracle

Enterpri

se Linux

51, 5, 32

Suse

Linux 9 5, 21

Suse

Linux 10 5,21

Suse

Linux 11 5,21

1. Policy

Server11, 28

6.0 Yes

SP4

CR1

SP5

CR22

Yes

Solaris

10

support

as of SP4

CR4

Zone

support

as of SP4 CR619, 26

SP1 SP5

CR11 SP5 CR21

2. 31-bit/32-bit

Web Agents11,

25

Microsoft IIS

6.012 Yes27,

30

QMR427, 30

7.033

QMR5

CR2130,

33

SunOne

6.0 RP, 13 Yes (Sol

9 only) Yes

6.1(includes

Sun Java

System SPs) RP,

13

QMR2

HF18

QMR119 QMR5

CR219

QMR5

CR4 QMR3

QMR6

CR35

QMR5

CR3

QMR5

CR2

Sun Java

System 7.0

(includes

Updates/SPs) RP

QMR

5CR6

QMR5

CR6

QMR5

CR619

QMR5

CR7

QMR5

CR6

QMR5

CR7

QMR5

CR30

6QMR5

r6 SP5

CR35

QMR5

CR6

QMR5

CR7

ASF Apache

1.3.33 & higher 3, RP

Yes19 QMR4

CR3

QMR3

2.0.54 & higher 3, RP

QMR2

HF1

QMR4

CR620

Yes19 QMR5

CR119

QMR5

CR1

QMR5

CR16

QMR4

CR1

QMR5

CR20

QMR2

HF5

Page 3: Siteminder6 Compatibility

3

Operating

System1, 4, 14, 17

Win

2003

Win

2003

R2

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC 16

Solaris

10 x86

HPUX

11.11

(PA-

RISC)

HPUX

11.23

(PA-

RISC)

HPUX

11.23

(Itani

um)

HPUX

11.31

(Itani

um)

AIX

5.323

AIX

6.123

Red

Hat

45, 32

Red Hat

51, 5, 32

Red Hat

6

Oracle

Enterpri

se Linux

51, 5, 32

Suse

Linux 9 5, 21

Suse

Linux 10 5,21

Suse

Linux 11 5,21

2.2.x3, RP QMR5

CR2

QMR5

CR20

QMR6

CR9

QMR5

CR219

QMR5

CR319

QMR5

CR2

QMR5

CR15

QMR5

CR2

QMR5

CR20

QMR5

CR34

QMR5

CR3

QMR5

CR4

Red Hat

Apache

2.0.46 RP

2.0.5x RP QMR4

CR1

2.2.x RP QMR5

CR21

IBM HTTP

Server

5.3

6.0.x RP QMR

3

QMR4

CR6 QMR319 QMR4

QMR2

HF4

QMR4

CR1

QMR5

CR23

QMR4

CR4

6.1 RP

QMR

4

CR8

QMR4

CR8

QMR5

CR31

QMR4

CR819, 26

QMR4

CR9

QMR4

CR7

QMR5

CR14

QMR4

CR8

QMR5

CR23

QMR5

CR35

QMR5

CR3

QMR5

CR3

7.0 RP QMR6

CR1

QMR6

CR2

QMR5

CR31

QMR5

CR35

QMR5

CR31

QMR5

CR30

QMR5

CR35

SP6 CR7

QMR

6CR1

QMR6

CR2

Domino

6.5.x QMR2

HF1

QMR4

CR9 QMR5

QMR2

HF5

7.0, 7.0.1

QMR

3

CR3

QMR4

CR5

QMR415,

19 QMR4

QMR5

CR5

QMR4

CR6

QMR5

CR11

7.0.2

QMR

5

CR03

QMR5

CR03

QMR5

CR3

Sol 10

zone

support

as of

QMR5

CR8

QMR5

CR04

QMR5

CR5

QMR5

CR03

QMR5

CR03

7.0.3

QMR

5

CR25

QMR5

CR25

QMR5

CR29

QMR5

CR30

8.0.x QMR5

CR11

QMR5

CR11

QMR5

CR11

QMR5

CR17

QMR5

CR13

Page 4: Siteminder6 Compatibility

4

Operating

System1, 4, 14, 17

Win

2003

Win

2003

R2

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC 16

Solaris

10 x86

HPUX

11.11

(PA-

RISC)

HPUX

11.23

(PA-

RISC)

HPUX

11.23

(Itani

um)

HPUX

11.31

(Itani

um)

AIX

5.323

AIX

6.123

Red

Hat

45, 32

Red Hat

51, 5, 32

Red Hat

6

Oracle

Enterpri

se Linux

51, 5, 32

Suse

Linux 9 5, 21

Suse

Linux 10 5,21

Suse

Linux 11 5,21

(Sol 10

only)

8.5 QMR5

CR27

QMR5

CR30

QMR5

CR31

QMR5

CR 32

8.5.1 QMR5

CR35

QMR6

CR4

QMR6

CR1

Oracle HTTP

Server

10.1.x (Apache

1.3.x)

QMR3

CR219

QMR3

CR2

QMR5

CR28

QMR5

CR29

QMR5

CR20

QMR5

CR20

10.1.x (Apache

2.0.x)

QMR5

CR11

QMR4

CR919

QMR5

CR3

QMR4

CR8

QMR5

CR7

QMR4

CR5

QMR4

CR6

QMR5

CR7

QMR5

CR15

11g (Apache

2.2.x)

QMR6

CR3

HP Apache

Server

2.0.5x

Yes QMR5

CR10

3. SAML

Affiliate Agent

IIS 6.0 QMR

3

QMR5

CR6

SunOne 6.0 Yes2

SunOne6.1(incl

udes Sun Java

System SPs) RP,

13

QMR3

Sun Java

System 7.0

QMR

5

CR13

QMR5

CR13

QMR5

CR13

QMR5

CR18

QMR5

CR11

ASF Apache

1.3.33

ASF Apache

2.0.54 & higher

QMR5

CR28

Yes2

QMR5

CR4

QMR4

CR7

QMR5

CR15

ASF Apache

2.2.x

QMR5

CR12

QMR5

CR11

QMR5

CR7

QMR5

CR11

QMR5

CR15

IBM HTTP

Server 6.0.x

IBM HTTP QMR QMR5 QMR5 QMR5

Page 5: Siteminder6 Compatibility

5

Operating

System1, 4, 14, 17

Win

2003

Win

2003

R2

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC 16

Solaris

10 x86

HPUX

11.11

(PA-

RISC)

HPUX

11.23

(PA-

RISC)

HPUX

11.23

(Itani

um)

HPUX

11.31

(Itani

um)

AIX

5.323

AIX

6.123

Red

Hat

45, 32

Red Hat

51, 5, 32

Red Hat

6

Oracle

Enterpri

se Linux

51, 5, 32

Suse

Linux 9 5, 21

Suse

Linux 10 5,21

Suse

Linux 11 5,21

Server 6.1 5

CR8

CR8 CR16 CR8

HP Apache

2.0.5x

QMR5

CR10

4. Web Agent

Option Pack10,

11

ServletExec

ISAPI 5.0

QMR

2 QMR2

ServletExec

NSAPI 5.0

QMR

2 QMR2

QMR27

ServletExec AS

5.0

QMR

2 QMR2

QMR27,

19 QMR2

QMR2

HF3

QMR5

CR3

QMR2

HF5

ServletExec AS

6.0

QMR

6 QMR6

QMR6

WebLogic

Server 9.1, 9.2

QMR

5

CR4

QMR5

CR4

QMR5

CR4

QMR5

CR4

QMR5

CR10

QMR5

CR4

QMR5

CR4

WebLogic 10.0

MP1

QMR5

CR32

WebLogic

10.3(11g)

QMR6

CR3

QMR5

CR35

QMR5

CR35

QMR5

CR35

WebSphere

6.0.2

QMR

4 QMR4

QMR4 QMR4 QMR4 QMR4

QMR4

WebSphere 6.1

QMR

5

CR6

QMR5

CR6

QMR5

CR6

QMR5

CR6

QMR5

CR6

QMR5

CR6

QMR5

CR6

WebSphere7.0 QMR6

CR3

JBoss

Enterprise Web

Server 4.2.x

QMR

4CR5

QMR4

CR5

QMR4

CR5

QMR5

CR16

QMR4

CR5

QMR4

CR5

QMR4

CR5

QMR4

CR5

Tomcat

6.0 – 6.0.15

QMR5

CR35

5. SDK5, 9

V 6.0 Agent

APIs Yes

Yes

SP5

CR16 Yes

SP5

CR5

QMR2

HF3

SP6 CR

2 QMR4 SP5 CR21

QMR2

HF5

QMR5

CR16

V 6.0 Server

APIs Yes

Yes

Sol 10,

6.0

SP1

SP5

CR16 SP5 CR22

Page 6: Siteminder6 Compatibility

6

Operating

System1, 4, 14, 17

Win

2003

Win

2003

R2

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC 16

Solaris

10 x86

HPUX

11.11

(PA-

RISC)

HPUX

11.23

(PA-

RISC)

HPUX

11.23

(Itani

um)

HPUX

11.31

(Itani

um)

AIX

5.323

AIX

6.123

Red

Hat

45, 32

Red Hat

51, 5, 32

Red Hat

6

Oracle

Enterpri

se Linux

51, 5, 32

Suse

Linux 9 5, 21

Suse

Linux 10 5,21

Suse

Linux 11 5,21

SP4 CR4

6. Mainframe Support

Operating

System4

Suse

Linux

921 for

System z

Suse

Linux

1021 for

System z

Red Hat

432 for

System z

Red Hat

432 for

System z

(64-bit)

Red Hat

532 for

System z

(64-bit)

Z/OS 1.9 Z/OS

1.10

Z/OS

1.11

Z/OS

1.12

Z/OS

1.13

31-bit/32-bit

Web

Agents11, 25

ASF Apache

1.3.33 &

higher 3, RP

2.0.54 &

higher 3, RP

QMR5

CR18

2.0.54 &

higher, (64-

bit) 3, RP

SP6

CR2

QMR5

CR24

IBM HTTP

Server

5.3 QMR5

CR4

QMR5

CR25

QMR5

CR25 QMR5

CR25 QMR5

CR25

6.0.x RP QMR4

CR5

QMR5

CR1331

QMR5

CR1431

6.1 RP QMR4

CR7

QMR5

CR16

QMR5

CR1731

QMR5

CR24

QMR5

CR35

7.0 QMR5

CR35

QMR5

CR35

8.0 QM

Web Agent

Option

Pack10, 11

WebSphere

6.0.2

QMR5

CR6

SDK 5, 9

V 6.0 Agent

APIs

QMR4

CR3

QMR5

CR16

QMR6

CR1

Page 7: Siteminder6 Compatibility

7

7. 64-bit Support

Operating

System1,4, 14, 17

Windows

2003,

2003 R2

(64-bit)

Windows

2008 (64-

bit)

Windows

2008 R2

(64-bit)

Solaris

9/10

SPARC

(64-bit)

16

Solaris

10 x86

(64-bit)

HPUX

11.23

(64-bit

PA-

RISC)

HPUX

11.23 (64-

bit

Itanium)

HPUX

11.31

(64-bit

Itanium)

AIX 5.3

(64-bit)

AIX 6.1

(64 bit) Red Hat

432 (64-

bit)

Red Hat

51, 5, 32

(64-bit)

Oracle

Enterprise

Linux

51, 5, 32 (64-

bit)

Suse Linux

10 (64-bit) 5, 21

64-bit Web

Agents

Microsoft IIS

IIS 6.0 (64-bit) QMR5

CR7

IIS 7.0 (64-

bit)33

QMR5

CR24

IIS 7.5 (64-

bit)33

QMR6

CR1 24

SunOne

Sun Java

System 6.1.x

(64-bit)

QMR5

CR9

Sun Java

System 7.0 (64-

bit) (Includes

Updates/SPs)

QMR5

CR13

RP:

QMR5

CR28

ASF Apache

2.0.x (64-bit) RP

QMR5

CR9

QMR5

CR16

QMR5

CR13

QMR5

CR10

QRM5

CR13

2.2.x (64-bit) RP QMR5

CR16

QMR6

CR2

QMR5

CR21

QMR5

CR21

QMR5

CR13

QMR5

CR11

QMR5

CR23

QMR5

CR35

QRM5

CR13

IBM HTTP

Server

6.1 (64-bit) RP QMR5

CR25

QMR5

CR24

QMR5

CR30

7.0 (64-bit) RP QMR6

CR2

QMR5

CR32

Red Hat

Apache

2.0.x (64-bit) RP

QMR5

CR11

2.2.x (64-bit) RP

QMR5

CR23

OEL Apache

Page 8: Siteminder6 Compatibility

8

Operating

System1,4, 14, 17

Windows

2003,

2003 R2

(64-bit)

Windows

2008 (64-

bit)

Windows

2008 R2

(64-bit)

Solaris

9/10

SPARC

(64-bit)

16

Solaris

10 x86

(64-bit)

HPUX

11.23

(64-bit

PA-

RISC)

HPUX

11.23 (64-

bit

Itanium)

HPUX

11.31

(64-bit

Itanium)

AIX 5.3

(64-bit)

AIX 6.1

(64 bit) Red Hat

432 (64-

bit)

Red Hat

51, 5, 32

(64-bit)

Oracle

Enterprise

Linux

51, 5, 32 (64-

bit)

Suse Linux

10 (64-bit) 5, 21

2.2.x (64-bit) RP

QMR5

CR35

Oracle HTTP

Server

10.1.x (Apache

2.0.x)

QMR5

CR17

QMR5

CR18

11g (Apache

2.2.x)

QMR 6

CR3

HP Apache

2.0.5x (64-bit) RP

QMR5

CR16

QMR5

CR18

2.2.x (64-bit) RP

QMR6

CR1

Web Agent

Option Pack10,

11

Servlet Exec

AS 6.0 (64-bit) SP5 CR26

WebLogic 11g

(64 bit)

QMR6

CR3

QMR6

CR3

WebSphere

6.1(64 bit)

SP6 CR5

64-bit SDK

V 6.0 Agent

APIs SP5 CR5

SP5

CR2

SP5

CR26 SP5 CR4 SP5 CR4

SP5

CR17 SP5 CR3

SP5 CR5

SP5

CR24 SP5 CR12

Page 9: Siteminder6 Compatibility

9

Legend: Yes = supported for SiteMinder v6.0 release and later

QMR vX = supported for Agent release 6QMR vX and later (no backward compatibility)

SPX = Supported for Policy Server 6.0 SPX release and later

RP = Reverse Proxy is supported (if this is not listed for a web server that supports reverse proxy, this configuration is not supported with the Web Agent).

Notes: 1. Windows Server Standard/Enterprise/Web Editions supported. For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the

matrix. Red Hat AS, Red Hat ES, Red Hat Enterprise Linux and Red Hat Enterprise Linux Advanced Platform are supported.

2. Supported on Solaris 8 and 9 only.

3. Agent support policy for Apache:

For ASF Apache CA will specify the minimum version supported. Any problems reported will be fixed on the latest version of ASF Apache.

As ASF Apache releases new versions, CA cannot certify the agents against those releases immediately, but will plan to test and update the minimum supported version to the newest ASF

Apache version in the next QMR. Meanwhile, customers may use the most recent web agent release with the newer version of ASF Apache. If problems are discovered, the issues should be

reported to CA Support and CA will address the issues as escalations.

For Suse Linux Enterprise Server and Red Hat AS/ES CA will support the version of Apache bundled with the OS.

4. Hardware requirements - Solaris on SUN SPARC, Solaris on x86 and x64 (Intel and AMD), SUSE Enterprise Linux on x86 and x64 (Intel and AMD), SUSE Enterprise Linux on s390 and s390x

(IBM Mainframes), Red Hat Enterprise Linux on x86 and x64 (Intel and AMD), Red Hat Enterprise Linux on s390 and s390x (IBM Mainframes), HP-UX on PA-RISC 2 and Itanium, AIX on

PowerPC, z/OS on IBM Mainframes. 5. When building, SiteMinder custom auth schemes, or any other custom built components, you must use GCC version 3.2.2.

6. Supported with Domino 6.0.2 CF2; requires IBM hot fixes as listed in documentation

7. See third-party vendor’s support matrix for version(s) of Solaris supported by server and agent. ServletExec 5.0 is not supported on Solaris 10.

8. When Sun Java Web Server is on the same machine as an r6 SP6 Policy Server on Windows, version 6.1 Patch 12 is required in order for the SiteMinder Console to start.

9. Agent APIs support Suse Linux 8.0 starting from 6.0 SP2

10. Any supported web agent/web server combination can front-end a supported application server listed above for the web agent option pack provided that the application server also supports the

web server as a proxy plug-in. The SiteMinder Web Agent Option Pack is agnostic to Application Server clustering.

11. The SiteMinder Policy Server is supported as a 32-bit application running on Solaris 10 Sparc 64-bit and Red Hat 4, 5 64-bit. The Policy Server is not supported on Windows 64-bit. SiteMinder

Web Agents are supported as 32-bit applications running on 32-bit web servers running on 32-bit or 64-bit UNIX and Linux Operating Systems.

Only the following 32-bit web servers are supported on Windows 64-bit:

The 32-bit SiteMinder Web Agent for ASF Apache 2.2 (32-bit) is supported on Windows Server 2003 (64-bit) as of 6QMR5 CR30.

The 32-bit SiteMinder Web Agent for IHS 6.1 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6QMR5 CR31.

The 32-bit SiteMinder Web Agent for Domino 8.5 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6QMR5 CR35.

32-bit Web Agents are not supported with 64-bit Web Servers; you must match the bit level of the Web Agent with the bit level of the web server. The SiteMinder Web Agent Option Pack is a 32-bit

application that can run with a 32-bit Application Server on a 32-bit or 64-bit Operating System with the exception of Windows.

12. IIS 6.0 web agent only supports IIS 6.0 native mode, not in IIS 5 isolation mode.

13. Sun Web Server in Reverse Proxy mode support starts from 6QMR3.

14. For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix.

15. Supported on Solaris 9, 10 only.

16. End-of-Service scheduled for 3/31/2009. SUN’s End-of-Life date for Solaris 8 is scheduled for 3/31/2009.

17. Supported on VMWare ESX Server 2.5x, 3.0.x, 3.5x, 4.x. Web Agents starting with QMR4 are supported on VMware ESX Server 2.5x, 3.0.x, and 3.5x. Performance on VMware ESX Server is

dependent on the implementation and parameters of the virtual machine.

18.

Page 10: Siteminder6 Compatibility

10

19. The SiteMinder Web Agent is supported Solaris 10 sparse-root, whole-root, and global zones; the SiteMinder Web Agent is also supported on Solaris Logical Domains. The SiteMinder Policy

Server is supported on Solaris 10 sparse-root and whole-root zones. The Policy Server is supported on the Solaris 10 global zone, as long as there are no other instances of the PS running in

either sparse- or whole-root zones. The SiteMinder Policy Server is also supported on Solaris Logical Domains.

20. Running multiple instances of the web server is supported.

21. Supported with all Suse Linux service packs. Any problems reported will be fixed on the latest service pack of Suse Linux.

22. Microsoft Virtual Server is supported as long as you are running a supported SiteMinder OS as the guest upon which SiteMinder is to be installed.

23. SiteMinder Components running on AIX LPAR are supported.

24. Web Agent 6QMR6 CR01 64-bit has been certified with IIS7.5 (64-bit) web server on Windows 2008 R2 platform.

Once the Web Agent configuration wizard has been run successfully, it will configure the correct permissions to the DefaultAppPool for the SmHost.conf file and the Web Agent log directory.

For any other application pools configured, the administrator will have to explicitly set permissions on the SmHost.conf file and the Web Agent log directory.

This can be done using the following Microsoft Windows “calcs” commands:

For Smhost.conf: cacls "C:\Program Files\CA\web agent\config\SmHost.conf" /T /E /G "AppPoolName":C

For log directory: cacls "C:\Program Files\CA\webagent\log" /T /E /G "AppPoolName":C

Where “DefaultAppPool” is the name of the app pool identity. This command has to be executed for all the configured app pool identities.

25. ISA Server 2006 is supported as of QMR5 CR11. The ISA Server acts as reverse proxy to the web agent protecting the web server. The Web Agent has been certified to run behind ISA Server

2006. Delegated Authentication is not supported.

26. Solaris 10 (Domains and Logical Domains) supported.

27. Microsoft Exchange Outlook Web Access 2003 and Outlook Web Access 2007 are supported.

28. The CA Single Sign-On authentication scheme (smauthetsso) is supported for Windows and Solaris. HPUX support begins with Policy Server 6.0 SP5 CR27.

29. Unless otherwise stated, all 3rd party and SiteMinder components are 32-bit. 64-bit components are explicitly stated.

30. As of 6QMR5 CR6, SiteMinder can authenticate and authorize users to SharePoint 2003. As of 6QMR5 CR21, SiteMinder can authenticate and authorize users to SharePoint 2007, and any site

built on SharePoint Services 3.0. Support for SharePoint 2007 on IIS 7 on Windows 2008 begins with 6QMR5 CR27. Support for SharePoint 2007 on IIS 7 (64-bit) on Windows 2008 (64-bit) begins

with 6QMR5 CR31.

31. Since the web server is a 31-bit application, the SiteMinder Web Agent certified on the web server is also a 31-bit application.

32. Supported with all Red Hat updates. Any problems reported will be fixed on the latest Red Hat update. Security Enhanced Red Hat Linux is supported, please see vendor’s documentation for setup

instructions to enable third-party processes (such as SiteMinder) to run on the system.

33. The SiteMinder Web Agent is an ISAPI plug-in installed within IIS 7.x. IIS 7.x is supported in classic pipeline mode ONLY; integrated pipeline mode is not supported.

Page 11: Siteminder6 Compatibility

11

8. SiteMinder Policy Server 6.0 Directory Support

DIRECTORY9 VERSION NUMBER POLICY STORE9 SESSION STORE USER STORE PASSWORD SERVICES

SunOne LDAP Directory 5.2 1 YES YES YES

Sun Java System Directory Server EE 6 v6.x SP5 CR6 SP5 CR6 SP5 CR6

7 SP6 SP6 SP6

Novell eDirectory 8.8.x SP4 CR4 SP4 CR4 SP4 CR4

Microsoft Active Directory (AD) 2 Win 2003, 2003 R2 Yes Yes Yes

Win 2008 SP5 CR30 SP5 CR30 SP5 CR30

Microsoft Active Directory in Application Mode (ADAM) 2 Win 2003 (ADAM 1.x) Yes Yes Yes

Microsoft Active Directory Lightweight Directory Services

(LDS) 2

Win 2008 (LDS) SP5 CR31 SP5 CR31 SP5 CR31

Microsoft AD Global Catalog 2 Win 2003 Yes

Microsoft SQL Server 2, 11 SQL 2005 SP4 SP4 SP4 SP4

SQL 2005 - Cluster

Environment SP5 SP5 SP5 SP5

SQL 2008, 2008 R2 SP6 CR1 SP6 CR1 SP6 CR1 SP6 CR1 MySQL 5.x SP6 SP6 SP6 SP6

Oracle Internet Directory 10g R2, 10g R3 SP5 SP5 Yes

11g SP6 CR1 SP6 CR1 SP6 CR1

Oracle RDBMS 10 10g R2 SP4 SP4 SP4 SP4

11g R1 SP6 SP6 SP6 SP6

Oracle RAC 10g R2 SP5 SP5 SP5 SP5

11g R1 SP6 SP6 SP6 SP6

OpenLDAP 2.3.x SP5 SP5 SP5

Domino LDAP 6.5 Yes

7 SP4

8.0 SP5 CR27

IBM Tivoli Directory Server 6.0 SP4 SP4 SP4

6.1 SP5 CR11 SP5 CR11 SP5 CR11

6.2 SP5 CR35 SP5 CR35 SP5 CR35

IBM ISS LDAP Server for z/OS (RACF) 5 V1R9 SP5 CR11 SP5 CR11

IBM Tivoli Directory Server for z/OS (RACF) 5 V1R9 8 SP5 CR11

Critical Path (IDS) 4.2 Yes Yes Yes

4.2.5 SP5 SP5 SP5

Siemens DirX 6.0D00, EE 2.0 Yes Yes Yes

8.0 SP5 CR11 SP5 CR11 SP5 CR11

CA Directory Server 12 SP5 CR15 SP5 CR15 SP5 CR15

12 SP1 SP5 CR24 SP5 CR24 SP5 CR24

12 SP2 SP6 SP6 SP6

12 SP3, SP4, SP5 SP6 SP6 SP6

CA LDAP Server for z/OS (TopSecret) 12 SP5 CR28

CA LDAP Server for z/OS (RACF) 12 SP5 CR30

Page 12: Siteminder6 Compatibility

12

IBM DB2 UDB 9.5 SP6 SP6 SP6 SP6

OpenWave 6.0.1 SP3 CR2 SP3 CR2

Red Hat Directory Server 7.1 SP4 SP4 SP4

8.0, 8.1 SP6 SP6 SP6

RadiantOne Virtual Directory Server (VDS) 4.5 SP4 SP4

Notes: 1. When Sun Directory Server is on the same machine as an r6 SP6 Policy Server on Windows, version 5.2 Patch 6 is required in order for the SiteMinder Console to start.

2. For Microsoft Windows Server 2003 & 2008 and for Microsoft SQL Server, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix.

3.

4.

5. RACF native authentication and SiteMinder Password Services are supported. However, they may not be used together.

6. Includes support for Directory Proxy.

7.

8. The following must be installed on the Tivoli Directory Server: PTF UA37096 for APAR OA22052.

9. For information on SiteMinder Policy Stores multi-master replication mode support, please see the Product Documentation).

10. SiteMinder supports the following Oracle editions: Standard Edition One, Standard Edition, and Enterprise Edition

11. SiteMinder supports the following Microsoft SQL Server Editions: Standard Edition and Enterprise Edition. For Microsoft SQL Server service packs (e.g., SP1, SP2, SP3) are supported in

addition to base release shown in the matrix.

9. SiteMinder 6.0 Components

ONE VIEW

MONITOR

SUPPORTED SERVLET EXEC VERSIONS

Win2k3 Win2k8 Sol 9/10 HP-UX 11i Red Hat 3/4/5

IIS 6.0 SE 5.0 ISAPI

SE 6.0 AS (as of SP5 CR28)

IIS 7.0 SE 6.0 AS (as of SP5 CR28)

Sun Java 6.0/6.1

SE 5.0 AS

SE 6.0 AS (as of SP5 CR25) SE 5.0 AS SE 5.0 AS

Sun Java 7.0 SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25)

ASF Apache 2.0 SE 5.0 AS (as of SP5 CR4) SE 5.0 AS

ASF Apache 2.2 SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25)

ASF Apache 1.3 SE 5.0 AS

HP Apache 2.0 SE 5.0 AS

POLICY SERVER USER

INTERFACE (APPLET)

SUPPORTED VERSIONS

Web Servers Windows: IIS 6.0, IIS7.0 (classic pipeline mode only), ASF Apache 2.2 as of SP5 CR15

Solaris: ASF Apache 2.2, SunOne/Sun Java System 6.0, 6, Sun Java System 7.0 as of SP5

CR24

HPUX: HP Apache 1.3.28, HP Apache 2.0, SunOne/Sun Java System 6.0, 6.1

Red Hat: ASF Apache 2.0.x, SunOne/Sun Java System 6.1, ASF Apache 2.2 and Sun Java

Page 13: Siteminder6 Compatibility

13

System 7.0 as of SP5 CR24. IHS 6.1 as of SP5 CR27

Web Browsers Internet Explorer and Firefox

POLICY SERVER JVM

Java Runtime Environment 1 For SiteMinder r6.0-r6.0 SP4: Sun JRE 1.4.2_07 (32-bit only) and above (1.4.x series only).

For SiteMinder r6.0 SP5: Sun/HP 1.5.0_01 (32-bit only) and above (1.5.x series only).

For SiteMinder r6.0 SP6: Sun/HP 1.6.0_16 (32-bit only) and above (1.6.x series only).

SCRIPTING INTERFACE 2

Operating Systems Windows 2003. Support for Windows 2003 SP1 as of 6.0 SP5

Solaris 8, 9. Support for Solaris 10 as of 6.0 SP5.

HPUX 11.11

Red Hat Enterprise Linux AS 2.1, 3.0. Support for Red Hat AS 4.0 as of 6.0 SP5.

SDK JDK REQUIREMENTS

Web Agent APIs (32-bit) Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01

(32-bit only) and above (1.5.x series only) as of 6QMR5. Sun Java 1.6 as of CR33. HP and

IBM Java 1.6 as of 6.0 SP6.

Policy Server APIs (32-bit) Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01

(32-bit only) and above (1.5.x series only). As of 6QMR5. Sun Java 1.6 as of CR33. HP and

IBM Java 1.6 as of 6.0 SP6.

Web Agent APIs (64-bit) Sun/IBM/HP 1.5.0_10 (64-bit) and above (1.4.x series only). Oracle JRockit R27 as of

CR25. Sun Java 1.6 as of CR33. HP and IBM Java 1.6 as of 6.0 SP6.

Notes: 1. JDK is required (as opposed to JRE) on Policy Server when installing the Policy Server Option Pack. Policy Server Option Pack not supported on HP-UX for use with the Web Agent

Option Pack to enable federation.

2. SiteMinder 6.0 ships with ActiveState Perl 5.6.1 on Windows and Solaris. The Scripting Interface is only supported with this version.

Page 14: Siteminder6 Compatibility

14

10. SiteMinder Policy Server compatibility with Other SiteMinder Components

PRODUCT VERSION

WEB AGENTS 5.x QMR5 and higher

SAML AFFILIATE AGENT 5.x QMR5 and higher

APPLICATION SERVER AGENTS Refer to App Server Agent support matrix

ERP AGENT Refer to ERP agent support matrix

SECURE PROXY SERVER 5.5, 6.0

Note: 1. 4.x Agents with SiteMinder Policy Server 6.0 are supported for Japanese customers only.

11. RSA ACE Server, Secure ID, iRecorder

1. RSA ACE Server: RSA ACE server 5.2, 6.0, 6.1 supported. The Secure ID Authentication scheme is supported on Windows 2003 (using “RSA Authentication Agent 6.1.2 for Microsoft

Windows”), Solaris 9/10, and Red Hat 3 -based Policy Servers. Red Hat 3 supported as of 6.0 SP5 CR14. SiteMinder ships the client library from the “RSA Authentication Agent API 6.1 for C”

sdk for use on Solaris and Red Hat.

RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR29 running on Windows Server 2003 (using “RSA Authentication Agent 6.1.2 for Microsoft Windows”). RSA

Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR30 running on Solaris 10 (using “RSA Authentication Agent API 6.1 for C”). RSA Authentication Manager Server 7.1

is supported with SiteMinder 6 SP5 CR31 running on Red Hat 3 (using “RSA Authentication Agent API 6.1 for C”). RSA Authentication Manager 6.1 & 7.1 is supported with CA SiteMinder 6

SP6 CR2 running on Red Hat 5 (using “RSA Authentication Agent API 6.1 for C”).

2. iRecorder: iRecorder with Oracle 9i is supported starting from Policy Server 6.0 SP4 CR-002.

Page 15: Siteminder6 Compatibility

15

12. SiteMinder 6.0 Platform Support Japanese Extended Certification

13. SiteMinder Policy Server 6.0 J Components

PLATFORM SUPPORTED VERSIONS

POLICY SERVER

Operating Systems Windows 2000 SP4J

Windows 2003J

Windows 2003 SP1J

Solaris 92

Solaris 10 J3

Admin Interface Web Servers IIS 5.0 J on Windows 2000 SP4 J

IIS 6.0 J on Windows 2003J, Windows 2003 SP1J

iPlanet 6.0 J on Solaris 92

Sun Java Web Server 6.1 on Solaris 10J

Internet Explorer 7 on Windows 2003 SP1J

Admin Interface browsers Win2000 SP4J, Win2003J, Win2003 SP1J: IE 5.5J, IE 6.0J; Netscape 6.23

Solaris 92: Netscape 6.23

Java Runtime Environment Sun JRE 1.4.2_7 and above (32-bit only, 1.4.x series only)

ONE VIEW MONITOR

Operating Systems Win2000 SP4 J

Win2003 J

Solaris 92 ,Solaris 102

Web Servers IIS 5.0 J on Windows 2000 SP4 J

IIS 6.0 J on Windows 2003 J

iPlanet 6.0 J on Solaris 92

Servlet Engines Servlet Exec 4.2

ISAPI 4.2 for Windows/IIS

AS 4.2 for UNIX/SunOne

Java SDK Sun JDK 1.4.2_7 and above (32-bit only, 1.4.x series only)

SCRIPTING INTERFACE 1

Operating Systems Win2000 SP4 J

Win2003 J, Win2003 R2 SP2 J

Solaris 92 ,Solaris 102

Notes: 1. SiteMinder 6.0 J ships with ActiveState Perl 5.6.1 on Windows and Solaris. The Scripting Interface is only supported with this version.

2. Japanese locale settings are supported on Solaris 9 & 10.

3. Supported as of 6.0 SP4.

Page 16: Siteminder6 Compatibility

16

14. SiteMinder 6.0 J Web Agent Support

Windows 2000 SP4 J Windows 2003 Windows 2003

SP1 J

Solaris 9 Solaris 10 J

Web Agents1

MS IIS 5.0 J Yes

MS IIS 6.0 J Yes QMR4 CR7

Apache 1.3.28 Yes

SunONE 6.0 J Yes Yes

Sun Java System 6.1

SP4 J & higher QMR5

Notes: 1. As of 6QMR5 CR14 SiteMinder FCC Password Services has been localized into Japanese.

15. SiteMinder Policy Server 6.0 J Directory Support

DIRECTORY VERSION

NUMBER

USER

STORE

POLICY

STORE

PASSWORD

SERVICES

SunOne LDAP Directory V5.1 J Yes Yes Yes

Novell eDirectory V8.72 Yes Yes Yes

Microsoft Active Directory (AD) Win 2K J,

Win2003 J,

Win2003

SP1J

Yes Yes Yes

Microsoft SQL Server 1 2000 J Yes Yes Yes

Oracle RDBMS V9i J Yes Yes Yes

Notes:

1. Supported only with Windows Policy Servers

2. Japanese locale settings are supported with eDir V8.7

Page 17: Siteminder6 Compatibility

17

16. SiteMinder 6.0 Simplified Chinese Web Agent Support

Windows 2003

SP2

Solaris

9/10

Web Agents1

MS IIS 6.0 QMR5 CR14

Sun Java System 7.0

(includes

Updates/SPs)

QMR5

CR14

Notes:

1. As of 6QMR5 CR14 SiteMinder FCC Password Services has been localized into Simplified Chinese.

17. Reasonable Commercial Effort Statement

CA Technical Support will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests that involve the use of currently supported versions of CA SiteMinder on or

with "unsupported" platforms as follows:

CA Technical Support will accept support incidents (support requests) involving a software platform or a combination of software platforms that is not officially supported per the then-

current CA published platform support matrices. CA will troubleshoot the issue up to the point that CA has reason to believe that the problem is related to the use of software that is not

specified in a then-current platform supported matrix. At such point, CA shall require that the customer reproduce the problem on a fully supported combination of platforms before CA

proceeds in troubleshooting the incident.

18. 2007 Daylight Savings Time Statement

For SiteMinder Option Pack for Policy Server, SiteMinder Option Pack for Web Agent, SiteMinder Federation Security Services, and SiteMinder SAML Affiliate Agent: Depends on the JRE/JDK for

DST compliance. It is not necessary to upgrade your JRE/JDK to the latest version in order to make it DST compliant. Sun has provided a tool, called the tzupdater, available here

http://java.sun.com/developer/technicalArticles/Intl/tzupdatertool.html that will modify a single data file and make your existing JRE/JDK DST compliant without requiring a version upgrade.

19. SiteMinder Support for Arcot Advanced Authentication Products

Support for Arcot's WebFort Authentication Adapter 1.0 for SiteMinder begins with SiteMinder 6.0 SP5.

Support for SiteMinder 6.0 SP6 beginning in CR1:

Arcot : Adapter 1.0 with Webfort version 5.4

Arcot: Adapter 2.1.6 with Webfort version 6.0.1.1

SiteMinder 6.0 SP6 CR3 and later are supported with Arcot WebFort Authentication Adapter 2.2.1 and WebFort 6.2

SiteMinder 6.0 SP6 CR3 and later are supported with Arcot Adapter 2.2.1 with RiskFort version 2.2.6

SiteMinder 6.0 SP6 CR3 and later are supported with Arcot A-OK Console version 2.10 and Adapter 1.2.1

20. Third Party Products End of Support Statement

When a third party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third party product or any SiteMinder components that interoperate with

the third party product. Third party products under extended vendor support are not supported by CA.

Examples of third party products are: web server, application server, operating system, directory, database, etc.

Page 18: Siteminder6 Compatibility

18