siteminder 12.5 platform support matrix - ca technologies · pdf filesiteminder 12.57, 11...
TRANSCRIPT
SiteMinder 12.57, 11
Platform Support Matrix Last Updated September 05th, 2014. Changes are noted in Green.
Table of Contents 1. POLICY SERVER ................................................................................................................................................................... 2
2. WEB AGENTS (32 BIT).......................................................................................................................................................... 2 3. 32 BIT SDK (AGENT AND POLICY SERVER) .............................................................................................................................. 3
4. WEB AGENT OPTION PACK (32 BIT) ....................................................................................................................................... 4 5. 64-BIT WEB AGENT AND SDK ................................................................................................................................................ 5
6. WEB AGENT OPTION PACK (64 BIT) ....................................................................................................................................... 7
7. MAINFRAME SUPPORT (WEB AGENT AND SDK) ........................................................................................................................ 8 8. POLICY SERVER DIRECTORY SUPPORT .................................................................................................................................. 11
9. ONE VIEW MONITOR .......................................................................................................................................................... 12 10. FSS ADMINISTRATIVE UI ................................................................................................................................................. 13 11. JVM REQUIREMENTS ....................................................................................................................................................... 13 12. ADMINISTRATIVE UI ....................................................................................................................................................... 14 13. REPORT SERVER ............................................................................................................................................................. 15 14. POLICY SERVER COMPATIBILITY WITH AGENTS .................................................................................................................. 15 15. CA IDENTITY MANAGER ................................................................................................................................................... 16 16. CA DATAMINDER CLASSIFICATION.................................................................................................................................... 16 17. ADVANCED PASSWORD SERVICES (APS) ........................................................................................................................... 16 18. SUPPORT FOR ARCOT ADVANCED AUTHENTICATION PRODUCTS ........................................................................................... 17 19. RSA ACE SERVER AND AUTHENTICATION MANAGER ............................................................................................................ 17 20. IPV6 SUPPORT STATEMENT .............................................................................................................................................. 17 21. VIRTUALIZED ENVIRONMENT SUPPORT ............................................................................................................................. 17 22. REASONABLE COMMERCIAL EFFORT STATEMENT ................................................................................................................ 17 23. THIRD PARTY PRODUCTS END OF SUPPORT STATEMENT ...................................................................................................... 19
Page 2 of19
1. POLICY SERVER
2. WEB AGENTS (32 BIT)
Operating System 1,3
Windows 2008
Windows 2008 R2
Solaris
10 (SPARC)
Solaris 10 x86
Solaris 11
HP UX 11.23 (IA64)
HP UX 11.31 (IA64)
AIX 6.1
AIX 7.1
Red Hat
5 13, 14
Red Hat
613,14
Web Agents4
ASF ApacheRP
2.0.54 & higher 2 Yes Yes Yes Yes
Yes
Yes Yes
2.2.x 2 Yes Yes Yes Yes
Yes Yes 12.5 CR4
Yes Yes
2.4 12.5
CR4
12.5
CR4
12.5
CR4
12.5
CR4 12.5
CR4
12.5
CR4
HP Apache Server
2.0.5x Yes
IBM Domino
8.0.x
Yes
Yes 12.5 CR4
8.5.x Yes
Yes
Yes
Yes
IBM HTTP ServerRP
7.0 Yes Yes Yes
Yes
Yes Yes
8.0 Yes
12.5CR3 12.5CR3
8.5 12.5
CR4 12.5 CR3
12.5
CR3 12.5CR3
Microsoft IIS
7.0 Yes
Operating System 1,3
Win 2008
Win 2008R2
Solaris 10
(SPARC)
Red Hat5 13,14 Red Hat6 13,14
Policy Server4, 10
12.5 Yes Yes Yes Yes Yes
Page 3 of19
Operating System 1,3
Windows 2008
Windows 2008 R2
Solaris
10 (SPARC)
Solaris 10 x86
Solaris 11
HP UX 11.23 (IA64)
HP UX 11.31 (IA64)
AIX 6.1
AIX 7.1
Red Hat
5 13, 14
Red Hat
613,14
Oracle HTTP Server
10.1.x (Apache 2.0.x) Yes Yes Yes
11g (Apache 2.2.x) 12.5 CR4
12.5
CR3
Oracle iPlanet (formerly
SunOne/Sun Java System)RP
6.1(includes Service Packs)
Yes Yes
7.0 (includes Updates/SPs)
Yes Yes Yes Yes 12.5 CR2
Yes
7.0.16 Yes
Red Hat ApacheRP
2.2.x
Yes Yes
3. 32 BIT SDK (AGENT AND POLICY SERVER)
Operating System 1,3
Win 2008
Win 2008 R2 Solaris 10 (SPARC)
Solaris 10 x86
HPUX 11.23 (IA64)
AIX 6.1
Red Hat
5 13,14
Red Hat
6 13,14
SDK
Agent APIs Yes Yes Yes Yes Yes Yes Yes
Server APIs Yes Yes Yes Yes Yes
Page 4 of19
4. WEB AGENT OPTION PACK (32 BIT)
Web Agent Option Pack 4, 7, 12 Win 2008
Win 2008R2 Solaris 10 (SPARC)
AIX 7.1 Red Hat 5 13,14 Red Hat 6 13,14
ASF Tomcat 7.0 Yes Yes Yes Yes
IBM WebSphere 7.0 Yes Yes Yes
IBM WebSphere 8.0 Yes
IBM WebSphere 8.5 12.5 CR3 12.5 CR3 12.5CR3
New Atlanta ServletExec 6.0 Yes Yes Yes Yes Yes
Oracle WebLogic Server 11g (10.3) Yes Yes Yes Yes
Oracle WebLogic Server 11g R1 Yes Yes Yes
Yes
Red Hat JBoss Enterprise Web
Server 5.1.2
Yes Yes Yes
Note:
The version of the Web Agent Option Pack no longer must match the Policy Server version to the specific CR number.
Specifically,with the base SiteMinder 12.5 release there is backward compatibility between SiteMinder 12.5 policy server and earlier versions of the Web Agent Option Pack back to SiteMinder r12 SP3 CR9.
Additionally, as long as the Web Agent Option Pack is numbered with the same Service Pack number then the WAOP can have a later CR than the SiteMinder Policy Server (examples, a 12.5 CRx WAOP is supported with the base SiteMinder 12.5 Policy Server, a 12.5
SP1 CRx WAOP is supported with the SiteMinder 12.5 SP1 Policy Server).
If the Web Agent and Web Agent Option Pack are installed on the same machine, they must also be the same version, including the Service Pack and CR version.
Page 5 of19
5. 64-BIT WEB AGENT AND SDK
Operating System1,4
Windows
2008 (64-bit)
Windows
2008 R2 (64-bit)
Windows
2012 (64-bit)
Solaris
10
SPARC (64-bit)
Solaris
10 x86 (64-bit)
Solaris11
(64-bit)
HPUX
11.23
(64-bit IA64)
HPUX
11.31
(64-bit IA64)
AIX
6.1
(64-bit)
AIX 7.1
(64-bit)
Red Hat 5
(64-bit) 13,14
Red Hat
6(64-bit) 13,14
Web Agents
ASF Apache RP
2.0.54 and higher
(64-bit)
Yes
Yes Yes
Yes Yes
2.2.x (64-bit)
Yes
Yes Yes 12.5 CR4
12.5 CR4
Yes Yes
2.4 (64-bit) 12.5
CR4 12.5 CR4
12.5 CR4
12.5 CR4 12.5 CR4
12.5 CR4
JBoss Enterprise Web Server 1.0
ASF Apache 2.2.x
(64-bit)
Yes
Jboss Enterprise Web Server 2.0
12.5 CR3
HP Apache RP
2.0.5x (64-bit) Yes Yes
2.2.x (64-bit) Yes
IBM Domino
8.5.2 (64-bit) Yes
9.0 (64-bit) 12.5 CR04 12.5
CR04
IBM HTTP RP Server
8.0 (64-bit) Yes Yes Yes 12.5CR3 Yes
8.5 (64-bit)
Yes
12.5 CR4 12.5 CR4 12.5 CR3
Microsoft IIS
IIS 7 (64-bit) Yes
IIS 7.5 (64-bit) Yes
IIS 8.0 (64-bit)1 12.5 CR3
Oracle HTTP
Server
10.1.x (Apache 2.0.x)
Yes
11g (Apache 2.2.x) 12.5 12.5 12.4 CR4 Yes Yes Yes 12.5
Page 6 of19
Operating System1,4
Windows
2008 (64-bit)
Windows
2008 R2 (64-bit)
Windows
2012 (64-bit)
Solaris
10
SPARC (64-bit)
Solaris
10 x86 (64-bit)
Solaris11
(64-bit)
HPUX
11.23
(64-bit IA64)
HPUX
11.31
(64-bit IA64)
AIX
6.1
(64-bit)
AIX 7.1
(64-bit)
Red Hat 5
(64-bit) 13,14
Red Hat
6(64-bit) 13,14
64 bit CR4 CR4 CR4
Oracle iPlanet
(previously
SunOne) RP
Sun Java System 6.1.x (64-bit)
Yes
Sun Java System 7.0 (64-bit)
(Includes Updates/SPs)
Yes
12.5 CR2
Yes Yes
Red Hat Apache
RP
2.2.x (64-bit) Yes yes
SDK14
Agent APIs Yes Yes Yes Yes Yes Yes Yes Yes
Note:
1. IIS 8.0 IS CURRENTLY SUPPORTED AS A “NIN – NEED IT NOW” KIT. PLEASE OPEN A TICKET WITH CA SUPPORT SO THEY MAY UPLOAD YOUR KIT TO THE CASE.
Page 7 of19
6. WEB AGENT OPTION PACK (64 BIT)
Web Agent Option Pack 4, 7, 12 Win 2008
Win 2008
R2
Solaris 10 (SPARC)
HPUX 11.31 (IA64)
AIX 6.1 AIX 7.1 Red Hat 5
Red Hat 6
ASF Tomcat 6.0 Yes Yes Yes
ASF Tomcat 7.0 Yes Yes
IBM WebSphere 7.0 Yes Yes Yes Yes Yes Yes
IBM WebSphere 8.0 Yes Yes Yes Yes Yes
IBM WebSphere 8.5 12.5 CR3 12.5 CR3 12.5 CR3
New Atlanta Servlet Exec 6 Yes
Oracle WebLogic Server 11g R1 Yes Yes Yes Yes Yes
Red Hat JBoss Enterprise Web
Server 5.1.2 Yes Yes Yes
Yes Yes
Fujitsu Interstage Application
Server v9.2.0_011 (64-bit) Yes
Note: The version of the Web Agent Option Pack no longer must match the Policy Server version to the specific CR number.
Specifically,with the base SiteMinder 12.5 release there is backward compatibility between SiteMinder 12.5 policy server and earlier
versions of the Web Agent Option Pack back to SiteMinder r12 SP3 CR9. Additionally, as long as the Web Agent Option Pack is numbered with the same Service Pack number then the WAOP can have a later
CR than the SiteMinder Policy Server (examples, a 12.5 CRx WAOP is supported with the base SiteMinder 12.5 Policy Server, a 12.5 SP1 CRx WAOP is supported with the SiteMinder 12.5 SP1 Policy Server).
If the Web Agent and Web Agent Option Pack are installed on the same machine, they must also be the same version, including the Service Pack and CR version
Page 8 of19
7. MAINFRAME SUPPORT (WEB AGENT AND SDK)
Operating System4
Suse Linux 96
for System z
Suse Linux
106 for System z
Suse Linux
(64 bit) 10 for System z
Red Hat Linux
413 for System z
Red Hat Linux
513 for System z
Red Hat Linux
(64-bit) 513 for System z
Red Hat
Linux (64-
bit) 6 for System z
Z/OS 1.13 Z/OS 2.1
31-bit/32-bit Web
Agents4
ASF Apache RP
2.0.54 & higher 3, RP Yes Yes Yes
2.2 & higher3, RP Yes Yes Yes
IBM HTTP
Server RP
7.0 Yes Yes Yes 12.5 CR03
64-bit Web
Agents4
ASF Apache RP
2.2 & higher(64-bit)3, RP
Yes
IBM HTTP
Server RP
7.0 Yes
8.0 12.5 CR04
8.5 12.5 CR04
Web Agent Option
Pack
ASF Tomcat
6.0 (64-bit) Yes
7.0 (64 bit) Yes Yes
IBM WebSphere
7.0 (31-bit) Yes Yes Yes
7.0 (64 bit) Yes Yes
8.5 (64-bit) 12.5 CR04
SDK6, 14
V 12.5 Agent APIs Yes Yes
Legend for tables 1-7:
Yes = supported for SiteMinder v12.5 release and later RP = Reverse Proxy is supported (if this is not listed for a web server that supports reverse proxy, this configuration is not supported with
the Web Agent).
Page 9 of19
Notes:
1. Windows Server Standard/Enterprise/Web Editions supported. For Microsoft Windows Server 2008& 2008 R2, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix. Red Hat AS, Red Hat ES, Red Hat Enterprise Linux and Red Hat
Enterprise Linux Advanced Platform are supported. 2. Agent support policy for Open Source (ASF) Apache:
For Apache 2.0.x, Apache 2.2 CA will specify the minimum version supported. Any problems reported will be fixed on the latest version of Apache.
As Apache releases new versions, CA cannot certify the agents against those releases immediately, but will plan to test and update the minimum supported version to the newest Apache version in a following release. Meanwhile, customers may use the most recent web
agent release with the newer version of Apache. If problems are discovered, the issues should be reported to CA Support and CA will
address the issues as escalations. Covalent web servers will not be specifically certified. However, Covalent uses underlying ASF Apache, and claims that as long as the
underlying ASF Apache version is certified, the corresponding Covalent version of Apache should work. Any issues found using web agents with Covalent Apache will be fixed only when they can be reproduced using ASF Apache agents.
3. Hardware requirements: Solaris on SUN SPARC, Solaris on x86 and x64 (Intel and AMD)
Red Hat Enterprise Linux on x86 and x64 (Intel and AMD) Red Hat Enterprise Linux on s390 and s390x (IBM Mainframes)
HP-UX on Itanium
AIX on PowerPC z/OS on IBM Mainframes
4. 32-bit/64-bit Support: The SiteMinder Policy Server is supported as a 32-bit application that can run on the following 64-bit Operating Systems: Solaris 10
Sparc 64-bit and Red Hat 5, 6 64-bit. SiteMinder Web Agents are supported as 32-bit applications running on 32-bit web servers running on 32-bit or 64-bit Unix and Linux
Operating Systems. The 32-bit SiteMinder Web Agent for Domino 8.5 (32-bit) is supported on Windows Server 2008 (64-bit).
The 32-bit SiteMinder Web Agent for Domino 8.x (64-bit) is supported on Windows Server 2008 R2 (64-bit).
The 32-bit SiteMinder Web Agent for Apache 2.0 (32-bit) is supported on Windows Server 2008 R2 (64-bit). The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on Windows Server 2008 R2 (64-bit).
32-bit Web Agents are not supported with 64-bit Web Servers; you must match the bit level of the Web Agent with the bit level of the web server.
The SiteMinder Web Agent Option Pack is a 32-bit application that can run with a 32-bit Application Server on a 32-bit or 64-bit Unix and Linux Operating Systems.
The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on Red Hat 6 (64-bit). The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on AIX 7.1 (64-bit).
Both 32-bit & 64bit Web Agents cannot be installed on the same 64-bit Operating System.
5. Running multiple instances of the web server is supported. 6. Microsoft Virtual Server is supported as long as you are running a supported SiteMinder OS as the guest upon which SiteMinder is to be
installed. 7. Browser support: SiteMinder supports any browser that supports HTTP 1.x requests, HTTP cookies, and where appropriate SSL/TLS.
8. Microsoft Exchange Outlook Web Access 2007 is supported.
Page 10 of19
9. The CA Single Sign-On authentication scheme (smauthetsso) is supported for Windows, Solaris (SPARC), and Red Hat Policy Servers.
10. Unless otherwise stated, all 3rd party and SiteMinder components are 32-bit. 64-bit components are explicitly stated. 11. Any supported Web Agent/web server combination can front-end a supported application server listed above for the Web Agent Option
Pack, provided that the application server also supports the web server as a proxy plug-in. The Web Agent Option Pack support includes application server clustering.Please see third-party vendor’s support matrix for operating system support.
12. Supported with all Red Hat updates. Any problems reported will be fixed on the latest Red Hat update. Security Enhanced Red Hat Linux is supported, please see vendor’s documentation for setup instructions to enable third-party processes (such as SiteMinder) to run on the
system. 13. When building SiteMinder custom auth schemes, or any other custom built components, you must use GCC version 3.2.2.
14. Web Agent Option Packs that run on WebSphere and Weblogic support the JDK’s that are native to those application servers. For all other
applications servers supported we support the Sun/Oracle Java version 1.6.16 or later 1.6.xx version.
Page 11 of19
8. POLICY SERVER DIRECTORY SUPPORT
DIRECTORY2 VERSIONNUMBER POLICY
STORE
SESSION
STORE
USER
STORE
PASSWORD
SERVICES
ADMIN UI
EXTERNAL AUTH/STORE
AUDIT STORE
CA Directory Server 12 SPx Yes
Requires SP7
or later Yes Yes Yes
CA LDAP Server for z/OS
(RACF)
15 Yes
CA LDAP Server for Z/OS (ACF-2)
15 Yes
CA LDAP Server for Z/OS (Top Secret)
15 Yes
IBM Domino LDAP 8 Yes Yes Yes
8.5 Yes Yes Yes
IBM Tivoli Directory Server 6.1 Yes Yes Yes Yes
6.2 Yes Yes Yes Yes
6.3 Yes Yes Yes Yes
IBM DB2 UDB 9.5 Yes Yes Yes Yes Yes
10.1 Yes Yes Yes Yes
10.5 Yes Yes Yes Yes Yes
Win 2003 Yes Yes Yes Yes
Microsoft Active Directory (AD) 3
Win 2008 Yes Yes Yes Yes
Win 2008 R2 Yes Yes Yes Yes
Win 2012 Yes Yes Yes Yes
Microsoft Active Directory
Lightweight Directory Services (LDS) 3
Win 2008 (LDS) Yes Yes Yes Yes
Wind 2008 R2 (LDS) Yes Yes Yes Yes
Microsoft Active Directory in Application Mode (ADAM)
Win 2003 Yes Yes Yes Yes
Microsoft AD Global Catalog 3 Win 2008 Yes Yes
Microsoft SQL Server1, 3 SQL 2005, including cluster
Yes Yes Yes Yes Yes Yes
SQL 2008, including cluster
Yes Yes Yes Yes Yes Yes
SQL 2008 R2, including cluster
Yes Yes Yes Yes Yes Yes
SQL Server 2012 Yes Yes Yes Yes Yes
Novell eDirectory 8.8.x Yes Yes Yes Yes
OpenLDAP 2.3.x, 2.4 Yes Yes Yes Yes
Oracle Directory Server
Enterprise Edition (previously known as Sun
Java System Directory
11g, 11g R1, 11g R1 SP1
Yes Yes Yes Yes
Page 12 of19
Server EE)
Oracle Internet Directory 10g R3 Yes Yes Yes Yes
11g R1 Yes Yes Yes Yes
Oracle MySQLEnterprise Server
5.1 and greater Yes Yes Yes Yes
Yes
Oracle RDBMS 10g R2 Yes Yes Yes Yes Yes Yes
11g, 11g R2 Yes Yes Yes Yes Yes Yes
Oracle RAC 10g R2 Yes Yes Yes Yes Yes
11g, 11g R2 Yes Yes Yes Yes Yes Yes
Red Hat Directory Server 8.1 Yes Yes Yes Yes
8.2 Yes Yes Yes Yes
Siemens DirX 8.0 Yes Yes Yes
Sun Java System Directory Server EE
v6.1 and greater Yes Yes Yes Yes
7.x Yes Yes Yes Yes
Notes:
1. Supported only on Windows 2. For information on SiteMinder Policy Stores multi-master replication mode support, please see the Product Documentation.
3. For Microsoft Windows Server and for Microsoft SQL Server, service packs (e.g., SP1, SP2) are supported in addition to the base releases
shown in the matrix. For SQL Server the following editions are supported: Standard Edition One, Standard Edition, and Enterprise Edition.
9. ONE VIEW MONITOR
ONE VIEW
MONITOR Win2008 Win 2008 R2
Solaris 10 (SPARC)
Red Hat 5/6
ASF Apache 2.0
SE 6.0 AS SE 6.0 AS
ASF Apache 2.2
SE 6.0 AS SE 6.0 AS
Microsoft IIS
7.0
SE 6.0 AS
Microsoft IIS 7.5
SE 6.0 AS
Oracle iPlanet 6.1
SE 6.0 AS SE 6.0 AS
Oracle iPlanet Java 7.0
SE 6.0 AS SE 6.0 AS
Page 13 of19
10. FSS ADMINISTRATIVE UI
FSS Administrative UI
(Applet)
SUPPORTED VERSIONS
Web Servers Red Hat: ASF Apache 2.0.x, 2.2.x, iPlanet (formerly Sun Java System) 7.0 Solaris: ASF Apache 2.2, Oracle iPlanet (formerly Sun Java System)
6.1(latest SP), 7.0
Windows: IIS7.0 (classic pipeline mode only), IIS 7.5 (classic pipeline mode only), ASF Apache 2.2
Web Browsers Internet Explorer and Firefox
11. JVM REQUIREMENTS
Policy server JVM
Java Runtime Environment 1 Sun 1.6.0_30 (32-bit only) and above (1.6.x series only).
Scripting Interface 2
Operating Systems Windows 2008 and 2008 R2
Solaris 10 (SPARC)
Red Hat Enterprise Linux, 5.0, 6.0
SDK JDK REQUIREMENTS
Web Agent APIs (32-bit) Sun 1.6.0_30 and IBM/HP Java 1.6
Policy Server APIs (32-bit) Sun 1.6.0_30
Web Agent APIs (64-bit) Sun 1.6.0_30 and IBM/HP Java 1.6
Notes: 1. JDK is required (as opposed to JRE) on Policy Server to support features found in the Policy Server Option Pack, which is now installed with Policy
Server automatically.
2. SiteMinder r12.5 ship with ActiveState Perl 5.8 on Windows and Solaris. The Scripting Interface is only supported with this version.
Page 14 of19
12. ADMINISTRATIVE UI
APPLICATION SERVER VERSION/OPERATING SYSTEM
Admin UI with embedded application server (recommended
approach)
Windows 2008 (32 and 64 bit), Windows 2008 R2 Solaris 10 (32-bit and 64-bit) (SPARC)
Red Hat 5 (32-bit and 64-bit) and Red Hat 6 (32 and 64 bit)
IBM WebSphere 64-bit where available otherwise 32-bit
r7.0.x : Windows 2008 (32-bit and 64-bit1), Windows 2008 R21 (64-bit), Solaris 10 (SPARC) (32-bit and 64-bit), Red Hat 5, 6 (32-bit and 64-bit)
Oracle WebLogic 64-bit where
available otherwise 32-bit
r11g R1: Windows 2008 (32-bit and 64-bit), Windows 2008 R2 (64-bit), Solaris10 (SPARC) (32-bit and 64-bit), Red Hat 5, 6 (32-bit and 64-bit)
Red Hat JBoss Enterprise Web
Server
r5.1.2on Solaris 10 (SPARC), Red Hat 5, 6, Windows 2008 & 2008 R2
Notes: 1. For Windows 2008 64 bit and 2008 R2, customers must use at least WebSphere 7.0.3 or later version of 7.0.x
2. Browser support for the administrative UI a. Internet Explorer – supported with IE8 or higher (IE9 is supported in “compatibility mode”)
b. Firefox - supported with version 10.0.2 and higher c. Google Chrome – supported with version 17.0.063.56 or higher
Page 15 of19
13. REPORT SERVER
Report server is supported on Windows 2008, Windows 2008 R2 64-bit, Solaris (SPARC) 9 &10, Red Hat 5 (the report server is not supported on Red Hat 6 yet)
Notes:
1. If using Microsoft SQL Server or Oracle for your Report Server database, the same database type must be used for both Report Server and Audit. For example, Microsoft SQL Server cannot be used for Audit if Oracle Database is being used for Report Server. If using My
SQL (embedded, recommended approach) for your Report Server database, Oracle is supported as Audit Store. 2. Report Server is supported as a 32-bit application on Solaris (SPARC) 10 64-bit ONLY. The Oracle Net client must be 32-bit.
14. POLICY SERVER COMPATIBILITY WITH AGENTS
Policy Server 12.5 supports previous versions of Web Agent, Secure Proxy Server (SPS), ERP Agent, ASA Agent, and SAML Affiliate
Agent with the following caveats:
o 6.x versions of Web Agent, SPS, ERP Agent, ASA Agent, and SAML Affiliate Agent and 5.x versions of ERP Agent do not support IPv6 or FIPS Mode (can only connect to 12.x Policy Server in FIPS Compatibility Mode).
REPORT SERVER OS DATABASE VERSION(1) DATA CONNECTOR REPORT SERVER REPORT
(CMS) DATABASE
AUDIT
STORE
Microsoft Windows 2008
32 bit/64 bit
Microsoft SQL Server 2008 R2 Microsoft ODBC SNAC (Native Client) Yes Yes
Oracle 11g R1 Oracle Net Client 11.1.0.6 Yes Yes
Embedded MySQL (recommended
approach)
Yes
Microsoft Windows 2008
R2 64 bit
Microsoft SQL Server 2008 R2 Microsoft ODBC SNAC (Native Client) Yes Yes
Oracle 11g R1 Oracle Net Client 11.1.0.6 Yes Yes
Embedded MySQL (recommended
approach)
Yes
Oracle Solaris (SPARC)10(2)
Oracle 11g R1 Oracle Net Client 11.1 Yes Yes
Embedded MySQL (recommended
approach)
Yes
Red Hat Linux 5
Oracle 11g R1 Oracle Net Client 10.2 Yes Yes
Embedded MySQL (recommended
approach)
Yes
Page 16 of19
o Web Agent, SPS, ERP Agent, ASA Agent, and SAML Affiliate Agent versions prior to r12.0 SP3 cannot be installed on the same
machine as an r12.0 SP3 or higher Policy Server. CA SiteMinder12.5 Policy Server supports Web Agents at a higher CR (cumulative release) number than the Policy Server provided
both are the samelevel Service Pack. The version of the Web Agent Option Pack no longer must match the Policy Server version, including the Service Pack and CR
version. With SiteMinder 12.5 release there is backward compatibility between SiteMinder 12.5 policy server and earlier versions of the Web
Agent Option Pack back to SiteMinder r12 SP3 CR9. Additionally, as long as the Web Agent Option Pack is numbered with the same Service Pack number then the WAOP can have a later
CR than the SiteMinder Policy Server (examples, a 12.5 CRx WAOP is supported with the base SiteMinder 12.5 Policy Server, a 12.5
SP1 CRx WAOP is supported with the SiteMinder 12.5 SP1 Policy Server). If the Web Agent and Web Agent Option Pack are installed on the same machine, they must also be the same version, including the
Service Pack and CR version.
15. CA IDENTITY MANAGER
Versions of CA Identity Manager that integrate with CA SiteMinder Policy Server 12.5 on these operating system platforms.
16. CA DATAMINDER CLASSIFICATION
Versions of CA DataMinder Classification that integrate with CA SiteMinder Policy Server 12.5 on these operating system platforms
17. ADVANCED PASSWORD SERVICES (APS)
Please see the APS 12.5 platform support matrix posted in the SiteMinder Product area on CA Support web site.
SiteMinder Policy Server running this Operating System
Win 2008 Win 2008R2 Solaris 10 (SPARC)
Red Hat5 Red Hat6
Identity Manager 12.0 SPx Yes Yes
12.5 Yes Yes Yes Yes Yes
SiteMinder Policy Server running this Operating System
Win 2008
Win 2008R2
Solaris 10 (SPARC)
Red Hat5
Red Hat6
DataMinder 14.0 Yes Yes Yes Yes Yes
Page 17 of19
18. SUPPORT FOR ARCOT ADVANCED AUTHENTICATION PRODUCTS
SiteMinder 12.5 is supported with ArcotWebFort Authentication Adapter 2.2.1 and WebFort 6.2.x SiteMinder 12.5 is supported with Arcot Adapter 2.2.1 with RiskFort version 2.2.6
SiteMinder 12.5 is supported with Arcot A-OK Console version 2.10 and Adapter 1.2.1
19. RSA ACE SERVER AND AUTHENTICATION MANAGER
RSA ACE Server 6.0, 6.1 and RSA Authentication Manager Server 7.1 are supported with Solaris10 (SPARC), Windows 2008, Windows
2008 R2, Red Hat 5 and 6 (using “RSA Authentication Agent API 8.1 for C”). OnDemand tokens are not supported.
20. IPV6 SUPPORT STATEMENT
SiteMinder Policy Server on Windows, Solaris (SPARC), and Red Hat offers IPv6 support for communication from and to Web Agents (subject to IPv6 support by OS/web server vendor).
SiteMinder Policy Server on Windows, Solaris (SPARC), and Red Hat offers IPv6 support for communication from and to the SiteMinder Admin UI running either on any of its supported application server platforms.
SiteMinder Policy Server on Windows does not support IPv6 for the purpose of connecting to any repository acting as a policy, user,
session, key, and/or audit stores. SiteMinder Policy Server, on Solaris or Red Hat, Data Direct drivers, does not support Oracledatabases over IPv6 for Policy Stores, Key
Stores, Session stores, and Audit stores.
21. VIRTUALIZED ENVIRONMENT SUPPORT
SiteMinder follows the general CA Policy for Virtualization noted here
https://support.ca.com/irj/portal/phpsupcontent?techDocAccess=N&contentID=189545
22. REASONABLE COMMERCIAL EFFORT STATEMENT
CA Technical Support will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests that
involve the use of currently supported versions of CA SiteMinder on or with “unsupported” platforms as follows:
CA Technical Support will accept support incidents (support requests) involving a software platform of a combination of
software platforms that is not officially supported per the then-current CA published platform support matrices. CA will
troubleshoot the issue up to the point that CA has reason to believe that the problem is related to the use of software that is not specified in a then-current platform supported matrix. At such point, CA shall require that the customer reproduce the
problem on a fully supported combination of platforms before CA proceeds in troubleshooting the incident.
Page 18 of19
Linux Reasonable Commercial Effort Statement
This Support Statement applies to CA SiteMinder that offers documented support for one or more Linux Reference Platforms.
CA strives to meet our clients’ diverse and ever changing needs. CA products support and manage many of today's leading platforms, operating systems and applications across the IT enterprise.
A Linux Reference Platform is a specific version of a particular Linux variant, such as Red Hat Enterprise Server 5/6, which is
used in CA development, QA, and Support, and is documented as a supported environment in which to run CA SiteMinder.
To verify the Linux Reference Platforms supported for CA SiteMinder, review the system requirements section of the respective product documentation, or check with CA Support.
Many of our clients use variants of the Linux operating system as their production operating system platform, for example
Oracle Enterprise Linux, SUSE, etc.
Some of those Linux variants claim compatibility (compatibility modes) with CA SiteMinder supported Linux Reference Platforms.
Note: CA does not test every possible configuration of CA SiteMinder running on the many Compatible Linux Variants available
and cannot certify specific client configurations.
To facilitate a quick resolution and isolate the root cause of any potential product issue encountered running on Compatible
Linux Variants, CA is establishing the following support protocol for CA SiteMinder operated in these environments:
The current GA version of a Linux Reference Platform and the prior major version of that environment are supported. Any exceptions will be noted in respective product documentation.
The client is responsible for properly configuring their Linux Variant to be compatible with a Linux Reference Platform
supported by CA SiteMinder. The client is responsible for having an active maintenance agreement for both their CA SiteMinder and for the
Compatible Linux variant. While CA does not require that clients recreate each issue on a Linux Reference Platform before contacting support, we
can request that the client diagnose and troubleshoot specific issues without the Linux Variant "variable" through reproducing the issue on the Linux Reference Platform. CA will only do this when we have reason to believe the issue is
directly related to the Compatible Linux Variant environment. While functional problems are rare under Compatible Linux Variants, problems may occur related to the third-party
components embedded in applications, and those embedded products’ support of Compatible Linux Variants may be
limited or unavailable. Diagnosis and resolution of this class of problem may require the client to return to a Linux Reference Platform.
Page 19 of19
Compatible Linux Variants are diverse; CA may require extra time to understand, collect data, troubleshoot and possibly
reproduce reported issues. If CA Support cannot directly identify the root cause as a CA or a Compatible Linux Variant issue, client can open a
support issue with their Compatible Linux Variant vendor and any other necessary third-party vendors to expedite the resolution of the issue. CA, the vendor(s), and the client will work together toward a quick resolution where there
business relationship mechanism to do so. CA, Novell, and many other software vendors belong to the Technical Support Alliance Network (http://www.tsanet.org) that may be engaged by either CA or the Compatible Linux variant
vendor if and when the need for a third-party arises as long as active maintenance exists for the CA and third party vendor’s product. Note if the customer does not have a Vendor support agreement for the Linux variant, there is no
third party CA may work with.
Any known issues with running CA SiteMinder on specific Compatible Linux Variants will be noted in the respective product documentation.
23. THIRD PARTY PRODUCTS END OF SUPPORT STATEMENT
When a third party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third party
product or any SiteMinder components that interoperate with the third party product. Third party products under extended vendor support are not supported by CA.Examples of third party products are: web server, application server, operating system, directory,
database, etc.