HP JetAdvantage Security Manager 10 Device E-LTU Installation guide

HP JetAdvantage Security Manager

Installation and Setup Guide

ZUSAMMENFASSUNG

This document covers how to install and set up HP Security Manager or upgrade an existing installation.

Inhaltsverzeichnis

1 Introduction .................................................................................................................................................................................................1

System requirements ............................................................................................................................................................................1

Installation and upgrade overview......................................................................................................................................................2

Verify Administrator account requirements.......................................................................................................................................3

Set up Internet Information Services (IIS) on a Windows server or operating system ...............................................................4

Install the prerequisite software..........................................................................................................................................................5

2 Install the HP Security Manager system .................................................................................................................................................7

Install or use local SQL and create a new database .........................................................................................................................8

Create a new database on an existing SQL server (local or remote) .......................................................................................... 13

Point to an existing database on a remote SQL server (remote only)........................................................................................ 17

Install the database on another computer ..................................................................................................................................... 21

3 Upgrade the HP Security Manager system.......................................................................................................................................... 27

Upgrade the web application and database on the same computer ......................................................................................... 28

Upgrade the web application on one computer and update the database on another computer ........................................ 33

4 Congure HP Security Manager............................................................................................................................................................. 39

Congure Auto Logout and Account Lockout.................................................................................................................................. 39

Congure Policy Change Notication ............................................................................................................................................... 39

Congure device replacement and hostname changes behavior ............................................................................................... 40

Congure database maintenance..................................................................................................................................................... 40

Firewall conguration for remote access ........................................................................................................................................ 41

Congure remote access to the HP Security Manager web application..................................................................................... 41

Congure remote database security................................................................................................................................................ 41

Congure database security for the existing Microsoft SQL Servers.......................................................................................... 42

5 Uninstall the HP Security Manager system ......................................................................................................................................... 45

Uninstall the web application and database from one computer............................................................................................... 46

Uninstall the web application from one computer and uninstall the database from another computer............................. 46

6 Solve problems......................................................................................................................................................................................... 49

Solve problems.................................................................................................................................................................................... 49

7 Software license agreement.................................................................................................................................................................. 51

End User License Agreement ............................................................................................................................................................ 51

Anhang A Manually install and congure IIS ........................................................................................................................................... 55

Install IIS on Windows Server ............................................................................................................................................................ 55

iii

Install IIS on a Windows operating system ..................................................................................................................................... 56

Anhang B More information ...................................................................................................................................................................... 59

iv

Introduction1

HP JetAdvantage Security Manager (HP Security Manager) is a security compliance tool. Use HP Security Manager

to create policies that assess the security of your imaging and printing devices, congure the devices to comply

with the policy, and monitor the devices for continued compliance.

Use this guide to install and set up HP Security Manager or upgrade an existing installation.

HINWEIS: For general information and instructions on how to use the system, see the HP Security Manager

Help.

System requirements

The following are the basic requirements for installing the newest version of HP Security Manager:

● Internet Information Services (IIS) 7.5 or newer versions. See Set up Internet Information Services (IIS) on a

Windows server or operating system auf Seite 4

● Microsoft .NET Framework 4.8 or newer version.

HINWEIS: If the HP JetAdvantage Security Manager installer does not detect the .NET Framework 4.8 or

newer versions, the installer provides the appropriate installation instructions and Microsoft URL to

download the .NET Framework.

HINWEIS: Security Manager supports platforms that have Microsoft Windows and .NET Framework high-

priority updates.

● Database: HP Security Manager installs Microsoft SQL Server 2019 Express.

For a full list of supported databases, see the HP Security Manager Release Notes at

www.hp.com/go/SecurityManager.

● A supported Microsoft Windows computer.

● Operating Systems: Supports the following Microsoft Windows 64-bit operating systems:

HINWEIS: HP no longer supports or tests Microsoft operating systems released for prior HP JetAdvantage

Security Manager installations. Support will only be provided for the latest Security Manager release

versions.

– Windows Server 2019

– Windows Server 2016

– Windows Server 2012 R2

– Windows Server 2012

– Windows Server 2008 R2

– Windows 10

– Windows 8.1

Introduction

1

– Windows 8

● Server Hardware: HP recommends the following hardware conguration for the server:

– 4 or more processor cores

– 2.8 GHz or higher processor speed

– 12 GB or more of RAM

– 4 GB of available storage

● Supported browsers: HP Security Manager supports the following browsers:

HINWEIS: HP Security Manager is supported in VMWare and Hyper-V environments with the Windows

versions listed previously. Hyperthreading is optional for VMware and Hyper-V. Reserve memory is required

for Hyper-V.

HINWEIS: If installing Security Manager on a VMware instance, you must use the hardware (MAC) address

of that virtual adapter during the ordering of the license le. Be aware that VMware dynamically generates

the virtual adapter MAC address and does not guarantee it will remain static during session restarts or

power toggling. If the MAC address changes, the print license service will fail to operate properly. Refer to

VMware help documentation for instructions on how to congure a static MAC address or how to change

the modied MAC address back to original.

HINWEIS: Importing a license le might fail on VMware VM’s. If this occurs, reboot the virtual machine.

HINWEIS: SQL 2017 or 2019 is recommended on VMware because testing with older versions and

partially disabled TLS settings resulted in random database connectivity issues.

– Internet Explorer 11 or newer

– Chrome version 60 or newer

– Microsoft Edge (Chromium-based) version 79 or newer

Installation and upgrade overview

The HP Security Manager installation program installs the Security Manager web application and database on a

single computer or installs the database remotely.

HP Security Manager can use an existing installation of Microsoft SQL Server or install Microsoft SQL Server 2019

Express, if required.

HINWEIS: If you use a database that is not installed by the HP Security Manager installer, then the database

permissions must be setup before installation. After HP Security Manager is installed, see Congure database

security for the existing Microsoft SQL Servers auf Seite 42 for instructions.

New HP Security Manager installations

The installation program provides the following options for a new installation of HP Security Manager:

● Database Only — Installs only the HP Security Manager database on a computer that contains an existing

installation of Microsoft SQL Server. Use this option to install the HP Security Manager database separately

from the HP Security Manager web application.

2

Kapitel 1 Introduction

● Full Install — Installs the HP Security Manager web application, creates and initializes a new database

(DB) or connects and upgrades an existing DB, or congures remote database connection settings without

upgrading/installing the remote database. Optionally, Microsoft SQL Server 2019 Express can be installed on

a computer that does not contain an existing installation of Microsoft SQL Server. If required, the database

can be installed remotely from the HP Security Manager web application.

Existing HP Security Manager installations (upgrade)

The HP Security Manager installation program determines whether an older version(v) is installed and can be

upgraded.

HINWEIS: HP Security Manager supports direct upgrades only from the following versions: 3.2.1, 3.3, and 3.4.

Earlier versions of HP Security Manager cannot be upgraded.

HINWEIS: Make sure to use the same version of the HP Security Manager user interface and HP Security

Manager service.

The installation program provides the following options for an upgrade of HP Security Manager:

● Upgrade the web application and database on the same computer.

● Upgrade the web application on one computer and update the database on another computer.

HINWEIS: If requested to restart your workstation when installing or uninstalling the MS installer le due to

changes in the registry, you can either restart, or, delete the “PendingFileRenameOperations” key

(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations)

in the registry editor.

For more information, see Solve problems auf Seite 49 (Issue: “A computer restart is required. You must restart

this computer before continuing with installation.”)

Verify Administrator account requirements

Review the following information before you begin the HP Security Manager installation.

● Log in as the Administrator, or use an account that is a member of the HPIPSC group, on the local computer.

HINWEIS: HP SM 3.4 or newer versions will enable only users added under HPIPSC group to access HP

Security Manager.

● When logging into HP Security Manager web application, make sure to use the correct Administrator

credentials where HP Security Manager service is running format: <domain name>\<admin user>

(AUTH\hpsmadmin, for example). If required, guest users can also be included.

● When installing the Security Manager web application and database on separate computers, verify that the

account you use to install the Security Manager web application has the correct permissions to connect

to the database. When installing the Security Manager web application and the database on the same

computer, by default Microsoft SQL Server allows the Administrator to connect to the local database.

HINWEIS: Make sure that the Windows user installing Security Manager has at least the Create Database

rights (sysadmin role preferred) on the MS SQL instance to create a new database. If desired a dierent

account can be used during the installation to create or upgrade Security Manager.

Verify Administrator account requirements

3

To upgrade the database, ensure that the Windows user installing the Security Manager has Database

Owner (DBO) rights on the existing database to perform potential tasks using SQL commands on the

database such as insert, update, alter, or create table.

Set up Internet Information Services (IIS) on a Windows server or

operating system

Security Manager supports Internet Information Services 7.5 and newer versions.

HINWEIS: To install Internet Information Services (IIS) on a Windows server or a Windows operating system,

you must have an administrative account or administrative user rights.

HINWEIS: To run the HP Security Manager installer, ensure that Internet Information Services (IIS) and its

recommended features are installed.

A conrmation window displays if the recommended features for IIS are not installed. Select one of the following

options in the conrmation window:

● Select Yes to continue installation of IIS and its recommended features.

HINWEIS: If HP Security Manager is unable to install all the recommended features of IIS, then the HP

Security Manager installation will be aborted. Refer to the appendix A to manually install and congure

Internet Information services (IIS) and its features.

● Select No to manually install IIS and its recommended features. A conrmation window displays. Click OK.

4

Kapitel 1 Introduction

Install the prerequisite software

Before you install HP Security Manager, the following software must be installed on the computers where the HP

Security Manager system will run:

HINWEIS: If required, the HP Security Manager installation program (HPSecurityManager_Setup.exe) will install

these products during the installation, or on-screen prompts will display to install the software correctly.

●

Microsoft .NET Framework 4.8or newer versions

● Microsoft SQL Server Systems CLR Types (x86 and x64)

● Microsoft Oice Primary Interop Assembly

● Microsoft Report Viewer 2012 Runtime

● Microsoft SQL Server 2014 Express

● Internet Information Services (IIS) 7.5 or newer versions

HINWEIS: After the installation of HP Security Manager is completed, run Microsoft Windows Update to ensure

that the listed software is current.

Make sure to use Chrome 60, Microsoft Edge 79 (Chromium based), or Internet Explorer 11 or newer to run the

HP Security Manager application.

Install the prerequisite software

5

6 Kapitel 1 Introduction

Install the HP Security Manager system2

Use one of the following methods to install HP Security Manager web application and database.

● Install the web application and the database on a local instance of an existing SQL server on a single

computer.

HINWEIS: This method installs the HP Security Manager web application and the database on the same

server.

● Install the web application on one server and install the database on another server by running the HPSM

installer one time.

HINWEIS: This method installs the HP Security Manager database on a server that has an existing

installation of Microsoft SQL (Server B), and installs the Security Manager web application on a separate

server (Server A).

HINWEIS: In some cases, the rights to create and initialize the remote database might be missing and

additional steps must be executed on the remote SQL server with the security manager database installed.

Install the HP Security Manager system

7

Install or use local SQL and create a new database

Use the following steps to install a local instance of SQL, to install HP Security Manager and create a new

database on the SQL server on a single computer:

1. Log on to the computer where the HP Security Manager web application and database is or will be installed.

2. Launch the installer.

a. Copy the HP Security Manager installation program (HPSecurityManager_Setup.exe) to this computer.

b. Double-click the HPSecurityManager_Setup.exe le.

c. On the welcome window, click Next.

d. Review the license agreement, click I accept the terms of the license agreement, and then click Next.

8

Kapitel 2 Install the HP Security Manager system

3. On the Setup Type window, select Full install, and then click Next.

Abbildung 2-1 Full Install selected as Setup Type

4. Select the destination where you want to save the le(s).

● On the Choose Destination Location window, click Next to use the default folder.

OR

● Click Browse, locate and select a dierent folder, and then click Next.

The installer will now congure IIS and install the Flexera and HP Print License service.

HINWEIS: If a warning is displayed 'A computer restart is required even after restarting the computer', see

the section Solve Problems for a solution.

5. Select Install SQL Server Express 2019 and create and initialize a new database, click Next, and then wait for

the installation to complete. A nal verication will display when complete.

HINWEIS: Microsoft SQL Server 2019 supports Windows 10 and newer, and Windows Server 2016 and

newer. If an installation is done on Windows 2012 or older, then an older version of SQL (Express) will have

to be installed before HP Security Manager can be installed.

Install or use local SQL and create a new database

9

6. Select the Database Server.

a. In the Database Server eld, use the default server listed or enter the database server instance using

the format <name of machine>\<name of database instance>. For example, enter

MyComputer\SQLExpress.

HINWEIS: It is recommended to NOT modify the Database Name eld from the drop-down list when

upgrading.

HINWEIS: The installer will automatically detect the database server instance and the selected

database name while upgrading to the latest HP Security Manager version. If the installation program

cannot connect to the database, it displays an error. Make sure that the account used to install the

service has database connection privileges. For more information, see Verify Administrator account

requirements auf Seite 3.

10

Kapitel 2 Install the HP Security Manager system

b. If the user who is running the installer does not have access permissions to the database, select the

checkbox Use the following credentials instead of current user credentials for SQL access, and then

provide the Windows username as the LoginID with the corresponding Password.

c. Click Next.

7. If Create and initialize a new database on an existing SQL Server, or upgrade an existing database is selected

and an existing HP Security Manager database exists, the Database Already Exists window displays.

8. In the Database Already Exists window, select the Use existing database option.

HINWEIS: This window displays when upgrading a database that already exists on the local or remote SQL

server. The database will be upgraded only if the Windows user upgrading the Security Manager installer

has DBO rights on the database. If the database was not created previously on the remote SQL server and if

the Windows user installing the Security Manager has permission rights to create a database on a remote

SQL instance, then the Security Manager installer will proceed to create the remote database, or upgrade

the database if it is an older version than the Security Manager version installed.

ACHTUNG: If the Re-initialize database option is selected, any existing data is permanently deleted.

Install or use local SQL and create a new database

11

9. Select Use an existing certicate for secure client communication, and then click Next.

HINWEIS: To create a new certicate, select Create a self-signed certicate. If installing a new certicate,

make sure that the system where HP Security Manager is or will be installed is added to the domain and

congured with the correct DNS. After installation, this new certicate is valid for 5 years. In case there are

any certicate binding issues, access “Inetmgr” and manually perform the hpsm site binding. To view

available certicates in mmc.exe, locate the Certicates (Local Computer), and then open the Personal

folder.

12

Kapitel 2 Install the HP Security Manager system

10. Click Install to start the installation or upgrade.

Create a new database on an existing SQL server (local or remote)

Use the following steps to install the HP Security Manager web application and create a new database on a local

instance of an existing SQL server on a single computer (can also be used to create a new database on a remote

SQL server):

1. Log on to the computer where the HP Security Manager web application and database is or will be installed.

2. Launch the installer.

a. Copy the HP Security Manager installation program (HPSecurityManager_Setup.exe) to this computer.

b. Double-click the HPSecurityManager_Setup.exe le.

c. On the welcome window, click Next.

d. Review the license agreement, click I accept the terms of the license agreement, and then click Next.

Create a new database on an existing SQL server (local or remote)

13

3. On the Setup Type window, select Full install, and then click Next.

Abbildung 2-2 Full Install selected as Setup Type

4. Select the destination where you want to save the le(s).

● On the Choose Destination Location window, click Next to use the default folder.

OR

● Click Browse, locate and select a dierent folder, and then click Next.

The installer will now congure IIS and install the Flexera and HP Print License service.

HINWEIS: If a warning is displayed 'A computer restart is required even after restarting the computer', see

the section Solve Problems for a solution.

5. Select Create and initialize a new database on an existing SQL Server, or upgrade an existing database, click

Next, and then wait for the process to complete.

HINWEIS: The Windows user must have proper permissions in the existing SQL Server instance to create a

database.

HINWEIS: If the database was upgraded with the InstallSQLscripts.zip, you can also select Connect to an

existing database on local or remote SQL server option.

HINWEIS: The HP Security Manager database does not support multiple service connections. Only one HP

Security Manager service installation is set on the database.

14

Kapitel 2 Install the HP Security Manager system

6. Select the Database Server.

a. Select the Database Server from the drop-down list. If you need to change the default selection, click

Browse and navigate to the correct server.

Create a new database on an existing SQL server (local or remote)

15

b. Select the Database Name from the drop-down list. If you changed the default server selection in the

previous step, click Refresh to make the server name visible in the list, and then select it from the

drop-down list.

HINWEIS: HP Security Manager will automatically detect the database server instance and the

selected database name while upgrading to the latest HP Security Manager version. If the installation

program cannot connect to the database, it displays an error. Make sure that the account used to

install the service has database connection privileges. For more information, see Verify Administrator

account requirements auf Seite 3.

c. If the user who is running the installer does not have access permissions to the database, select the

check box Use the following credentials instead of current user credentials for SQL access, and then

provide the Windows user name as the LoginID with the corresponding Password.

d. When the Database Name displays, click Next. The database will be initialized later.

7. Select Use an existing certicate for secure client communication, and then click Next.

HINWEIS: To create a new certicate, select Create a self-signed certicate. If installing a new certicate,

make sure that the system where HP Security Manager is or will be installed is added to the domain and

congured with the correct DNS. After installation, this new certicate is valid for 5 years. In case there are

any certicate binding issues, access “Inetmgr” and manually perform the hpsm site binding. To view

available certicates in mmc.exe, locate the Certicates (Local Computer), and then open the Personal

folder.

16

Kapitel 2 Install the HP Security Manager system

Page is loading ...

HP JetAdvantage Security Manager 10 Device E-LTU Installation guide

This manual is also suitable for

HP JetAdvantage Security Manager 10 Device E-LTU Installation guide

Related papers

Other documents