InTrust 11.6.1 - Deployment Guide

Default Roles Implementing Role-Based Administration Switching Role-Based Administration On and Off Examples: Who Can Do What Case Study: Regional Scenario Case Study: Managing Access to Reporting Configuration

InTrust Configuration

Configuring Access Rights

InTrust Organization Administrators AMS Organization Servers AMS Readers

Configuring InTrust Sites Configuring Notification Groups and Recipients Configuring InTrust Monitoring Console

Licensing Sample Deployment and Configuration Scenario

Lab Configuration Overview InTrust Organization Configuration Overview Gathering Configuration Overview Real-Time Monitoring Configuration Overview Installing Servers Installing Agents Configuring and Populating InTrust Sites Setting Up Gathering and Reporting on Events Setting Up Real-Time Monitoring of Security Events

Installing InTrust in Unattended Mode

You can install the InTrust components you need without going through all the steps of the installation wizard. To do it, use CMD files provided in the InTrust folder in your InTrust distribution.

Copy the necessary CMD files to your local hard drive, and open them in a text editor. Edit the lines that set variables such as paths, user names, passwords and so on. Save and run the CMD files.

The CMD files are described in the Files for Unattended InTrust Installation topic. For the meaning of options, you can also see the commented-out lines in the files themselves.

Files for Unattended InTrust Installation

The following batch files let you perform an automated installation of InTrust components without completing wizard steps:

File	Component Installed
Setup_DefaultSuite.cmd	Default set of InTrust components
Setup_Server.cmd	InTrust Server and all related components
Setup_AllComponents.cmd	InTrust Server, all related components, all data view applications and report packs
Setup_ITManager.cmd	InTrust Manager and InTrust Deployment Manager
Setup_MonitoringConsole.cmd	InTrust Monitoring Console
Setup_RepositoryViewer.cmd	InTrust Repository Viewer
Setup_Parameters.cmd	File that defines parameters for unattended installation of InTrust.
Setup_WindowsAgent.cmd	File that installs InTrust agent and registers the agent on the InTrust server.
Setup_ReportPacks.cmd	SSRS report packs for use in task-based auditing workflow; for a full list, see InTrust Reports.

The parameters within Setup_Parameters.cmd are listed alphabetically in the table below. The bolded parameters are needed for both default and extended deployment; the others only for extended deployment.

Parameter	Description
CONNECT_INTRUST_ORGANIZATION_MODE	Whether to connect to an InTrust organization.
DB_AUD	Name of the audit database. Important: This database must already exist when the script runs. It is not created automatically.
DB_CFG	Name of the configuration database.
DB_RTM	Name of the alert database. Important: This database must already exist when the script runs. It is not created automatically.
DISTRIB_PATH	Absolute path to the InTrust CD root. Normally, this is the CD drive letter. If you have copied the CD structure to a shared resource, this is the path to the share that contains the structure. The path must not end in a backslash.
InTrust_Server	Specifies the InTrust server name for agent installation
IT_PATH	Full path to the folder where InTrust component must be installed.
ITMC_SITE	Microsoft IIS Web site number. 1 sets the default Web site.
ITMC_VDIR	Name of the virtual directory.
MAIL_FROM	Identifies the sender of InTrust notification messages.
MAIL_TO	Email address of the recipient of InTrust notification messages. This address becomes a property of the default notification recipient.
MSI_LOG_OPT	Options related to MSI logging. The default is *v!. For more information about these Windows Installer logging options, search http://msdn.microsoft.com for information on the topic.
MSI_UI_OPT	Sets the user interface level. Options related to MSI logging and MSI logging interface. The default is *v!. For more information about these Windows Installer logging options, search http://msdn.microsoft.com for information on the topic.
OPERATOR_COMPUTER	NETBIOS computer name for default notification recipient.
ORG_NAME	Name of the InTrust organization.
ORG_PWD	Password for the InTrust organization.
PF_REPORTING_SHARE	Local path to a reports folder on current server.
PORT_ADMIN	Number of the port that InTrust Manager uses to connect to the InTrust server. The default is 8340.
PORT_LISTEN	Number of the port that agents use to communicate with the InTrust server. The default is 900.
RS_SERVICE_URL	Path to a SRS server to be used as default for reporting jobs.
SIP	Participation in the Software Improvement Program. For details about the program, see Installing and Configuring InTrust Components.
SMTP_PORT	Name of the port that InTrust must use for notification messages. The default is 25.
SMTP_SERVER	Name of the SMTP server that InTrust must use for notification messages.
SQL_AUTH_TYPE_AUD	Type of SQL Server connection to be used for setting up the audit database. 1 specifies a trusted connection. 0 specifies that SQL Server authentication is used.
SQL_AUTH_TYPE_CFG	Type of SQL Server connection to be used for setting up the configuration database. 1 specifies a trusted connection. 0 specifies that SQL Server authentication is used.
SQL_AUTH_TYPE_RTM	Type of SQL Server connection to be used for setting up the alert database. 1 specifies a trusted connection. 0 specifies that SQL Server authentication is used.
SQL_PWD_AUD	Related to the audit database: if SQL_AUTH_TYPE_AUD is set to 0, specifies the password for SQL Server authentication.
SQL_PWD_CFG	Related to the configuration database: if SQL_AUTH_TYPE_AUD is set to 0, specifies the password for SQL Server authentication.
SQL_PWD_RTM	Related to the alert database: if SQL_AUTH_TYPE_RTM is set to 0, specifies the password for SQL Server authentication.
SQL_SERVER_AUD	Specifies the SQL server that will host the InTrust audit database.
SQL_SERVER_CFG	Specifies the SQL server that will host the InTrust configuration database.
SQL_SERVER_RTM	Specifies the SQL server that will host the InTrust alert database.
SQL_USR_AUD	Related to the audit database: if SQL_AUTH_TYPE_AUD is set to 0, specifies the user name for SQL Server authentication.
SQL_USR_CFG	Related to the configuration database: if SQL_AUTH_TYPE_AUD is set to 0, specifies the user name for SQL Server authentication.
SQL_USR_RTM	Related to the alert database: if SQL_AUTH_TYPE_RTM is set to 0, specifies the user name for SQL Server authentication.
SVC_PWD	Password of the user account on whose behalf the InTrust Server services work.
SVC_USR	User account on whose behalf the InTrust Server services work.

Starting InTrust Manager

You can connect to an InTrust organization (the InTrust server will be selected automatically), or select any specific InTrust server.

If you choose to connect to a specific InTrust server, you can browse for the server only in the same domain where you are running InTrust Manager. To connect to a server in another domain, you need to explicitly specify the server name.

Licensing

When you install the product and launch InTrust Manager or InTrust Deployment Manager for the first time, you will be asked to provide a license. Supply the license that you obtained from the sales representative. If you do not supply a license, most of InTrust functionality will be unavailable to you.

To obtain a license, contact your local sales office listed at https://www.quest.com.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

InTrust 11.6.1 - Deployment Guide

Installing InTrust in Unattended Mode

Files for Unattended InTrust Installation

Starting InTrust Manager

Licensing