Software Requirements
For InTrust Connector installation and functioning, your environment must meet the following requirements:
- InTrust Server (remote or local)
- Remote or local deployment of Microsoft System Center Operations Manager: any version up to and including SCOM 1807, which is current at the time of this InTrust release
- One of the following must be installed on the computer where InTrust Connector will be deployed:
- Management Server component of Operations Manager
- Operations Console
- Authoring Console for SCOM 2007
- Microsoft SQL Server Native Client 11.0.6538.0 or later (version 11.0.6538.0 redistributable package of the client is included in the InTrust distribution)
User Rights
InTrust OpsMgr Connector Admins Group
To allow a user to configure InTrust Connector (apply filters to the alerts that should be forwarded, set up alert forwarding process, etc.), you must add the user's account to the InTrust OpsMgr Connector Admins local group. This group is automatically created on the computer where InTrust Connector is installed, and the group is granted the permissions described in the Connection to Alert Database and Operations Manager Server topic.
The following accounts are added to the InTrust OpsMgr Connector Admins group during installation:
- Service account (specified during installation) under which InTrust Connector for Operations Manager service (ITConOpsMgrService) will run
- User account under which the installation is performed
|
|
Note: The InTrust OpsMgr Connector Admins group is not removed when you uninstall InTrust Connector; you need to remove it manually. |
The InTrust OpsMgr Connector Admins group is granted the following permissions:
- For the <InTrust Connector working folder>\ITConMOM.xml file where the connector's configuration is stored:
- Read
- Write
- Append Data
- Read Extended Attributes
- Write Extended Attributes
- Execute
- Read Attributes
- Write Attributes
- Read Permissions
- Synchronize
|
|
Note: The Synchronize permission is not displayed in the standard Properties window. To show it, use the Subinacl.exe utility available from the Resource Kit. |
- For the HKEY_LOCAL_MACHINE\SOFTWARE\Dell\InTrust Connector for SCOM registry entry:
- Query Value
- Set Value
- Enumerate Subkeys
- Notify
- Read Control
- For the InTrust Connector service (ITConOpsMgrService):
- Start
- Stop
- Query Status
- Read Control
|
|
Note: When granting the necessary permissions manually, clear the Allow inheritable permissions from parents to propagate to this object check box. |
Connection to Alert Database and Operations Manager Server
To connect to the InTrust Alert database, InTrust Connector can use either the ITConOpsMgrService account (supplied during the setup) or a specific different account (which you can supply using the Configuration Wizard). Whatever account is used, it should be assigned the following:
- db_datareader and db_datawriter SQL Server roles for the alert database
- InTrust Real-Time Monitoring or InTrust Monitoring Console roles (which are created during InTrust setup) for the alert database
If specific Windows account will be used to access the Alert database (see the Configuring InTrust Connector for Operations Manager topic for details), then it also must be granted the Log on as a batch job right.
The account used for connecting to the Operations Manager server must be a member of the domain global group included in the Operations Manager Administrators role (this group is created during Operations Manager setup).