Embed Size (px)
Citation preview
CA SiteMinder 12.0 SP2 and SP39, 14
Platform Support Matrix Last Updated March 7
th, 2014. Changes from the previous version are in green.
Table of Contents 1. POLICY SERVER ...................................................................................................................................................................... 2 2. WEB AGENTS ......................................................................................................................................................................... 2 3. SITEMINDER AGENT FOR INTERNET INFORMATION SERVICES (IIS), R12.0 SP3 ............................................................................. 4 4. SDK ...................................................................................................................................................................................... 4 5. WEB AGENT OPTION PACK ....................................................................................................................................................... 5 6. MAINFRAME SUPPORT (WEB AGENT AND SDK) ........................................................................................................................... 6 7. 64-BIT WEB AGENT AND SDK ................................................................................................................................................... 7 8. POLICY SERVER DIRECTORY SUPPORT .................................................................................................................................... 11 9. ONE VIEW MONITOR ............................................................................................................................................................. 12 10. FSS ADMINISTRATIVE UI ....................................................................................................................................................... 13 11. JVM REQUIREMENTS ............................................................................................................................................................. 13 12. ADMINISTRATIVE UI ............................................................................................................................................................. 14 13. REPORT SERVER ................................................................................................................................................................... 15 14. POLICY SERVER COMPATIBILITY WITH AGENTS ........................................................................................................................ 16 15. RSA ACE SERVER AND AUTHENTICATION MANAGER ................................................................................................................. 16 16. IRECORDER .......................................................................................................................................................................... 16 17. IPV6 SUPPORT STATEMENT .................................................................................................................................................... 16 18. SUPPORT FOR ARCOT ADVANCED AUTHENTICATION PRODUCTS ................................................................................................ 16 19. REASONABLE COMMERCIAL EFFORT STATEMENT ...................................................................................................................... 17 20. THIRD PARTY PRODUCTS END OF SUPPORT STATEMENT ........................................................................................................... 18 21. BROWSER SUPPORT .............................................................................................................................................................. 18 22. VIRTUALIZED ENVIRONMENT SUPPORT ................................................................................................................................... 18
Page 2 of 18
1. POLICY SERVER
Operating
System 1,3,6
Win
2003
Win
2003 R2
Win
2008
Win
2008
SP2 (64
bit)
Win
2008
R2 (64
bit)
Solaris
9
SPARC
Solaris
10
SPARC6
HPUX
11.11
(PA-
RISC)
Red
Hat
4 17,18
Red Hat
5 17
Policy Server4,
13
12.0 SP2, SP3 Yes Yes
SP3
CR3 SP3
CR2 Yes Yes
SP2
Only 18, 23
Yes Yes
2. WEB AGENTS
Operating
System 1,3,6
Win
2003
Win
2003 R2
Win
2008
Win
2008 R2 Solaris
9
SPARC
Solaris
10
SPARC6
Solaris 10
x86 6
HPUX
11.11
(PA-
RISC)
HPUX
11.23
(PA-
RISC)
HPUX
11.31
(PA-
RISC)
HPUX
11.23
(Itani
um)
HPUX
11.31
(Itani
um)
AIX
5.3 10
AIX
6.1 10
AIX
7.1
Red
Hat
4 17,18
Red Hat
5 17
Red Hat
6 17
Oracle
Enterpri
se Linux
5
Suse
Linux 9 8
Suse
Linux
10 8
Suse
Linux
11 8
Web Agents4, 6
Microsoft IIS
6.05 Yes ,12
Yes, 12
7.020 Yes
SunOne/Sun
Java System RP
6.0 Yes Yes
6.1(includes
Service Packs) Yes
Yes Yes Yes Yes
Yes
Yes
Yes
7.0 (includes
Updates/SPs) Yes Yes
Yes Yes Yes Yes
SP3
Yes
Yes SP2 CR1
Yes Yes
ASF Apache RP
2.0.54 & higher 2
Yes7 SP3
Yes Yes Yes
Yes Yes
Yes Yes
Yes Yes
2.2.x 2 Yes Yes SP3 CR9
Yes Yes Yes SP3 Yes Yes
Yes Yes
Yes Yes Yes SP3
CR1
Red Hat
Apache RP
2.0.46
2.0.5x Yes
Page 3 of 18
Operating
System 1,3,6
Win
2003
Win
2003 R2
Win
2008
Win
2008 R2 Solaris
9
SPARC
Solaris
10
SPARC6
Solaris 10
x86 6
HPUX
11.11
(PA-
RISC)
HPUX
11.23
(PA-
RISC)
HPUX
11.31
(PA-
RISC)
HPUX
11.23
(Itani
um)
HPUX
11.31
(Itani
um)
AIX
5.3 10
AIX
6.1 10
AIX
7.1
Red
Hat
4 17,18
Red Hat
5 17
Red Hat
6 17
Oracle
Enterpri
se Linux
5
Suse
Linux 9 8
Suse
Linux
10 8
Suse
Linux
11 8
2.2.x Yes
IBM HTTP
Server RP
7.0 SP2 CR1 SP3
SP3
CR1 Yes SP3
Yes
Yes Yes
SP3 CR5
SP3
CR5
SP3
CR10
8.0 SP3
CR10
SP3
CR10
Domino
6.5.x Yes Yes Yes Yes Yes
7.0 – 7.0.3 Yes Yes Yes Yes Yes Yes Yes Yes
8.0.x Yes Yes Yes Yes Yes
8.5.x Yes Yes
SP3 SP3
CR10
Yes
Yes
8.5.3 FP1 SP3CR0
5
Oracle HTTP
Server
10g (9.0.4,
Apache 1.3)
Yes Yes Yes
10.1.x (Apache
1.3.x)
Yes Yes Yes
Yes
Yes Yes Yes
10.1.x (Apache
2.0.x) Yes
Yes Yes Yes Yes Yes Yes
Yes SP3
SP3 CR6 Yes Yes
HP Apache
Server
2.0.5x Yes SP3 Yes
Page 4 of 18
3. SITEMINDER AGENT FOR INTERNET INFORMATION SERVICES (IIS), R12.0 SP3
Supports the Integrated and Classic pipeline modes, “Enable 32-bit applications” option (on 64-bit Windows Server versions), IIS Application Request
Routing (ARR), standalone and clustered configurations.
Operating
System 1, 6
Win 2008
32-bit
Win 2008
64-bit
Win 2008 R2
(64-bit)
Microsoft IIS
7.0 SP3 SP3
7.5 SP3
4. SDK
Operating
System 1,3,6
Win
2003
Win
2003 R2
Win
2008
Win
2008 (64
bit)
Win
2008 R2
(64 bit)
Solaris
9
SPARC
Solaris
10
SPARC6
Solaris
10 x86 6
HPUX
11.11
(PA-
RISC)
HPUX
11.23
(PA-
RISC)
HPUX
11.23
(Itani
um)
AIX
5.3 10
AIX
6.1 10
Red
Hat
4 17,18
Red Hat
5 17
Red Hat 5
(64-bit)
Red
Hat
6 17
Red Hat
6 (64 bit)
Oracle
Enterpri
se Linux
5 20
Suse
Linux 9 8
Suse
Linux
10 8
SDK
Agent APIs Yes Yes
Yes Yes Yes
Yes Yes Yes Yes SP3
CR9
Yes Yes SP3
CR10
SP3
CR10
Yes Yes
Server APIs Yes
Yes Yes Yes Yes Yes
Yes
Yes
Yes Yes Yes
64 bit Agent API
Operating
System1,4, 6
Windows
2003, R2
(64-bit)
Windows
2008 (64-
bit)
Windows
2008 R2
(64-bit)
Solaris
10
SPARC
(64-bit)
6
Solaris
10 x86
(64-bit)
HPUX
11.23
(64-bit
PA-
RISC)
HPUX
11.23
(64-bit
Itanium)
HPUX
11.31
(64-bit
Itanium)
AIX 5.3
(64-bit)
AIX 6.1
(64 bit)
AIX 7.1
(64 bit)
Red
Hat 4
(64-bit)
17,18
Red Hat 5
(64-bit) 17
Red Hat
6
(64-bit) 17
Oracle
Enterprise
Linux 5 (64-
bit)20
Suse Linux
10 (64-bit) 8
Suse Linux
11 (64-bit) 8
Agent SDK 20 Yes SP3 CR3 SP3 CR3 Yes Yes Yes Yes Yes SP3
CR9
SP3
CR9 Yes Yes
SP3
CR10 Yes SP3 CR9
Page 5 of 18
5. WEB AGENT OPTION PACK
Web Agent Option Pack 4, 6, 15 Win 2003 Win
2003 R2 Win 2008
Solaris
9
SPARC
Solaris
10
SPARC6
Solaris 10
x86 6
HPUX 11.23
(Itanium) AIX 5.3 10
AIX 7.1
Red Hat 4 17 Red Hat 5 17,18 Suse Linux 9 8
ServletExec ISAPI 5.0 Yes Yes
ServletExec NSAPI 5.0 Yes Yes Yes
ServletExec AS 5.0 Yes Yes Yes Yes Yes Yes ServletExec AS 6.0 SP3 CR7 SP3 CR1 SP3 CR7 SP3 CR7
WebLogic Server 9.1, 9.2 Yes Yes Yes Yes Yes Yes Yes
WebLogic Server 10.0 MP1 Yes Yes SP3 CR7
WebLogic Server 11g SP3 CR2 SP2 CR1
WebSphere 7.0 SP3 CR2 SP3 CR3
WebSphere 8.5 Yes
JBoss Enterprise Web Server 4.0.3
SP1, 4.2.x Yes Yes Yes Yes Yes Yes
Yes Yes
JBoss Enterprise Web Server 4.2.x SP3 CR5
Tomcat 6 SP3 CR2
Note: The version of the Web Agent Option Pack must match the Policy Server version, including the Service Pack and CR version. In addition, if the Web Agent and Web Agent
Option Pack are installed on the same machine, they must also be the same version, including the Service Pack and CR version.
Page 6 of 18
6. MAINFRAME SUPPORT (WEB AGENT AND SDK)
Operating System4 Suse Linux 98
for System z
Suse Linux 108
for System z
Red Hat Linux
417,18 for System z
Red Hat Linux 517
for System z
Red Hat Linux (64-bit) 517
for System z
31-bit/32-bit Web
Agents4, 6
ASF Apache RP
2.0.54 & higher 3, RP Yes SP3
2.2 & higher3, RP Yes Yes
IBM HTTP Server RP
7.0 Yes Yes Yes
64-bit Web Agents4, 6
ASF Apache RP
2.0 & higher(64-bit)3, RP SP3 CR2
2.2 & higher(64-bit)3, RP SP2 CR1
Web Agent Option
Pack
ASF Tomcat
6.0 (64-bit) SP2 CR1
SDK9, 20
V 6.0 Agent APIs Yes Yes
Page 7 of 18
7. 64-BIT WEB AGENT AND SDK
Operating
System1,4, 6
Windo
ws
2003,
R2 (64-
bit)
Windows
2008 (64-
bit)
Windows
2008 R2
(64-bit)
Solaris
10
SPARC
(64-bit)
6
Solaris
10 x86
(64-bit)
HPUX
11.23
(64-bit
PA-
RISC)
HPUX
11.23
(64-bit
Itanium)
HPUX
11.31
(64-bit
Itanium)
AIX 5.3
(64-bit)
AIX 6.1
(64-bit)
AIX 7.1
(64 bit)
Red
Hat 4
(64-bit)
17,18
Red Hat 5
(64-bit) 17
Red Hat
6
(64-bit) 17
Oracle
Enterprise
Linux 5 (64-
bit)
Suse Linux
10 (64-bit) 8
Suse Linux
11 (64-bit) 8
Web Agents
Microsoft IIS
IIS 6.0 (64-bit) Yes
IIS 7 (64-bit) 20
Yes
IIS 7.5 (64-bit) 20
Yes
SunOne RP
Sun Java System
6.1.x (64-bit) Yes
Sun Java System
7.0 (64-bit)
(Includes
Updates/SPs)
Yes SP3
CR5
SP2 CR1
Yes
ASF Apache RP
2.0.x (64-bit) Yes Yes SP2 CR1 Yes Yes SP3 Yes
2.2.x (64-bit) SP2
CR1 Yes SP3 Yes
Yes Yes2
SP3 CR5 Yes Yes SP3
IBM HTTP RP
Server
7.0 (64-bit) SP3
CR2
8.0 (64-bit) SP3
CR 10
SP3
CR9
SP3
CR11
SP3 CR9
SP3 CR9
8.5 (64-bit) Yes SP3
CR12
SP3
CR12
Yes
Domino
8.5 64 bit4 SP3 CR5
8.5.1 64 bit4
SP3
CR1 SP3 CR5
8.5.x 64 bit SP3 CR7
Red Hat Apache
RP
2.0.x (64-bit) Yes
2.2.x (64-bit) Yes SP3 CR5
Oracle HTTP
Server
10.1.x (Apache
2.0.x) Yes
Yes
Page 8 of 18
Operating
System1,4, 6
Windo
ws
2003,
R2 (64-
bit)
Windows
2008 (64-
bit)
Windows
2008 R2
(64-bit)
Solaris
10
SPARC
(64-bit)
6
Solaris
10 x86
(64-bit)
HPUX
11.23
(64-bit
PA-
RISC)
HPUX
11.23
(64-bit
Itanium)
HPUX
11.31
(64-bit
Itanium)
AIX 5.3
(64-bit)
AIX 6.1
(64-bit)
AIX 7.1
(64 bit)
Red
Hat 4
(64-bit)
17,18
Red Hat 5
(64-bit) 17
Red Hat
6
(64-bit) 17
Oracle
Enterprise
Linux 5 (64-
bit)
Suse Linux
10 (64-bit) 8
Suse Linux
11 (64-bit) 8
11g
(Apache 2.2) (64-
bit)
Yes SP3 CR9
SP3
CR10
SP3
CR10 SP3 CR3
Yes SP3 CR2
HP Apache RP
2.0.5x (64-bit) Yes Yes
2.2.x (64 bit) SP3
CR10
Enterprise Jboss
Webserver
2.0 (64-bit) Yes
WAOP23
Tomcat 6 (64 bit) SP3 CR11 SP3 CR9 SP3 CR10 SP3 CR3
ASF Tomcat 7 (64
bit) SP3 CR9
SP3 CR12
Servlet Exec 6 (64
bit) SP3 CR6
IBM WAS 7.0 (64
bit) Yes
SP3
CR6
SP3 CR9 SP3 CR10
IBM WAS 8.0 (64
bit) SP3 CR9
SP3
CR11
SP3
CR10 SP3 CR10
SP3 CR10 SP3 CR9
IBM WAS 8.5 (64
bit)
Yes Yes
Fujitsu Interstage
Application Server
v9.2.0_011 (64-bit)
Yes
RedHat Jboss 5.1.2
(64-bit)
Yes
Yes
Legend: Yes = supported for SiteMinder v12.0 release and later
RP = Reverse Proxy is supported (if this is not listed for a web server that supports reverse proxy, this configuration is not supported with the Web Agent).
Notes: 1. Windows Server Standard/Enterprise/Web Editions supported. For Microsoft Windows Server 2003 & 2008 & 2008 R2, service packs (e.g., SP1, SP2) are supported in addition to base releases
shown in the matrix. Red Hat AS, Red Hat ES, Red Hat Enterprise Linux and Red Hat Enterprise Linux Advanced Platform are supported.
2. Agent support policy for Open Source (ASF) Apache:
For Apache 1.3.x, Apache 2.0.x, Apache 2.2 CA will specify the minimum version supported. Any problems reported will be fixed on the latest version of Apache.
As Apache releases new versions, CA cannot certify the agents against those releases immediately, but will plan to test and update the minimum supported version to the
newest Apache version in a following release. Meanwhile, customers may use the most recent web agent release with the newer version of Apache. If problems are
discovered, the issues should be reported to CA Support and CA will address the issues as escalations.
Page 9 of 18
For Suse Linux Enterprise Server and Red Hat AS/ES CA will support the version of Apache bundled with the OS.
Covalent web servers will not be specifically certified. However, Covalent uses underlying ASF Apache, and claims that as long as the underlying ASF Apache version is
certified, the corresponding Covalent version of Apache should work. Any issues found using web agents with Covalent Apache will be fixed only when they can be
reproduced using ASF Apache agents.
3. Hardware requirements:
Solaris on SUN SPARC, Solaris on x86 and x64 (Intel and AMD)
SUSE Enterprise Linux on x86 and x64 (Intel and AMD)
SUSE Enterprise Linux on s390 and s390x (IBM Mainframes)
Red Hat Enterprise Linux on x86 and x64 (Intel and AMD)
Red Hat Enterprise Linux on s390 and s390x (IBM Mainframes)
HP-UX on PA-RISC 2 and Itanium
AIX on PowerPC
z/OS on IBM Mainframes
4. 32-bit/64-bit Support:
The SiteMinder Policy Server is supported as a 32-bit application that can run on the following 64-bit Operating Systems: Solaris 9, 10 Sparc 64-bit, Red Hat 4, 5, 64-bit,
Windows 2008 64 bit and Windows 2008 R2 64 bit
SiteMinder Web Agents are supported as 32-bit applications running on 32-bit web servers running on 32-bit or 64-bit UNIX and Linux Operating Systems.
The 32-bit SiteMinder Web Agent for ASF Apache 2.2 (32-bit) is supported on Windows Server 2003 (64-bit).
The 32-bit SiteMinder Web Agent for Domino 8.5 (32-bit) is supported on Windows Server 2008 (64-bit).
The 32-bit SiteMinder Web Agent for Apache 2.0 (32-bit) is supported on Windows Server 2008 R2 (64-bit).
The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on Windows Server 2008 (64-bit).
The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on Red Hat 6 (64-bit) with 12SP3CR5.
The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on Suse Linux 10 (64-bit) with 12SP3CR5.
The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on AIX 7.1 (64-bit) with 12SP3CR5.
The 32-bit SiteMinder Web Agent for IHS 7.0 (32-bit) is supported on Suse Linux 11 (64-bit) with 12SP3CR10.
32-bit Web Agents are not supported with 64-bit Web Servers; you must match the bit level of the Web Agent with the bit level of the web server.
The SiteMinder Web Agent Option Pack is a 32-bit application that can run with a 32-bit Application Server on a 32-bit or 64-bit UNIX and Linux Operating Systems
with the exception of Windows.
The 32-bit SiteMinder Web Agent for Domino 8.x (64-bit) is supported on Windows Server 2008 R2 (64-bit) with 12SP3CR5.
The 32-bit SiteMinder Web Agent for OHS 10.1.x (Apache 2.0.x) (32-bit) is supported on OEL 5 (64-bit) with 12SP3CR6.
The 32-bit SiteMinder Web Agent for Dominos 8.5.3 FP1 (32-bit) is supported on Windows Server 2008 R2 (x64) with 12SP3CR05
The 32-bit SiteMinder Web Agent for Apache 2.2.2 (32-bit) is supported on Red Hat 6.3 (64-bit) with 12SP3CR11
The 32-bit SiteMinder Web Agent Option Pack for Red Hat Jboss 5.1 (32-bit) is supported on RedHat 5 (64-bit) with 12SP3CR12
The 32-bit SiteMinder Web Agent Option Pack for Red Hat Jboss 5.1 (32-bit) is supported on RedHat 6 (64-bit) with 12SP3CR12
5. The IIS 6.0 Web Agent only supports IIS 6.0 native mode, IIS 5 isolation mode is not supported.
6. Solaris Zones: The SiteMinder Web Agent is supported Solaris 10 sparse-root, whole-root, and global zones.
The SiteMinder Web Agent is supported on Solaris Logical Domains.
The SiteMinder Policy Server is supported on Solaris 10 sparse-root and whole-root zones.
The Policy Server is supported on the Solaris 10 global zone, as long as there are no other instances of the PS running in either sparse- or whole-root zones.
The SiteMinder Policy Server is supported on Solaris Logical Domains.
Page 10 of 18
7. Running multiple instances of the web server is supported.
8. Supported with all Suse Linux service packs. Any problems reported will be fixed on the latest service pack of Suse Linux.
9. Microsoft Virtual Server is supported as long as you are running a supported SiteMinder OS as the guest upon which SiteMinder is to be installed.
10. SiteMinder Components running on AIX LPAR are supported.
11. ISA Server 2006 is supported. The ISA Server acts as reverse proxy to the Web Agent protecting the web server. The Web Agent has been certified to run behind ISA Server
2006. Delegated Authentication is not supported.
12. Microsoft Exchange Outlook Web Access 2003 and Outlook Web Access 2007 are supported.
13. The CA Single Sign-On authentication scheme (smauthetsso) is supported for Windows, Solaris, and HPUX Policy Servers.
14. Unless otherwise stated, all 3rd
party and SiteMinder components are 32-bit. 64-bit components are explicitly stated.
15. Any supported Web Agent/web server combination can front-end a supported application server listed above for the Web Agent Option Pack, provided that the application
server also supports the web server as a proxy plug-in. The Web Agent Option Pack support includes application server clustering. Please see third-party vendor’s support
matrix for operating system support.
16. All HP-UX PA-RISC supported components do not support FIPS (AES Encryption) or IPv6.
17. Supported with all Red Hat updates. Any problems reported will be fixed on the latest Red Hat update. Security Enhanced Red Hat Linux is supported, please see vendor’s
documentation for setup instructions to enable third-party processes (such as SiteMinder) to run on the system.
18. When building SiteMinder custom auth schemes, or any other custom built components, you must use GCC version 3.2.2.
19. Requires use of manual configuration steps. Please refer to Support article TEC526135 20. Prior to the release of the r12 SP3 version of the SiteMinder Web Agent for IIS, the SiteMinder Agent for IIS was an ISAPI plug-in supporting the classic pipeline mode
ONLY; integrated pipeline mode was not supported. Integrated pipeline mode was introduced with the r12 SP3 version of the Agent. See Section 3 for information about that
newer version of the IIS Agent. 21. While Policy Server is supported on Windows 2003 and 2003 R2, CA is no longer able to obtain operating system fixes from Microsoft. CA will drop support for 2003 and
2003 R2 when support for Windows 2008 R2 is introduced.
22. CA SiteMinder support for Domino 8.5 and 8.5.1 (64 bit) requires the use of this hot fix; IBM PMR 51985,756,000.
23. Web Agent Option Packs that run on WebSphere and Weblogic support the JDK’s that are native to those application servers. For all other applications servers supported we
support the Sun/Oracle Java version 1.6.16 or later 1.6.xx version.
24. 64 bit SiteMinder Web agent for ASF Apache 2.2.x supports the 64 bit JBoss Enterprise Web Server v1.0
Page 11 of 18
8. POLICY SERVER DIRECTORY SUPPORT
DIRECTORY4 VERSION NUMBER POLICY
STORE6 SESSION
STORE
USER STORE PASSWORD
SERVICES
ADMIN UI EXTERNAL
AUTH/STORE
SunOne LDAP Directory 6 5.2 Yes Yes Yes Yes
Sun Java System Directory Server EE 3 v6.x Yes Yes Yes
7 SP2 CR1 SP2 CR1 SP2 CR1
Novell eDirectory 8.8.x Yes Yes Yes Yes
Microsoft Active Directory (AD) 7
Win 2003, 2003 R2 Yes Yes Yes Yes
Win 2008 Yes Yes Yes Yes
Win 2008 R2 SP3 SP3 SP3 SP3
Microsoft Active Directory in Application Mode
(ADAM) 7
Win 2003 (ADAM 1.x) Yes Yes Yes Yes
Microsoft Active Directory Lightweight Directory
Services (LDS) 7
Win 2008 (LDS) Yes Yes Yes Yes
Win 2008 R2 (LDS) SP3 CR2 SP3 CR2 SP3 CR2
Microsoft AD Global Catalog 7 Win 2003 Yes
Microsoft SQL Server 1, 7 SQL 2005, including cluster Yes Yes Yes Yes Yes
SQL 2008, including cluster SP3 SP3 SP3 SP3 SP3
SQL 2008 R2 including cluster SP3 CR8 SP3 CR8 SP3 CR8 SP3 CR8 SP3 CR8
SQL 2012 8 Yes Yes Yes
MySQL Enterprise Server 5.1 SP3 SP3 SP3 SP3
Oracle Internet Directory
10g R1 (10.1.4.0.1 and higher),
10g R2, 10g R3
Yes Yes Yes Yes
11g SP3 SP3 SP3 SP3 11gR1 Yes Yes Yes Yes
Oracle Directory Server Enterprise Edition
(previously known as Sun Java System Directory
Server EE)
11g, 11g R1, 11g R1 SP1 SP2 CR1 SP2 CR1 SP2 CR1
Oracle RDBMS 10g R2 Yes Yes Yes Yes Yes
11g, 11g R25 Yes Yes Yes Yes Yes
Oracle RAC 10g R2 Yes Yes Yes Yes Yes
11g, 11g R25 Yes Yes Yes Yes Yes
OpenLDAP 2.3.x Yes Yes Yes
2.4.x SP3 CR9 SP3 CR9 SP3 CR9
Domino LDAP 5.x, 6.0, 6.5 Yes
7 Yes
8 Yes
IBM Tivoli Directory Server 6.0 Yes Yes Yes Yes
6.1 Yes Yes Yes
6.2 SP2 CR1 SP2 CR1 SP2 CR1
6.3 SP3 CR9 SP3 CR9 SP3 CR9 SP3 CR9 Critical Path (IDS) 4.2 Yes Yes Yes
4.2.5 Yes Yes Yes
Siemens DirX 6.0D00, EE 2.0 Yes Yes Yes
8.0 Yes Yes Yes
CA Directory Server 12 SP1 Yes Yes Yes Yes
12 SP2 Yes Yes Yes Yes
Page 12 of 18
12 SPx Yes Yes Yes Yes
CA LDAP Server for z/OS (ACF-2) 12 Yes
CA LDAP Server for z/OS (TopSecret) 12 Yes
CA LDAP Server for z/OS (RACF) R 15 SP3 CR1
CA LDAP Server for Z/OS (ACF-2) R 15 SP3 CR5
IBM DB2 UDB 9.5 Yes Yes Yes Yes
Red Hat Directory Server 7.1 Yes Yes Yes
8.0, 8.1 Yes Yes Yes
8.2 Yes Yes
RadiantOne Virtual Directory Server (VDS) 4.5 Yes Yes
Notes: 1. Supported only on Windows
2. Includes support for Directory Proxy
3. For information on SiteMinder Policy Stores multi-master replication mode support, please see the Product Documentation.
4. For SiteMinder r12.0 SP2 & SP2 CR1 support for Oracle 11g database (including RAC) requires the use of the SiteMinder ODBC upgrade kit. Please see solution ID RS20803
on the CA Support site. Beginning with SiteMinder r12.0 SP3 support is provided by drivers included with Policy Server and the upgrade kit is no longer required.
5. When Sun Directory Server is on the same machine as an r12 SP2 or higher Policy Server on Windows, version 5.2 Patch 6 is required in order for the SiteMinder Console to
start.
6. For Microsoft Windows Server and for Microsoft SQL Server, service packs (e.g., SP1, SP2) are supported in addition to the base releases shown in the matrix. For SQL Server
the following editions are supported: Standard Edition One, Standard Edition, and Enterprise Edition.
7. Oracle Internet Directory 10g (10.1.4.0.1) is the minimum version required due to the requirement that SiteMinder r12.x policy servers need (directory) server side.
8. MS SQL 2012 Server running in MS SQL 2008 Mode (Compatibility Level – 100)
9. ONE VIEW MONITOR
ONE VIEW
MONITOR
Win2k3 Win2k8 Win 2K8 R2 Sol 9/10 Red Hat 4/5
IIS 6.0 SE 5.0 ISAPI,
SE 6.0 AS
IIS 7.0 SE 6.0 AS
IIS 7.5 SE 6.0 AS
Sun Java 6.0/6.1 SE 5.0, 6.0 AS SE 5.0 AS
Sun Java 7.0 SE 6.0 AS SE 6.0 AS
ASF Apache 2.0 SE 5.0 AS SE 5.0 AS
ASF Apache 2.2 SE 6.0 AS SE 6.0 AS
Page 13 of 18
10. FSS ADMINISTRATIVE UI
FSS Administrative UI
(Applet)
SUPPORTED VERSIONS
Web Servers Windows: IIS 6.0, IIS7.0 (classic pipeline mode only), IIS 7.5 (classic pipeline mode only
as of SP3 CR3) , ASF Apache 2.2
Solaris: ASF Apache 2.2, SunOne/Sun Java System 6.0, 6.1, Sun Java System 7.0 as of SP3
r12.0 SP2: HPUX: HP Apache 1.3.28, HP Apache 2.0, SunOne/Sun Java System 6.0, 6.1
Red Hat: ASF Apache 2.0.x, SunOne/Sun Java System 6.1, ASF Apache 2.2 and Sun Java
System 7.0 as of SP3.
Web Browsers Internet Explorer and Firefox
11. JVM REQUIREMENTS
Policy server JVM
Java Runtime Environment 1 r12.0 SP2: Sun/HP 1.5.0_03 (32-bit only) and above (1.5.x series only).
r12.0 SP3: Sun 1.6.0_16 (32-bit only) and above (1.6.x series only).
Scripting Interface 2
Operating Systems Windows 2003, 2003 R2, 2008
Solaris 9, 10
r12.0 SP2: HPUX 11.11
Red Hat Enterprise Linux 3.0, 4.0, 5.0
SDK JDK REQUIREMENTS
Web Agent APIs (32-bit) r12.0 SP2: Sun/IBM/HP 1.5.0_01 (32-bit only) and above
r12.0 SP3: Sun 1.6.0_16 and IBM/HP Java 1.6
Policy Server APIs (32-bit) r12.0 SP2: Sun/IBM/HP 1.5.0_01 (32-bit only) and above
r12.0 SP3: Sun 1.6.0_16 and above (1.6.x series only).
Web Agent APIs (64-bit) r12.0 SP2: Sun/IBM/HP 1.5.0_01 (64-bit only) and above
r12.0 SP3: Sun 1.6.0_16 and IBM/HP Java 1.6 and above.
r 12.0 SP3:Sun 1.7.0_05 and above
Notes: 1. JDK is required (as opposed to JRE) on Policy Server to support features found in the Policy Server Option Pack, which is now installed with Policy Server automatically. For r12.0 SP2: the
Policy Server Option Pack is not supported on HP-UX for use with the Web Agent Option Pack to enable federation.
2. SiteMinder r12.0 SP2 & SP3 ship with ActiveState Perl 5.8 on Windows and Solaris. The Scripting Interface is only supported with this version.
Page 14 of 18
12. ADMINISTRATIVE UI
APPLICATION SERVER VERSION/OPERATING SYSTEM
Admin UI with embedded application
server (recommended approach)
Windows 2003 R2, (32-bit)
Windows 2008 (32-bit)
Windows 2008 (64 bit) (From SM r12 SP3 CR3 onward)
Windows 2008 R2 (64 bit) (From SM r12 SP3 CR3 onward)
Solaris 9, 10 (SPARC)
Red Hat 4 (32-bit) and 5 (32-bit and 64-bit)
Red Hat 6 (64-bit) with 12SP3CR9
JBoss Enterprise Web Server 4.2.3: Windows 2003 R2, Solaris 9, 10, Red Hat 4, 5
WebLogic 9.2.x: Windows 2003 R2, Solaris 9, 10
9.2: Windows 2008 (32 bit) as of SP3 CR6
Notes:
1. Customers upgrading from SP1 will be continued to be supported on their external Object Stores as noted on the SP1 platform support matrix.
JBoss Enterprise Web Server 4.0.5 is supported for SP1 upgrades only.
Page 15 of 18
13. REPORT SERVER
Notes:
1. If using Microsoft SQL Server or Oracle for your Report Server database, the same database type must be used for both Report Server and Audit. For example, Microsoft
SQL Server cannot be used for Audit if Oracle Database is being used for Report Server. If using My SQL (embedded, recommended approach) for your Report Server
database, Oracle is supported as Audit Store. 2. Report Server is supported as a 32-bit application on Solaris 10 64-bit ONLY. The Oracle Net client must be 32-bit.
REPORT SERVER OS DATABASE VERSION DATA CONNECTOR REPORT SERVER REPORT
(CMS) DATABASE
AUDIT
STORE
VERSION OF
SITEMINDER
Windows 2003 R2
Microsoft SQL Server 2005 Microsoft ODBC MDAC 2.8
Microsoft ODBC SNAC (Native Client) Yes Yes
R12 SP2
Oracle 10g R2 Oracle Net Client 10.2 Yes Yes R12 SP2
Embedded MySQL (recommended
approach)
Yes
R12 SP2
Windows 2008 32 bit
Microsoft SQL Server 2005 Microsoft ODBC MDAC 2.8
Microsoft ODBC SNAC (Native Client) Yes Yes SP3 CR8
Microsoft SQL Server 2008 R2 Microsoft ODBC SNAC (Native Client) Yes Yes
SP3 CR9
Oracle 10g R2 Oracle Net Client 10.2 Yes Yes
SP3 CR8
Embedded MySQL (recommended
approach)
Yes
SP3 CR8
Windows 2008 64 bit
Microsoft SQL Server 2005 Microsoft ODBC MDAC 2.8
Microsoft ODBC SNAC (Native Client) Yes
Yes SP3 CR9
Microsoft SQL Server 2008 R2 Microsoft ODBC SNAC (Native Client) Yes Yes
SP3 CR9
Oracle 10g R2 Oracle Net Client 10.2 Yes Yes
SP3 CR9
Embedded MySQL (recommended
approach)
Yes
SP3 CR9
Solaris 9, 102
Microsoft SQL Server 2005
Oracle 10g R2 Oracle Net Client 10.2 Yes Yes R12 SP2
Embedded MySQL (recommended
approach)
Yes
R12 SP2
Page 16 of 18
14. POLICY SERVER COMPATIBILITY WITH AGENTS
Policy Server r12.0 SP2 & SP3 support previous versions of Web Agent, Secure Proxy Server (SPS), ERP Agent, ASA Agent, and SAML Affiliate Agent with the
following caveats:
o 6.x versions of Web Agent, SPS, ERP Agent, ASA Agent, and SAML Affiliate Agent and 5.x versions of ERP Agent do not support IPv6 or FIPS Mode (can
only connect to 12.x Policy Server in FIPS Compatibility Mode).
o Web Agent, SPS, ERP Agent, ASA Agent, and SAML Affiliate Agent versions prior to r12.0 SP3 cannot be installed on the same machine as an r12.0 SP3 or
higher Policy Server.
Beginning with r12.0 SP3, Web Agents at a higher CR (cumulative release) number are supported with Policy Servers at lower CR number provided both are the same
Service Pack.
The version of the Web Agent Option Pack must match the Policy Server version, including the Service Pack and CR version. In addition, if the Web Agent and Web
Agent Option Pack are installed on the same machine, they must also be the same version, including the Service Pack and CR version.
15. RSA ACE SERVER AND AUTHENTICATION MANAGER
RSA ACE Server 6.0, 6.1 and RSA Authentication Manager Server 7.1 are supported with Windows Server 2003 Policy Servers (using “RSA Authentication Agent 6.1.2 for
Microsoft Windows”).
RSA ACE Server 6.0, 6.1 and RSA Authentication Manager Server 7.1 are supported with Solaris 9, 10 and Red Hat 4 and 5. Policy Servers (using “RSA Authentication
Agent API 6.1 for C”).
Starting with SiteMinder r12 SP3 CR6, RSA Authentication Manager 7.1 is supported with the SiteMinder Policy Server running on Windows Server 2008 (x86, 32 bit)
Starting with SiteMinder r12 SP3 CR12 RSA Authentication Manager 8 is supported with Windows 2008 R2, Windows Server 2008 (x86, 32-bit), Solaris 10 (32-bit), RHEL
5.x (32-bit) Policy Servers.
Starting with SiteMinder r12 SP3 CR09 RSA Authentication Manager 8 is supported with Windows 2008 SP2 (32-bit) Policy Server.
16. IRECORDER
iRecorder with Oracle 9i is supported.
iRecorder is not supported on Windows 2008 and later.
17. IPV6 SUPPORT STATEMENT
SiteMinder Policy Server on Windows, Solaris, and Red Hat offers IPv6 support for communication from and to Web Agents (subject to IPv6 support by OS/web server
vendor).
SiteMinder Policy Server on Windows does not support IPv6 for the purpose of connecting to the policy, user, session, key, and/or audit stores.
SiteMinder Policy Server on Windows, Solaris, and Red Hat offers IPv6 support for communication from and to the SiteMinder Admin UI running either on any of its
supported application server platforms.
SiteMinder Policy Server, on Solaris or Red Hat, Data Direct drivers, does not support Oracle databases over IPv6 for Policy Stores, Key Stores, Session stores, and Audit
Databases.
18. SUPPORT FOR ARCOT ADVANCED AUTHENTICATION PRODUCTS
SiteMinder 12.0 SP2 and SP3 are supported with Arcot WebFort Authentication Adapter 1.0 and WebFort 5.4.0.
Page 17 of 18
SiteMinder 12.0 SP3 is supported with Arcot Adapter 2.1 with WebFort version '5.4.1.2 and Arcot: Adapter 2.1.6 with WebFort version 6.0.1.1
SiteMinder 12.0 SP3 is also supported with Arcot Adapter 2.2 with WebFort version 6.2.x and Riskfort 2.2.6
SiteMinder 12.0SP3 CR2 and later are supported with Arcot WebFort Authentication Adapter 2.2.1 and WebFort 6.2.x
SiteMinder 12.0- SP3 CR2 and later are supported with Arcot Adapter 2.2.1 with RiskFort version 2.2.6
SiteMinder 12.0- SP3 CR2 and later are supported with Arcot A-OK Console version 2.10 and Adapter 1.2.1
19. REASONABLE COMMERCIAL EFFORT STATEMENT
CA Technical Support will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests that involve the use of currently supported versions of CA SiteMinder on or with “unsupported” platforms as follows:
o CA Technical Support will accept support incidents (support requests) involving a software platform of a combination of software platforms that is not officially supported per the then-current CA published platform support matrices. CA will troubleshoot the issue up to the point that CA has reason to believe that the problem is related to the use of software that is not specified in a then-current platform supported matrix. At such point, CA shall require that the customer reproduce the problem on a fully supported combination of platforms before CA proceeds in troubleshooting the incident.
o Linux Reasonable Commercial Effort Statement
This Support Statement applies to CA SiteMinder that offers documented support for one or more Linux Reference Platforms.
CA strives to meet our clients’ diverse and ever changing needs. CA products support and manage many of today's leading platforms, operating systems and applications across the IT enterprise.
A Linux Reference Platform is a specific version of a particular Linux variant, such as Red Hat Enterprise Server 5/6, which is used in CA development, QA, and Support, and is documented as a supported environment in which to run CA SiteMinder.
To verify the Linux Reference Platforms supported for CA SiteMinder , review the system requirements section of the respective product
documentation, or check with CA Support.
Many of our clients use variants of the Linux operating system as their production operating system platform, for example Oracle Enterprise Linux, SUSE, etc.
Some of those Linux variants claim compatibility (compatibility modes) with CA SiteMinder supported Linux Reference Platforms.
Note: CA does not test every possible configuration of CA SiteMinder running on the many Compatible Linux Variants available and cannot certify specific client configurations.
Page 18 of 18
To facilitate a quick resolution and isolate the root cause of any potential product issue encountered running on Compatible Linux Variants, CA is
establishing the following support protocol for CA SiteMinder operated in these environments:
o The current GA version of a Linux Reference Platform and the prior major version of that environment are supported. Any exceptions will be noted in respective product documentation.
o The client is responsible for properly configuring their Linux Variant to be compatible with a Linux Reference Platform supported by CA SiteMinder. o The client is responsible for having an active maintenance agreement for both their CA SiteMinder and for the Compatible Linux variant. o While CA does not require that clients recreate each issue on a Linux Reference Platform before contacting support, we can request that the client
diagnose and troubleshoot specific issues without the Linux Variant "variable" through reproducing the issue on the Linux Reference Platform. CA will only do this when we have reason to believe the issue is directly related to the Compatible Linux Variant environment.
o While functional problems are rare under Compatible Linux Variants, problems may occur related to the third-party components embedded in applications, and those embedded products’ support of Compatible Linux Variants may be limited or unavailable. Diagnosis and resolution of this class of problem may require the client to return to a Linux Reference Platform.
o Compatible Linux Variants are diverse; CA may require extra time to understand, collect data, troubleshoot and possibly reproduce reported issues.
o If CA Support cannot directly identify the root cause as a CA or a Compatible Linux Variant issue, client can open a support issue with their Compatible
Linux Variant vendor and any other necessary third-party vendors to expedite the resolution of the issue. CA, the vendor(s), and the client will work together toward a quick resolution where there business relationship mechanism to do so. CA, Novell, and many other software vendors belong to the Technical Support Alliance Network (http://www.tsanet.org) that may be engaged by either CA or the Compatible Linux variant vendor if and when the need for a third-party arises as long as active maintenance exists for the CA and third party vendor’s product. Note if the customer does not have a Vendor support agreement for the Linux variant, there is no third party CA may work with.
o Any known issues with running CA SiteMinder on specific Compatible Linux Variants will be noted in the respective product documentation.
20. THIRD PARTY PRODUCTS END OF SUPPORT STATEMENT
When a third party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third party product or any SiteMinder components
that interoperate with the third party product. Third party products under extended vendor support are not supported by CA. Examples of third party products are: web server,
application server, operating system, directory, database, etc.
21. BROWSER SUPPORT
Browser support: SiteMinder supports any browser that supports HTTP 1.x requests, HTTP cookies, and where appropriate SSL/TLS.
22. VIRTUALIZED ENVIRONMENT SUPPORT
SiteMinder follows the general CA Policy for Virtualization noted here https://support.ca.com/irj/portal/phpsupcontent?techDocAccess=N&contentID=189545
