Installing PolicyServer

Procedure

1. Verify that all system requirements are met.
   See PolicyServer System Requirements.
2. Run PolicyServerInstaller.exe
   The PolicyServer Installer opens.
3. At the PolicyServer Services screen, click Install at the right.
4. At the Product Legal Notice screen, read the license agreement and accept the terms by clicking Accept.
5. At the Product Activation screen, select your licensing method:
   • Click Register Online to register your product and receive an Activation Code.
   • Select Use a full license if you have an Activation Code to specify your code and activate full functionality.
   • Select Use a trial license to evaluate a managed Endpoint Encryption configuration for 30 days.

     Note During the trial period, PolicyServer functions normally with all agent management, unlimited devices, and up to 100 users. After 30 days, contact a Trend Micro representative for more information about the Registration Key and Activation Code.

6. At the Create Enterprise Name and Administrator Logon screen, specify the credentials for your main Enterprise administrator account and then click Continue.

   Option	Description
   Enterprise Name	The name of the Enterprise. This will be required for user and device authentication.
   Administrator	The first Enterprise Administrator account user name.
   Password	The first Enterprise Administrator account password.
   Confirm Password	Confirm the first Enterprise Administrator account password.

   Enterprise administrator accounts can manage all device, user, and policy settings from PolicyServer MMC and Control Manager. You can create more Enterprise administrator accounts at a later time. If you are upgrading or reinstalling PolicyServer, the Enterprise administrator account that you specified previously appears automatically.
7. At the Windows Service Logon screen, click Continue.
8. At the Database Administrator Logon screen, choose your database connection method:
   • Select Microsoft SQL Express to create a new database instance.

     Note Use Microsoft SQL Express only for networks of fewer than 1500 endpoints, or for evaluation purposes. Microsoft SQL Express is only available in environments that do not have SQL Server configured.

   • Select SQL Server to specify an existing Microsoft SQL Server instance.
     If you select SQL Server, specify the following information:

     Field	Description
     SQL Server	The SQL Server host name or IP address. Note For environments with multiple SQL Server instances, append the SQL instance to the end of the database host name or IP address used. Use the following syntax to specify an instance: <hostname_or_IP_address>\<database_instance>
     User name	The user name with the sysadmin role for the specified SQL Server instance.
     Password	The password for the sysadmin account.

   • Select Use a different log database server to specify a different SQL Server instance for log data.
9. At the Create Database Logon screen, specify a new database account for the PolicyServer Windows Service to use for all database transactions.

   Note Do not specify the sysadmin account.

10. At the Endpoint Encryption Service screen, specify the following parameters:

    Option	Description
    Port number	Specify the port number that the PolicyServer MMC, Control Manager and Endpoint Encryption 6.0 Patch 1 agents use to communicate with PolicyServer (default: 8080). Note In environments with legacy agents, Trend Micro recommends using port 8080 for the Admin Web Service and port 80 for the Client Web Service. The port number must be a positive integer between 1 and 65535.
    Automatically generate a new self-signed certificate	Select this option if no certificate is available. The installer generates a certificate for encrypted communication.
    Specify an existing certificate	Select this option to use a specific certificate. There are no limitations or requirements for specifying an existing certificate except that the certificate is correctly formatted.

11. Click Continue.
12. At the Legacy Agent Service screen, select the location that legacy Endpoint Encryption agents (version 3.1.3 and below) use to communicate with PolicyServer, then click Continue.
13. To immediately install PolicyServer MMC, click Yes. To install PolicyServer MMC at a later time or on a separate endpoint, see Installing PolicyServer MMC.
    The installation process begins.
14. When prompted, click OK.
15. Click Finished.
16. Click Exit to close the PolicyServer installer.
17. Add the initial Endpoint Encryption users and groups.
    See Configuring PolicyServer.