product description

Novell Access Manager 3.1 SP2 is a comprehensive access management solution that provides secure access to Web and enterprise applications. It also provides seamless single sign-on across technical and organizational boundaries, based on industry standards including Secure Assertions Markup Language (SAML) and Liberty Alliance protocols.

Access Manager 3.1 SP2 combines simplified deployment and administration with advanced capabilities, such as multi-factor authentication, role-based access control, Web single sign-on, data encryption, and SSL VPN.

key features

• Comprehensive Access Management

  • Secure access to Web and enterprise applications via the integrated Access Gateway and SSL VPN.
  • Web single sign-on as a seamless experience for users as they navigate between different protected systems.
  • Data encryption supported by the Access Gateway and the Web servers.
  • Fine-grained access control to Java applications via the integrated J2EE agents.
  • Client integrity checking to ensure that clients meet corporate requirements before they are granted access to enterprise applications.

   

• Identity Federation

  • Federation support using the SAML 1.1, SAML 2.0, Liberty Alliance, Windows CardSpace, and WS-Federation protocols.
  • Federated provisioning, which automatically creates a user identity upon a federation request, in order to reduce management and improve the user experience.
  • Federation for existing Web applications, with no modifications or additional software required.

   

• Security Policies

  • Role policies, which are a new and enhanced way to use Role-Based Access Control (RBAC) by associating an administrator-authored policy to any role. The policy must be satisfied before the role can be activated.
  • Policy management and enforcement. All Access Manager components are guided by user-definable policies that are routinely enforced and logged for regulatory compliance reporting.

   

• Simple Deployment and Management

  • Plug-and-play architecture for simple deployment and management of secure services. Access Manager requires no additional software or modifications in order to secure standard Web applications and enable federation.
  • Browser-based management of all services, including certificate distribution to Access Manager components.
  • Fault tolerance and redundancy with Access Gateway device groups and Identity Server device clustering.
  • Delegated administration.

recommended system requirements

Because all of the components can be installed on separate machines, the basic requirements are listed for each device. Please refer to the product installation documentation for additional information.

• Administration Console Server Requirements

• Windows Administration Console: Windows Server 2003 or Windows 2008 R2 Enterprise Server
• Linux Administration Console: SLES 10 SP2 or later, SLES 11, or SLES 11 SP1. The following software must be installed:
  • gettext
  • python
  • compat
• No LDAP software, such as eDirectory or OpenLDAP, can be installed
• No other version of iManager can be installed
• 4 GB RAM
• 100 GB hard disk
• Static IP address
• ZIP and Unzip utilities for the backup and restore procedure
• Supported browsers included Microsoft* Internet Explorer 7.x or 8.x and Firefox 3.5.x or 3.6.x.
  • Browser pop-ups must be enabled

   

• Identity Server Requirements

  • 100 GB hard disk
  • 4 GB RAM
  • Dual CPU or Core (3.0 GHz or comparable chip)
  • Windows Identity Server: Windows Server 2003 or Windows 2008 R2 Enterprise Server
  • Linux Identity Server: SLES 10 SP2 or later, SLES 11, or SLES 11 SP1. The following software must be installed:
    • gettext
    • python
    • compat
  • No LDAP software, such as eDirectory or OpenLDAP, can be installed
  • Static IP address and an assigned DNS name (host name and domain name)

   

• Access Gateway Appliance Requirements

  • 100 GB hard disk
  • 4 GB RAM
  • Dual CPU or Core (3.0 GHz or comparable chip)
  • Static IP address and an assigned DNS name (host name and domain name)
  • Supports x86-32 and x86-64 hardware, but runs in 32-bit mode

  The Access Gateway Appliance has no software requirements. The installation program for the Access Gateway Appliance re-images the hard drive, embeds the SLES 11 operating system, then configures the embedded operating system for optimal performance.

• Access Gateway Service Requirements

  • 100 GB of disk space
  • 4 GB RAM
  • Dual CPU or Core (3.0 GHz or comparable chip)
  • Static IP address and an assigned DNS name (host name and domain name)
  • Windows 2008 R2 Enterprise Server or SLES 11, 64-bit operating system on 64-bit hardware

   

• SSL VPN Server Requirements

  • 100 GB of disk space
  • 4 GB RAM
  • Dual CPU or Core (3.0 GHz or comparable chip)
  • One of the following operating systems:
    SLES 10 SP1, SP2, or SP3, 32-bit or 64-bit
    SLES 11, 32-bit or 64-bit
  • gettext

   

• SSL VPN Client on Windows
  • Windows 2000 SP4
  • Windows XP SP2, Vista, and 7, 32-bit and 64-bit (Note: 64-bit is supported only in Enterprise Mode).
  • Internet Explorer 6.0 (SP2) or later, 7.0 and 8.0
  • Mozilla Firefox 2.x or 3.0.X or 3.5

   

• SSL VPN Client on Linux
  • SUSE Linux Enterprise Desktop 10 and 11, 32-bit or 64-bit
  • Firefox 2.0 or later, 2.x, 3.0.X and 3.5
  • JRE version 1.5.0_11 or later
  • OpenSSL 0.9.7
  • Shells: bash and xterm

   

• SSL VPN Client on Macintosh
  • Mac PPC 10.4 Tiger
  • Mac Intel 10.5 Leopard
  • Mac OSX 10.6 Snow Leopard
  • Mac Safari browser version 2.0.4 build 412 or later, or Firefox 2.0 or later, 3.0.X or 3.5
  • JRE version 1.5.0_11 or later
  • OpenSSL 0.9.7
  • bash shell

   

• Virtual Machine Requirements

  The virtual machine must have enough resources. You need to dedicate the minimum requirements that a physical machine would require for the Access Manager component. To have performance comparable to a physical machine, you need to increase the memory and CPU requirements. For individual component requirements, see the information above.

  • The VMware ESX Server version 3.5 or later
  • Xen Virtualization on SUSE Linux Enterprise Server 10 SP2 or later

   

• J2EE Requirements

  • Access Manager ships with J2EE Agents for JBoss, WebLogic, and WebSphere. They are available as a Web download from Novell. As other agents become available, they will be posted on the Web for download.
  • The JBoss agent requires JBoss 4.2.3, JRE 1.5, and one of the following OSs: SLES 10, Windows 2003, or Red Hat Enterprise Server 5
  • The WebSphere agent requires WebSphere 6.1, JRE 1.5, and one of the following OSs: SLES 10, Windows 2003, or AIX 5.3
  • The WebLogic agent requires BEA WebLogic 9.2 or 10.x, JRE 1.5, and one of the following OSs:  SLES 10, Solaris 10, or Windows 2003

access to installation instructions

For information about installing Access Manager, see the Novell Access Manager 3.1 SP2 Documentation Web site.