2.2 System Requirements

The following sections provide requirements for the ZENworks Endpoint Security Management components:

2.2.1 Server Requirements

The server (or servers) where you install the Management Service and Policy Distribution Service must meet the requirements listed in the following table:

Item

Requirement

Operating System

Microsoft Windows* Server 2003* (32-bit only).

Processor

Determined by the operating system.

Disk Space

500 MB if the Microsoft SQL database is not installed locally.

If the Microsoft SQL database is local, follow the best practices outlined for SQL database disk space.

Web Server

Microsoft Internet Information Services (configured for SSL).

.NET Framework

Version 3.5,

Ports

If the Management Service and Policy Distribution Service are on different servers:

  • The Management Service server must allow inbound and outbound traffic on the following ports: 80, 443, 53, 137-139 (if using NETBIOS to resolve names), 3091.

  • The Management Service server must allow inbound traffic on port 1433 if the Policy database is not located on the Policy Distribution Service server. This allows the Policy Distribution Service to contact the Management Service on port 1433 to access the Policy database.

  • The Policy Distribution Service server must allow inbound and outbound traffic on port 80. It must also allow outbound traffic on port 1433 if the Policy database is not on the Policy Distribution Service server; this allows the Policy Distribution Service to contact the Management Service on port 1433 to access the Policy database.

These ports assume that IIS is configured with the standard port assignments.

In a single-server configuration (both the Management Service and the Policy Distribution Service on the same server), the server cannot be a Primary Domain Controller. See Section 2.1.1, Consolidated Configuration (Single Server).

2.2.2 Client Requirements

The endpoint devices where you install the Security Client must meet the requirements listed in the following table:

Item

Requirement

Security Client on Windows 2000 or Windows XP

One of the following versions:

  • Windows 2000 SP4

  • Windows XP (32-bit) SP2 and SP3

The operating system must have Windows Installer 3.1 installed and all operating system updates applied.

Not all Security Client features are available on both operating systems. For a list of feature support based on operating system version, see Security Client Differences Based on Windows Version in the ZENworks Endpoint Security Management 4.1 Administration Guide.

Security Client on Windows Vista* or Windows 7

One of the following versions:

  • Windows Vista SP1 (32-bit)

  • Windows 7 (32-bit)

The device must have .NET 3.5 SP1 installed. Windows 7 comes with .NET 3.5 SP1, Windows Vista does not. You must update Windows Vista devices to .NET 3.5 SP1.

Not all Security Client features are available on both operating systems. For a list of feature support based on operating system version, see Security Client Differences Based on Windows Version in the ZENworks Endpoint Security Management 4.1 Administration Guide.

Processor

Determined by the operating system. The Security Client is supported only on 32-bit operating systems. However, those operating systems can be using 32-bit or 64-bit processors as supported by the operating system.

Disk Space

  • 5 MB required, 5 additional MB recommended for reporting data.

2.2.3 Management Console Requirements

The machine where you install the Management Console must meet the requirements listed in the following table:

Item

Requirement

Operating System

Windows XP SP1 through SP3

Windows 2000 SP4

Windows Server 2003

SQL Server

If you use the standalone Management Console (meaning that you are using the non-directory service configuration), the Management Console machine must have a supported SQL server installed.

Active Directory Domain Membership

If you are using Active Directory as your directory service, the machine where you install the Management Console must be a member of the Active Directory domain to which you are connecting or have a trust relationship with the domain.

2.2.4 Directory Services Requirements

The directory service used with ZENworks Endpoint Security Management must meet the requirements listed in the following table.

Item

Requirement

Directory Service

Microsoft Active Directory

Novell eDirectory (Novell Directory Services for Windows is not supported)

Active Directory Domain Controller

The Active Directory Domain Controller (for any domains you plan to connect to for user and computer data) must reside on Windows Server 2000 with SP4, Windows Server 2003, or Windows Server 2008.

eDirectory Workstation objects

ZENworks Endpoint Security Management supports policy assignment to users or computers.

Active Directory provides both User and Computer objects as base functionality.

Novell eDirectory provides User objects as base functionality. Workstation objects are available only all of the following are true:

  • Novell ZENworks 7 Desktop Management is installed with the eDirectory schema extended to support Workstation objects.

  • The ZENworks 7 Desktop Management Agent is installed on the endpoint devices. Because The ZENworks 7 Desktop Management Agent is supported only on Windows 2000/XP devices, you cannot assign computer-based security policies to Windows Vista/7 devices

  • The devices are registered as ZENworks workstations in eDirectory.

2.2.5 SQL Server Requirements

The SQL server used with ZENworks Endpoint Security Management must meet the requirements listed in the following table.

Item

Requirement

Version

When integrating ZENworks Endpoint Security Management with a supported directory service (Active Directory or eDirectory), you must use one of the following versions:

  • Microsoft SQL Server 2000 SP4 (Standard or Enterprise Edition)

  • Microsoft SQL Server 2005 (Standard or Enterprise Edition)

  • Microsoft SQL Server 2008 (Standard or Enterprise Edition)

If you are not integrating with a supported directory service (meaning that you are using the non-directory service configuration), you must use one of the following versions and it must be installed on the same machine as the Management Console:

  • Microsoft SQL Server 2000 SP4 (Express, Standard, or Enterprise Edition)

  • Microsoft SQL Server 2005 (Express, Standard, or Enterprise Edition)

  • Microsoft SQL Server 2008 (Express, Standard, or Enterprise Edition)

Authentication Mode

Server authentication must be set to mixed mode to allow both SQL Server and Windows Authentication mode authentication