ISIM – IBM Security Identity Manager

ISIM - IBM Security Identity Manager (formerly know as Tivoli Identity Manager - TIM) is an effective Identity Access Management (IAM) tool that an organization can use for centralize identity management and governance across the enterprise for improved security and compliance. ISIM automates the creation, modification, recertification and termination of identities throughout the user life cycle. It also includes enhanced reporting and analytic capabilities to monitor user entitlements and activities. ISIM can be integrated with several applications and use to manage complete identity (user) life cycle in a centralized manner and robust security enhancements.

Like every software installation procedure, first we need to create and follow proper planning and design for ISIM installation and deployment.

ISIM comprises of below components:

1. Database Server: Used to store transactional and historical data that include schedules and audit data.
Supported database products are IBM DB2 database, Oracle database, and MS SQL Server database.

2. Directory Server:  Used to store current state of managed identities including user account and organizational data.
Supported products are IBM Tivoli Directory Server, Oracle Directory Server Enterprise Edition.

3. IBM Tivoli Directory Integrator: TDI is an optional installation component that synchronizes and manages information exchanges between applications or directory sources.

4. WebSphere Application Server: The WebSphere Application Server runs a Java virtual machine, providing the runtime environment for the enterprise application code. The application server provides containers that specialize in running specific Java application components.

5. HTTP server and WebSphere Web Server plug-in: An HTTP server is an optional component that provides administration of IBM Security Identity Manager through a client interface in a web browser.

6. ISIM Security Identity Manager: The IBM Security Identity Manager Server and its adapters provision identities to a set of heterogeneous resources.

7. ISIM Security Identity Manager Adapters: IBM Security Identity Manager adapters enable the IBM Security Identity Manager Server to connect to a set of heterogeneous resources. These resources can be operating systems, data stores, or other applications, to provision identities.

ISIM 6.0 Installation Key Points

In order to install ISIM 6.0, one need to follow proper planning and deployment of all its prerequisite compatible components and procedures. Below is the step by step key points for the ISIM 6.0 installation procedure in sequence. For complete details please go through IBM knowledge center documents.

Products and versions used for this virtual setup of ISIM 6.0:

Product Name	Base Version	Fix Pack Version
VMware® Workstation 12 Pro	12.5.2 build-4638234
Linux Operating System	Linux (CentOS release 6.6)
DB2	9.7	4
Middleware Configuration Utility for ISIM 6.0	6.0
GSKit	8.0.14.43
IBM Tivoli Directory Server (ITDS)	6.3	26
IBM Installation Manager	1.8.1
IBM WAS Network Deployment	8.5.0.0	8.5.5.4
IBM Tivoli Directory Integrator (ITDI)	7.2
IBM Identity Security Manager(ISIM)	6.0.0.0	FP 10 and IF0001
IBM Update Installer	7.0.0.31

      1.      Configure the operating system

a.      Configure IP and host-name.

b.      Configure Ports for proper network communication between applications.

c.      Security configuration like disable SELINUX in Linux OS and firewall configuration.

d.      Check and install required prerequisite binaries/libraries/rpm packages as below:

                                                    i.     compat-libstdc++-33-3.2.3-69

                                                   ii.     compat-db-4.6.21-15                                   

                                                  iii.     libXp-1.0.0-15.1

                                                  iv.     libXmu-1.0.5-1

                                                   v.     libXtst-1.0.99.2-3

                                                  vi.     pam-1.1.1-4

                                                vii.     libXft-2.1.13-4.1

                                               viii.     gtk2-2.18.9-4

                                                  ix.     gtk2-engines-2.18.4-5

       2.      Database installation and configuration

a.      IBM DB2 installation

b.      IBM DB2 fix pack installation

c.      IBM DB2 configuration using IBM Middleware Configuration Utility for ISIM

       3.      LDAP – IBM Tivoli Directory Server installation and configuration

a.      GSKit installation (used for SSL configuration in IBM Tivoli Directory Server)

b.      IBM Tivoli Directory Server installation

c.      IBM Tivoli Directory Server fix pack installation

d.      IBM Tivoli Directory Server configuration using Middleware Configuration Utility for ISIM 6.0

       4.      IBM Tivoli Directory Integrator and ISIM adapters installation (optional)

       5.      Installation and configuration of IBM WebSphere Application Server

a.      IBM Installation Manager installation

b.      IBM WebSphere Application Server installation

c.      IBM WebSphere Application Server fix pack installation

d.      IBM WebSphere Application Server security configuration

       6.      IBM Tivoli Directory Server Web admin tool deployment in IBM WebSphere Application Server

       7.      IBM Security Identity Manager installation

       8.      Update Installer installation used for ISIM fix pack installation

       9.      ISIM fix pack installation

       10.    ISIM Interim fix pack installation

       11.    Verification of ISIM installation