Installation Guide

VMware vCenter Protect Essentials Plus

Configuration Management

Copyright and Trademarks

Copyright
Copyright 2006 2011 VMware, Inc. All rights reserved. This product is protected by U.S. and
international copyright and intellectual property laws. VMware products are covered by one or
more patents listed at http://www.vmware.com/go/patents.
No part of this document may be reproduced or retransmitted in any form or by any means
electronic, mechanical, or otherwise, including photocopying and recording for any purpose other
than the purchasers personal use without written permission of VMware, Inc.

Trademarks
vCenter, VMware, and the VMware logo are either registered trademarks or trademarks of
VMware, Inc. in the United States and/or other jurisdictions. All other marks and names
mentioned herein may be trademarks of their respective companies.

Document Information and Print History

VMware vCenter Protect Essentials Plus Configuration Management Installation Guide
Document number: N/A

ii

Date

Version

Description

March 2009
August 2009

4.0
4.1

December 2009

4.2

November 2011

4.3

Initial release of the NetChk Configure Installation Guide.

Updated system requirements and prereq links, added SQL
Server dialog to installation process, ref to Upgrade Gd.
Add support for Windows 7 and Windows Server 2008
Family R2 (excluding Server Core).
Rebrand to VMware. Update with new installation dialogs.

vCenter Protect Essentials Plus Configuration Management Installation Guide

Table Of Contents

Table Of Contents
Welcome to VMware vCenter Protect Essentials Plus Configuration Management 4.3 ..............1
Who Should Use This Guide? ................................................................................................1
About vCenter Protect Essentials Plus Configuration Management ...........................................2
Editions of the Program........................................................................................................2
System Requirements ..........................................................................................................3
Console ...........................................................................................................................3
Clients .............................................................................................................................4
Installation .............................................................................................................................6
Obtaining the Software ........................................................................................................6
Installing the Prerequisites ...................................................................................................6
Automatic installation .......................................................................................................6
Manual installation ...........................................................................................................6
Verifying Security Policy Permissions .....................................................................................8
Performing a New Installation ..............................................................................................9
Getting Started ..................................................................................................................... 12
Starting vCenter Protect Essentials Plus - Configuration Management ................................... 12
Activating vCenter Protect Essentials Plus - Configuration Management................................. 12
Version and License Information ......................................................................................... 14
How Licenses are Tracked .................................................................................................. 14

vCenter Protect Essentials Plus Configuration Management Installation Guide

iii

Table of Contents

This page intentionally left blank.

The document is designed for duplex printing.

iv

vCenter Protect Essentials Plus Configuration Management Installation Guide

Welcome

Welcome to VMware vCenter Protect Essentials

Plus Configuration Management 4.3
Welcome to VMware vCenter Protect Essentials Plus Configuration Management, the next
generation of computer security configuration and compliance assessment for Windows-based
machines. vCenter Protect Essentials Plus Configuration Management enables you to
understand, check, assess, audit, and enforce policy checks on the machines in your networks. It
is also an excellent tool for enabling you to understand and meet regulatory compliance
requirements and other information security needs.
vCenter Protect Essentials Plus Configuration Management is simultaneously an information
center, an implementation tool, and a vehicle for proving compliance with regulatory
requirements.

As an information center it places a detailed catalog of security procedures, scripts, and

other security configuration information at your fingertips. You can use this information
to gain an understanding about a number of different policy checks and why you may
want to implement those checks. It also provides predefined scripts that you can use on
machines in your network to implement the various policy checks.

As an implementation tool it provides you with the ability to scan Windows-based

machines in your network and assess the machines for their adherence to specific policy
settings. How each scanned machine "grades out" is dependent upon how strict a policy
you use when evaluating the machines. You can use the tool to interpret the results of
the scan and to update wayward machines, bringing them in line with your particular
corporate security policies.

As a compliance tool, the reports that are automatically generated can be used to
provide auditors with evidence of your company's compliance with regulatory
requirements. They can also be used to assess your readiness prior to an external audit.

Who Should Use This Guide?

This guide should be used by anyone installing vCenter Protect Essentials Plus Configuration
Management 4.3 for the first time. If you are upgrading from a previous version do not use this
guide. Instead, please see the upgrade guide available on our Web site:
http://www.shavlik.com/support/onlinehelp.aspx

vCenter Protect Essentials Plus Configuration Management Installation Guide

About vCenter Protect Essentials Plus Configuration Management

About vCenter Protect Essentials Plus

Configuration Management
Editions of the Program
There are several editions of the program. The edition you have depends upon the type of
program license you purchased. Each edition provides a different level of capabilities.

vCenter Protect Essentials Plus Configuration Management, Trial Edition

vCenter Protect Essentials Plus - Configuration Management is available on a trial basis.
This enables you to test all the capabilities of vCenter Protect Essentials Plus Configuration Management, but only for 45 days. When the trial license expires the
program will only allow you to scan and remediate the local machine.

vCenter Protect Essentials Plus Configuration Management, Audit Edition

The Audit edition allows you to create machine groups, to create policy groups, to scan
machines, and to view the results of the scan.

vCenter Protect Essentials Plus Configuration Management, Full Edition

The Full edition allows you access to all the features in the Audit edition, plus it provides
policy enforcement capabilities. The Full edition does not provide the licensing needed to
use the SCAP Processor.

vCenter Protect Essentials Plus Configuration Management, SCAP Audit

Edition
The SCAP Audit edition allows you access to all the features in the Audit edition, plus it
allows you to use the SCAP Processor. The SCAP Processor is a separate utility program
that converts Security Content Automation Protocol (SCAP) profiles into policies that can
be imported into vCenter Protect Essentials Plus - Configuration Management. This
edition is generally used for U.S. Government customers or Government-affiliated
customers.

vCenter Protect Essentials Plus Configuration Management, SCAP Full

Edition
The SCAP edition allows you access to all the features in the Full edition, plus it allows
you to use the SCAP Processor. The SCAP Processor is a separate utility program that
converts Security Content Automation Protocol (SCAP) profiles into policies that can be
imported into vCenter Protect Essentials Plus - Configuration Management. This edition is
generally used for U.S. Government customers or Government-affiliated customers.

For more information, see Version and License Information.

vCenter Protect Essentials Plus Configuration Management Installation Guide

About vCenter Protect Essentials Plus Configuration Management

System Requirements
Console
Processor:
Minimum: 500 MHz CPU
Recommended: 2.0 GHz CPU (multi-processor machine if more than 1000 seat
license)
Memory:
Minimum: 256 MB RAM
Recommended: 2 GB RAM (4 GB if more than 1000 seat license)
Video:
1024 x 768 screen resolution or higher (1280 x 1024 recommended)
Disk Space:
60 meg for application
Operating System (one of the following):
Minimum:
Windows XP Professional SP3 or later (SP2 or later if using 64-bit version)
Windows Vista SP2 or later, Business, Enterprise, or Ultimate Edition
Windows 7 Professional, Enterprise, or Ultimate Edition
Recommended:
Windows Server 2003 Family SP2 or later
Windows Server 2008 Family, excluding Server Core
Windows Server 2008 Family R2, excluding Server Core
Note: vCenter Protect Essentials Plus Configuration Management supports 32- and 64bit versions of the listed operating systems for both console and target systems.
Database
Use of SQL Server database (SQL Server 2005, SQL Server 2005 Express Edition,
SQL Server 2008, or SQL Server 2008 Express Edition) is required. If you do not have
a SQL Server database, the option to install SQL Server 2008 Express Edition will be
provided during the prerequisite software installation process.
Size: 1.5 GB
Prerequisite Software:
Internet Explorer 6.0 or later
Windows Installer 4.5 (only required if installing SQL Express 2008 during the
installation)
Use of Microsoft SQL Server 2005, SQL Server 2005 Express Edition, SQL Server
2008, or SQL Server 2008 Express Edition
SQL Server Management Objects (SMO)
SQL Native Client or SQL 2008 Native Client (if using SQL Server 2008)
Microsoft .NET Framework 3.5 SP1 or later
IIS common files (for IIS-related checks)
VMware vCenter Protect 7.x or later (if you want to use patch and spyware policy
checks)

vCenter Protect Essentials Plus Configuration Management Installation Guide

About vCenter Protect Essentials Plus Configuration Management

System Configuration:
Workstation Service
Server Service
Remote Registry Service
Simple File Sharing disabled
An administrative share is required (will be temporarily added if missing)
When scanning the console machine, Windows Management Instrumentation (WMI)
service must be running and the protocol allowed to the machine (in Windows
Firewall, on Windows XP/Windows 2003 machines this is called Remote
Administration, and on Windows Vista/Windows Server 2008 machines this is called
Windows Management Instrumentation (WMI)/Remote Administration)

Clients
Browser:
Internet Explorer 4.0 or later
Disk Space:
A minimal amount needed for log files
Operating System (one of the following):
Windows 2000 Professional
Windows 2000 Server
Windows 2000 Advanced Server
Windows 2000 Datacenter Server
Windows 2000 Small Business Server
Windows XP Professional
Windows XP Tablet PC Edition
Windows Server 2003, Enterprise Edition
Windows Server 2003, Standard Edition
Windows Server 2003, Web Edition
Windows Server 2003 for Small Business Server
Windows Server 2003, Datacenter Edition
Windows Vista, Home Basic Edition
Windows Vista, Home Premium Edition
Windows Vista, Business Edition
Windows Vista, Enterprise Edition
Windows Vista, Ultimate Edition
Windows 7, Professional Edition
Windows 7, Enterprise Edition
Windows 7, Ultimate Edition
Windows Server 2008, Standard
Windows Server 2008, Enterprise
Windows Server 2008, Datacenter
Windows Server 2008, Standard - Core
Windows Server 2008, Enterprise - Core
Windows Server 2008, Datacenter Core
Windows Server 2008 R2, Standard
Windows Server 2008 R2, Enterprise
Windows Server 2008 R2, Datacenter

vCenter Protect Essentials Plus Configuration Management Installation Guide

About vCenter Protect Essentials Plus Configuration Management

Windows Server 2008 R2, Standard - Core

Windows Server 2008 R2, Enterprise - Core
Windows Server 2008 R2, Datacenter Core
Note: vCenter Protect Essentials Plus Configuration Management supports 32- and 64bit versions of the listed operating systems for both console and target systems.
Virtual Machines (online virtual images created by any of the following):
VMware ESX Server 3.0 or later
VMware VirtualCenter 2.0 or later
VMware Server
VMware Workstation 4.0 or later
VMware Player
System Configuration:
Workstation Service
Server Service
Remote Registry Service
Simple File Sharing disabled
File Sharing must be installed (default admin shares used)
NetBIOS (tcp139) or Direct Host (tcp445) ports must be accessible
Windows Management Instrumentation (WMI) service running and the protocol
allowed to the machine (in Windows Firewall, on Windows XP/Windows 2003
machines this is called Remote Administration, and on Windows Vista/Windows
Server 2008 machines this is called Windows Management Instrumentation
(WMI)/Remote Administration)

vCenter Protect Essentials Plus Configuration Management Installation Guide

Installation

Installation
Obtaining the Software
vCenter Protect Essentials Plus - Configuration Management is available for download from our
Web-based download center: http://www.shavlik.com/pdownloadform4.aspx. The download
center always has the most recent version of vCenter Protect Essentials Plus - Configuration
Management that is available.

Installing the Prerequisites

Automatic installation
The prerequisites can be automatically installed during the installation process.

Manual installation
If you prefer to download and install the prerequisites yourself, you may download and install
each of the prerequisites from the URLs below.
Windows Installer 4.5
http://www.microsoft.com/downloads/details.aspx?FamilyID=5a58b56f-60b6-4412-95b954d056d6f9f4
.NET Framework 3.5
http://download.microsoft.com/download/0/6/1/061f001c-8752-4600-a19853214c69b51f/dotnetfx35setup.exe
SQL Server 2008 Express Edition (needed only if you don't already have a full edition
of SQL Server)
http://www.microsoft.com/downloads/details.aspx?FamilyID=58ce885d-508b-45c8-9fd3118edd8e6fff
Prerequisites for SQL Server Management Objects (2008)
English
http://download.microsoft.com/download/0/E/6/0E67502A-22B4-4C47-92D30D223F117190/SQLSysClrTypes.msi (x86)
http://download.microsoft.com/download/A/D/0/AD021EF1-9CBC-4D11-AB516A65019D4706/SQLSysClrTypes.msi (x64)
French
http://download.microsoft.com/download/2/1/2/212DDFE2-3F12-44A1-A96C42AB89F951D2/SQLSysClrTypes.msi (x86)

http://download.microsoft.com/download/6/8/B/68BD0291-CED3-4538-B6CB10978DC4ED9C/SQLSysClrTypes.msi (x64)
German
http://download.microsoft.com/download/0/9/7/0971CDDD-AE32-44F1-90754547E24ED463/SQLSysClrTypes.msi (x86)

http://download.microsoft.com/download/7/7/B/77B0D929-34B5-4020-83D74F28CD2336C3/SQLSysClrTypes.msi (x64)

vCenter Protect Essentials Plus Configuration Management Installation Guide

Installation

SQL Server Management Objects (2008)

English
http://download.microsoft.com/download/0/E/6/0E67502A-22B4-4C47-92D30D223F117190/SharedManagementObjects.msi (x86)
http://download.microsoft.com/download/A/D/0/AD021EF1-9CBC-4D11-AB516A65019D4706/SharedManagementObjects.msi (x64)
French
http://download.microsoft.com/download/2/1/2/212DDFE2-3F12-44A1-A96C42AB89F951D2/SharedManagementObjects.msi (x86)

http://download.microsoft.com/download/6/8/B/68BD0291-CED3-4538-B6CB10978DC4ED9C/SharedManagementObjects.msi (x64)
German
http://download.microsoft.com/download/0/9/7/0971CDDD-AE32-44F1-90754547E24ED463/SharedManagementObjects.msi (x86)

http://download.microsoft.com/download/7/7/B/77B0D929-34B5-4020-83D74F28CD2336C3/SharedManagementObjects.msi (x64)

SQL 2008 Native Client (if using SQL Server 2008)

English
http://download.microsoft.com/download/0/E/6/0E67502A-22B4-4C47-92D30D223F117190/sqlncli.msi (x86)
http://download.microsoft.com/download/A/D/0/AD021EF1-9CBC-4D11-AB516A65019D4706/sqlncli.msi (x64)
French
http://download.microsoft.com/download/2/1/2/212DDFE2-3F12-44A1-A96C42AB89F951D2/sqlncli.msi (x86)

http://download.microsoft.com/download/6/8/B/68BD0291-CED3-4538-B6CB10978DC4ED9C/sqlncli.msi (x64)
German
http://download.microsoft.com/download/0/9/7/0971CDDD-AE32-44F1-90754547E24ED463/sqlncli.msi (x86)

http://download.microsoft.com/download/7/7/B/77B0D929-34B5-4020-83D74F28CD2336C3/sqlncli.msi (x64)

If your language is not listed the Microsoft SQL Server Native Client download is part of the
collection found at:

http://www.microsoft.com/downloads/details.aspx?FamilyID=b33d2c78-1059-4ce2-b80d2343c099bcb4&displaylang=en

vCenter Protect Essentials Plus Configuration Management Installation Guide

Installation

Verifying Security Policy Permissions

In order to perform scans using vCenter Protect Essentials Plus - Configuration Management, the
following security policy permissions are required on the local machine:

Backup Files & Directory = administrators

Debug = administrators
Restore Files = administrators
Take Ownership = administrators
Manage Auditing & Security = administrators

To set these permissions, from the Windows Control Panel select Administrative Tools >
Local Security Policy. For example:

vCenter Protect Essentials Plus Configuration Management Installation Guide

Installation

Performing a New Installation

To install the program:
1) Double-click the file named VMwareProtectConfigMgmtSetup_4.3.#.0.exe.
Any software prerequisites that are missing will be listed. Click Install to install
the missing prerequisites (this may take several minutes and may require a reboot).
When all prerequisites are installed the Welcome dialog is displayed.
2) Click Next.
The license agreement is displayed. You must agree to the terms of the license agreement in
order to install the program.
3) To continue with the installation, select I accept the license agreement and then click
Next.
The Destination Folder dialog is displayed.
4) If you want to change the default location of the program, click Change and choose a new
location. When you are done, click Next.
The Ready to Install the Program dialog is displayed.
5) To begin the installation click Install.
Near the end of the installation process the Do you have an Existing Database? dialog is
displayed.
6) If you have a previously installed vCenter Protect Essentials Plus Configuration Management
database that you wish to use, select Yes and then click Next. Otherwise, select No and then
click Next.

If you select Yes, specify whether your existing database is a SQL Server or Microsoft
Access database. If it is a Microsoft Access database it will be converted to a SQL Server
database. Proceed to Step 8 to provide your SQL Server configuration information.

If you select No, the Do you want to create a new Database? dialog is displayed.

7) To create a new SQL Server database, select Yes. If you select No the installation will not be
able to complete.
A dialog similar to the following is displayed:

vCenter Protect Essentials Plus Configuration Management Installation Guide

Installation

Use the boxes provided to define the name, location, and credentials used to access
the SQL Server database.

Server name: You can specify a machine or you can specify a machine and the SQL
Server instance running on that machine.

Database name: Specify the database name you want to use. The default database
name is stcScans.

Windows Authentication: This is the recommended and default option. vCenter Protect
Essentials Plus Configuration Management will use the currently logged on user
credentials to connect to the SQL Server database. The User name and Password boxes
will be unavailable.

SQL Authentication: Select this option to enter a specific user name and password
combination when logging on to the specified SQL Server.
Caution! If you supply SQL authentication credentials and have not implemented SSL
encryption for SQL connections, the credentials will be passed over the network in clear
text.

10

Test Server Connection: To verify that the program can use the supplied credentials to
connect to the database, click this button.

vCenter Protect Essentials Plus Configuration Management Installation Guide

Installation

8) After providing all the required information, click Next.

The program either creates the new database or connects to the existing database.
When the database is complete the Database Installation Complete dialog is displayed.
9) Click Next.
When the installation is complete the Installation Complete dialog appears.
10) Click Finish.
The InstallShield Wizard Completed dialog appears.
11) If you want to start using the program immediately, enable the Launch VMware vCenter
Protect Essentials Plus Configuration Management check box and then click Finish.

vCenter Protect Essentials Plus Configuration Management Installation Guide

11

Getting Started

Getting Started
Starting vCenter Protect Essentials Plus - Configuration
Management
You can start vCenter Protect Essentials Plus - Configuration Management two ways:

Select Start > All Programs > VMware > vCenter Protect Configuration
Management
Double-click the vCenter Protect Essentials Plus - Configuration Management
icon on your desktop

After starting the program the home page is displayed. See About the Home Page in the Help
system for detailed information about the home page.

Activating vCenter Protect Essentials Plus Configuration Management

Until you activate vCenter Protect Essentials Plus - Configuration Management you are very
limited in the actions you are allowed to perform. You activate the program by entering a valid
activation key. To activate vCenter Protect Essentials Plus - Configuration Management:
1. If you have an electronic copy of your license key copy it to your computer's clipboard.
Your license key is typically sent to you in an e-mail from VMware when you purchase the
product.
2. From the vCenter Protect Essentials Plus - Configuration Management menu select Help >
Enter License Key.
The Activation dialog appears.
3. Click Next.

If you copied the license key to your clipboard, the program will detect the key and ask if
you want to use that key.

To copy the activation key from the clipboard to vCenter Protect Essentials Plus Configuration Management, click Yes and the key is automatically copied to the Enter
Activation Key dialog. If you want to manually type your activation key, click No and
the Enter Activation Key dialog appears.

12

vCenter Protect Essentials Plus Configuration Management Installation Guide

Getting Started

If you didn't copy your activation key to your clipboard, the Enter Activation Key
dialog appears:

4. When the activation key has been entered on the dialog, click Next.
If you have an Internet connection
If you have an Internet connection and the activation is successful the Registration Complete
dialog is displayed. At this point the activation process is complete.
If you do not have an Internet connection
If you do not have an Internet connection the following dialog appears:

1. Select the This system does not have a connection to the Internet option and then
click Finish.
A text file is generated and opened within the Notepad application.
2. Save the file and then move it to a computer that has an Internet connection.

vCenter Protect Essentials Plus Configuration Management Installation Guide

13

Getting Started

3. E-mail the file to shavlik-license@vmware.com.

VMware will process the license information and e-mail you back the processed license file.
4. When you receive the processed license file, move the file to the computer you are installing
the program on and then double-click the file.
vCenter Protect Essentials Plus - Configuration Management will now be activated.

Version and License Information

Selecting Help > About will provide a variety of information about vCenter Protect Essentials
Plus - Configuration Management.
Version and Application Information
The center portion of the Help > About dialog is used to view both version and application
information. To toggle between both views, click the Version Info or App Info button.

Version Info: Displays version information about each of the program components being
used by the program.

App Info: Displays both the version and the edition of the program being used as well as
the number of machines you are licensed to scan and the number of machines you are
licensed to remediate (enforce).

Version Log
To save the version information to a Notepad file, click Version Log.
Tech Support Information
For technical assistance with vCenter Protect Essentials Plus - Configuration Management, please
refer to one of the following support options:

Browse the Community Site at community.shavlik.com

E-mail us at shavlik-support@vmware.com

Phone Technical Support at 866-407-5279 or +1-651-407-5279

How Licenses are Tracked

When a remediation (enforcement) is performed, vCenter Protect Essentials Plus - Configuration
Management records the machine name in the database if it does not already exist. From there,
the number of remaining seats available for remediation is reduced by one for each remediation
target.
You can easily find out how many licenses are available by choosing Help > About.

14

vCenter Protect Essentials Plus Configuration Management Installation Guide