Last Updated: July 04 th, 2014.Changes from the previous version are in green. SITEMINDER ,29 PLATFORM SUPPORT 1. Policy Server 11,

Transcription

1 Last Updated: July 04 th, 2014.Changes from the previous version are in green. SITEMINDER ,29 PLATFORM SUPPORT 1. Policy Server 11, bit/32-bit Web Agents11, SAML Affiliate Agent Web Agent Option Pack 10, SDK 5, Mainframe Support bit Support SiteMinder Policy Server 6.0 Directory Support SiteMinder 6.0 Components SiteMinder Policy Server compatibility with Other SiteMinder Components RSA ACE Server, Secure ID, irecorder SiteMinder 6.0 Platform Support Japanese Extended Certification SiteMinder Policy Server 6.0 J Components SiteMinder 6.0 J Web Agent Support SiteMinder Policy Server 6.0 J Directory Support SiteMinder 6.0 Simplified Chinese Web Agent Support Reasonable Commercial Effort Statement Daylight Savings Time Statement SiteMinder Support for Arcot Advanced Authentication Products Third Party Products End of Support Statement

2 Operating Win 1, 4, 14, 17 System 1. Policy Server 11, bit/32- bitweb Agents Microsoft IIS , SP5 CR CR21 30,33 SunOne Windows 2008 R2 (64 bit) Solaris Solaris 10 9/10 SPARC 16 x86 Yes Solaris 10 support as of SP4 CR4 Zone support as of SP4 19, 26 CR6 6.0 RP, 13 Yes (Sol 9 only) 6.1(includes Sun Java System SPs) QMR1 19 RP, 13 Sun Java System 7.0 (includes Updates/SPs) RP ASF Apache CR6 19 CR2 19 CR (PA- RISC) SP1 Yes CR (PA- RISC) CR (Itanium) (Itanium) AIX Oracle Red Hat Red Hat 6 Enterprise 5 1, 5, , ,21 1, 5, 32 5 SP5 CR21 CR30 6 r6 SP5 CR2 CR & higher 3, RP Yes 19 QMR3 3, RP & higher Yes 19 CR1 19 CR20 QMR2HF5 CR16 3, RP 2.2.x CR20 CR9 CR2 19 CR3 19 CR20 CR15 CR34 CR3 Red Hat Apache RP 2.0.5x RP 2.2.x RP CR21 IBM HTTP Server x RP QMR3 19 QMR4 CR23 QMR4 CR7 CR4 11 5,21 2

3 Operating Win 1, 4, 14, 17 System 2008 Windows 2008 R2 (64 bit) 6.1 RP CR RP CR2 Domino Oracle Solaris Solaris 10 9/ (PA (PA AIX Red Hat Red Hat 6 Enterprise SPARC 16 x86 5 RISC) RISC) (Itanium) (Itanium) 1, 5, , ,21 1, 5, 32 5 CR4 QMR4 CR8 19, 26 QMR4 CR9 CR14 CR23 CR3 CR3 SP6 CR7 QMR CR31 CR31 6CR1 QMR4 QMR2 6.5.x CR9 HF5 7.0, QMR4 15, 19 QMR x Oracle HTTP Server 10.1.x (Apache 1.3.x) 10.1.x (Apache 2.0.x) 11g (Apache 2.2.x) HP Apache Server 2.0.5x 3.SAMLAffiliate Agent IIS 6.0 CR30 CR4 CR3 Sol 10 zone support as of CR8 CR29 CR11 (Sol 10 only) CR31 CR17 CR 32 CR1 QMR3 CR2 19 QMR3 CR2 CR28 QMR4 CR9 19 QMR4 CR8 CR7 CR3 CR3 Yes CR10 CR29 CR6 CR03 CR20 CR7 CR11 CR03 CR13 CR20 CR ,21 CR2 3

4 Operating Win 1, 4, 14, 17 System 2008 Windows 2008 R2 (64 bit) SunOne 6.0 Yes 2 SunOne6.1(includes Sun Java System QMR3 RP, 13 SPs) Sun Java System 7.0 CR13 ASF Apache ASF Apache Yes 2 & higher ASF Apache 2.2.x IBM HTTP Server 6.0.x IBM HTTP Server 6.1 HP Apache 2.0.5x 4. Web Agent 10, 11 Option Pack ServletExec ISAPI 5.0 ServletExec NSAPI 5.0 Solaris Solaris 10 9/10 SPARC 16 x86 CR11 CR16 QMR2 7 CR18 CR4 CR (PA- RISC) ServletExec AS 5.0 QMR2 7, 19 QMR (PA- RISC) (Itanium) CR (Itanium) AIX Oracle Red Hat Red Hat 6 Enterprise 5 1, 5, , ,21 1, 5, 32 5 ServletExec AS 6.0 WebLogic Server CR4 9.1, 9.2 CR4 CR10 CR4 WebLogic 10.0 MP1 CR32 WebLogic 10.3(11g) CR3 WebSphere QMR4 QMR4 QMR4 WebSphere 6.1 CR6 CR6 CR6 WebSphere7.0 JBoss Enterprise Web Server 4.2.x CR3 QMR4 CR5 CR16 QMR4CR5 QMR2 HF5 QMR4CR5 CR15 CR ,21 4

5 Operating Win 1, 4, 14, 17 System Tomcat SDK 5, Windows 2008 R2 (64 bit) Solaris Solaris 10 9/10 SPARC 16 x (PA- RISC) (PA- RISC) (Itanium) (Itanium) AIX V 6.0 Agent APIs Yes SP5 CR16 Yes SP5 CR5 SP6 CR 2 SP5 CR21 V 6.0 Server APIs Yes Sol 10, SP4 CR4 6.0 SP1 SP5 CR22 Oracle Red Hat Enterprise 5 1, 5, 32 Red Hat 6 1, 5, , QMR2 HF5 5,21 CR ,21 6. Mainframe Support Red Hat Operating 4 32 for System for for System z System z System z 31-bit/32- bitweb 11, 25 Agents ASF Apache & 3, RP higher & 3, RP higher & SP6 higher, (64-3, RP bit) IBM HTTP Server 5.3 Domino Go 6.0.x RP QMR4 CR5 CR2 CR18 CR13 31 CR17 31 Red Hat Red Hat 4 32 for 5 32 for System z System z (64-bit) (64-bit) CR24 CR14 31 CR RP QMR4 CR7 CR QM Web Agent Option Z/OS 1.9 Z/OS 1.10 CR4 CR25 Z/OS 1.11 CR25 Z/OS 1.12 CR25 Z/OS 1.13 CR25 Z/OS 2.1 SP6 CR10 5

6 Operating System 4 10, 11 Pack WebSphere SDK 5, 9 V 6.0 Agent APIs 9 21 for for Red Hat 4 32 for System z System z System z CR6 QMR4 CR3 CR16 Red Hat Red Hat 4 32 for 5 32 for System z System z (64-bit) (64-bit) CR1 Z/OS 1.9 Z/OS 1.10 Z/OS 1.11 Z/OS 1.12 Z/OS 1.13 Z/OS 2.1 6

7 7. 64-bit Support Operating System 1,4, 14, bitWeb Agents Microsoft IIS IIS 6.0 (64-bit) IIS 7.0 (64-bit) 33 IIS 7.5 (64-bit) 33 SunOne Sun Java System 6.1.x (64-bit) Sun Java System 7.0 (64-bit) (Includes Updates/SPs) Windows 2008 (64-bit) CR24 Windows Solaris 9/10 Solaris R2 (64- SPARC(64- bit) bit) 16 x86 (64-bit) CR1 24 CR9 CR13 RP: CR (64-bit PA- RISC) (64-bit Itanium) (64-bit Itanium) AIX 6.1 (64 bit) Red Hat 4 32 (64-bit) Red Hat 5 1, 5, 32 (64- bit) Oracle Enterprise 5 1, 5, 32 (64-bit) 10 5, 21 (64-bit) ASF Apache 2.0.x (64-bit) RP CR9 CR16 CR10 QRM5 CR x (64-bit) RP CR16 CR2 CR21 CR21 CR11 CR23 QRM5 CR13 IBM HTTP Server 6.1 (64-bit) RP CR25 CR24 CR (64-bit) RP CR2 CR32 Red Hat Apache 2.0.x (64-bit) RP CR x (64-bit) RP CR23 OEL Apache 2.2.x (64-bit) RP Oracle HTTP Server 10.1.x (Apache 2.0.x) 11g (Apache 2.2.x) HP Apache 2.0.5x (64-bit) RP 2.2.x (64-bit) RP Web Agent Option 10, 11 Pack QMR 6 CR3 CR17 CR16 CR18 CR1 CR18 7

8 Operating System 1,4, 14, 17 Servlet Exec AS 6.0 (64-bit) WebLogic 11g (64 bit) WebSphere 6.1(64 bit) Windows 2008 (64-bit) Windows Solaris 9/10 Solaris R2 (64- SPARC(64- bit) bit) 16 x86 (64-bit) (64-bit PA- RISC) (64-bit Itanium) CR (64-bit Itanium) CR3 AIX 6.1 (64 bit) Red Hat 4 32 (64-bit) Red Hat 5 1, 5, 32 (64- bit) Oracle Enterprise 5 1, 5, 32 (64-bit) 10 5, 21 (64-bit) 64-bit SDK V 6.0 Agent APIs SP5 CR2 SP5 CR26 SP5 CR4 SP5 CR4 SP5 CR17 SP5 CR5 SP5 CR24 SP5 CR12 SP6 CR5 8

9 Legend: Yes = supported for SiteMinder v6.0 release and later QMR vx = supported for Agent release 6QMR vx and later (no backward compatibility) SPX = Supported for Policy Server 6.0 SPX release and later RP = Reverse Proxy is supported (if this is not listed for a web server that supports reverse proxy, this configuration is not supported with the Web Agent). Notes: 1. Windows Server Standard/Enterprise/WebEditions supported. For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix. Red Hat AS, Red Hat ES, Red Hat Enterprise and Red Hat Enterprise Advanced Platform are supported. 2. Supported on Solaris 8 and 9 only. 3. Agent support policy for Apache: For ASF Apache CA will specify the minimum version supported. Any problems reported will be fixed on the latest version of ASF Apache. As ASF Apache releases new versions, CA cannot certify the agents against those releases immediately, but will plan to test and update the minimum supported version to the newest ASF Apache version in the next QMR. Meanwhile, customers may use the most recent web agent release with the newer version of ASF Apache. If problems are discovered, the issues should be reported to CA Support and CA will address the issues as escalations. For Enterprise Server and Red Hat AS/ES CA will support the version of Apache bundled with the OS. 4. Hardware requirements - Solaris on SUN SPARC, Solaris on x86 and x64 (Intel and AMD), SUSE Enterprise on x86 and x64 (Intel and AMD), SUSE Enterprise on s390 and s390x (IBM Mainframes), Red Hat Enterprise on x86 and x64 (Intel and AMD), Red Hat Enterprise on s390 and s390x (IBM Mainframes), HP-UX on PA-RISC 2 and Itanium, AIX on PowerPC, z/os on IBM Mainframes. 5. When building, SiteMinder custom auth schemes, or any other custom built components, you must use GCC version Supported with Domino CF2; requires IBM hotfixes as listed in documentation 7. See third-party vendor s support matrix for version(s) of Solaris supported by server and agent. ServletExec 5.0 is not supported on Solaris When Sun Java Web Server is on the same machine as an r6 SP6 Policy Server on Windows, version 6.1 Patch 12 is required in order for the SiteMinder Console to start. 9. Agent APIs support 8.0 starting from 6.0 SP2 10.Any supported web agent/web server combination can front-end a supported application server listed above for the web agent option pack provided that the application server also supports the web server as a proxy plug-in.the SiteMinder Web Agent Option Pack is agnostic to Application Server clustering. 11. The SiteMinder Policy Server is supported as a 32-bit applicationrunning on Solaris 10 Sparc 64-bit and Red Hat 4, 5 64-bit. The Policy Server is not supported on Windows 64-bit. SiteMinder Web Agents are supported as 32-bit applications running on 32-bit web servers running on 32-bit or 64-bit UNIX and Operating Systems. Only the following 32-bit web servers are supported on Windows 64-bit: The 32-bit SiteMinder Web Agent for ASF Apache 2.2 (32-bit) is supported on Windows Server 2003 (64-bit) as of 6 CR30. The 32-bit SiteMinder Web Agent for IHS 6.1 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6 CR31. The 32-bit SiteMinder Web Agent for Domino 8.5 (32-bit) is supported on Windows Server 2008 (64-bit) as of bit Web Agents are not supported with 64-bit Web Servers; you must match the bit level of the Web Agent with the bit level of the web server. The SiteMinder Web Agent Option Pack is a 32-bit application that can run with a 32-bit Application Server on a 32-bit or 64-bit Operating System with the exception of Windows. 12. IIS 6.0 web agent only supports IIS 6.0 native mode, not in IIS 5 isolation mode. 13. Sun Web Server in Reverse Proxy mode support starts from 6QMR3. 14.For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix. 15. Supported on Solaris 9, 10 only. 16. End-of-Service scheduled for 3/31/2009. SUN s End-of-Life date for Solaris 8 is scheduled for 3/31/ Supported on VMWare ESX Server 2.5x, 3.0.x, 3.5x, 4.x.Web Agents starting with QMR4 are supported on VMware ESX Server 2.5x, 3.0.x, and 3.5x. Performance on VMware ESX Server is dependent on the implementation and parameters of the virtual machine

10 19. The SiteMinder Web Agent is supported Solaris 10 sparse-root, whole-root, and global zones; the SiteMinder Web Agent is also supported on Solaris Logical Domains. The SiteMinder Policy Server is supported on Solaris 10 sparse-root and whole-root zones. The Policy Server is supported on the Solaris 10 global zone, as long as there are no other instances of the PS running in either sparse- or whole-root zones. The SiteMinder Policy Server is also supported on Solaris Logical Domains. 20. Running multiple instances of the web server is supported. 21. Supported with all service packs. Any problems reported will be fixed on the latest service pack of. 22. Microsoft Virtual Server is supported as long as you are running a supported SiteMinder OS as the guest upon which SiteMinder is to be installed. 23. SiteMinder Components running on AIX LPAR are supported. 24. Web Agent 6 CR01 64-bit has been certified with IIS7.5 (64-bit) web server on Windows 2008 R2 platform. Once the Web Agent configuration wizard has been run successfully, it will configure the correct permissions to the DefaultAppPool for the SmHost.conf file and the Web Agent log directory. For any other application pools configured, the administrator will have to explicitly set permissions on the SmHost.conf file and the Web Agent log directory. This can be done using the following Microsoft Windows calcs commands: For Smhost.conf: cacls "C:\Program Files\CA\web agent\config\smhost.conf" /T /E /G "AppPoolName":C For log directory: cacls "C:\Program Files\CA\webagent\log" /T /E /G "AppPoolName":C Where DefaultAppPool is the name of the app pool identity. This command has to be executed for all the configured app pool identities. 25. ISA Server 2006 is supported as of CR11. The ISA Server acts as reverse proxy to the web agent protecting the web server. The Web Agent has been certified to run behind ISA Server Delegated Authentication is not supported. 26. Solaris 10 (Domains and Logical Domains) supported. 27. Microsoft Exchange Outlook Web Access 2003 and Outlook Web Access 2007 are supported. 28. The CA Single Sign-On authentication scheme (smauthetsso) is supported for Windows and Solaris. support begins with Policy Server 6.0 SP5 CR Unless otherwise stated, all 3 rd party and SiteMinder components are 32-bit. 64-bit components are explicitly stated. 30. As of 6 CR6, SiteMinder can authenticate and authorize users to SharePoint As of 6 CR21, SiteMinder can authenticate and authorize users to SharePoint 2007, and any site built on SharePoint Services 3.0.Support for SharePoint 2007 on IIS 7 on Windows 2008 begins with 6 CR27. Support for SharePoint 2007 on IIS 7 (64-bit) on Windows 2008 (64-bit) begins with 6 CR Since the web server is a 31-bit application, the SiteMinder Web Agent certified on the web server is also a 31-bit application. 32. Supported with all Red Hat updates. Any problems reported will be fixed on the latest Red Hat update. Security Enhanced Red Hat is supported, please see vendor s documentation for setup instructions to enablethird-party processes (such as SiteMinder) to run on the system. 33. The SiteMinder Web Agent is an ISAPI plug-in installed within IIS 7.x. IIS 7.x is supported in classic pipeline mode ONLY;integrated pipeline mode is not supported. 10

11 8. SiteMinder Policy Server 6.0 Directory Support DIRECTORY 9 VERSIONNUMBER POLICY STORE 9 SESSION STORE USER STORE PASSWORD SERVICES SunOne LDAP Directory YES YES YES Sun Java System Directory Server EE 6 v6.x SP5 CR6 SP5 CR6 SP5 CR6 7 SP6 SP6 SP6 Novell edirectory 8.8.x SP4 CR4 SP4 CR4 SP4 CR4 Microsoft Active Directory (AD) 2 Win 2003, 2003 R2 Yes Yes Yes Win 2008 SP5 CR30 SP5 CR30 SP5 CR30 Microsoft Active Directory in Application Mode (ADAM) 2 Win 2003 (ADAM 1.x) Yes Yes Yes Microsoft Active Directory Lightweight Directory Services Win 2008 (LDS) (LDS) 2 SP5 CR31 SP5 CR31 SP5 CR31 Microsoft AD Global Catalog 2 Win 2003 Yes Microsoft SQL Server 2, 11 SQL 2005 SP4 SP4 SP4 SP4 SQL Cluster Environment SP5 SP5 SP5 SP5 SQL 2008, 2008 R2 SP6 CR1 SP6 CR1 SP6 CR1 SP6 CR1 MySQL 5.x SP6 SP6 SP6 SP6 Oracle Internet Directory 10g R2, 10g R3 SP5 SP5 Yes 11g SP6 CR1 SP6 CR1 SP6 CR1 Oracle RDBMS 10 10g R2 SP4 SP4 SP4 SP4 11g R1 SP6 SP6 SP6 SP6 Oracle RAC 10g R2 SP5 SP5 SP5 SP5 11g R1 SP6 SP6 SP6 SP6 OpenLDAP 2.3.x SP5 SP5 SP5 Domino LDAP 6.5 Yes 7 SP4 8.0 SP5 CR27 IBM Tivoli Directory Server 6.0 SP4 SP4 SP4 6.1 SP5 CR11 SP5 CR11 SP5 CR SP5 SP5 SP5 IBM ISS LDAP Server for z/os (RACF) 5 V1R9 SP5 CR11 SP5 CR11 IBM Tivoli Directory Server for z/os (RACF) 5 V1R9 8 SP5 CR11 Critical Path (IDS) 4.2 Yes Yes Yes SP5 SP5 SP5 Siemens DirX 6.0D00, EE 2.0 Yes Yes Yes 8.0 SP5 CR11 SP5 CR11 SP5 CR11 CA Directory Server 12 SP5 CR15 SP5 CR15 SP5 CR15 12 SP1 SP5 CR24 SP5 CR24 SP5 CR24 12 SP2 SP6 SP6 SP6 12 SP3, SP4, SP5 SP6 SP6 SP6 CA LDAP Server for z/os (TopSecret) 12 SP5 CR28 CA LDAP Server for z/os (RACF) 12 SP5 CR30 11

12 IBM DB2 UDB 9.5 SP6 SP6 SP6 SP6 OpenWave SP3 CR2 SP3 CR2 Red Hat Directory Server 7.1 SP4 SP4 SP4 8.0, 8.1 SP6 SP6 SP6 RadiantOne Virtual Directory Server (VDS) 4.5 SP4 SP4 Notes: 1.When Sun Directory Server is on the same machine as an r6 SP6 Policy Server on Windows, version 5.2 Patch 6 is required in order for the SiteMinder Console to start. 2. For Microsoft Windows Server 2003 & 2008 and for Microsoft SQL Server, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix RACF native authentication and SiteMinder Password Services are supported. However, they may not be used together. 6. Includes support for Directory Proxy The following must be installed on the Tivoli Directory Server: PTF UA37096 for APAR OA For information on SiteMinder Policy Stores multi-master replication mode support, please see the Product Documentation). 10. SiteMinder supports the following Oracle editions: Standard Edition One, Standard Edition, and Enterprise Edition 11. SiteMinder supports the following Microsoft SQL Server Editions: Standard Edition and Enterprise Edition. For Microsoft SQL Server service packs (e.g., SP1, SP2, SP3) are supported in addition to base release shown in the matrix. 9. SiteMinder 6.0 Components ONEVIEW SUPPORTED SERVLET EXEC VERSIONS MONITOR Win2k3 Win2k8 Sol 9/10 HP-UX 11i Red Hat 3/4/5 IIS 6.0 SE 5.0 ISAPI SE 6.0 AS (as of SP5 CR28) IIS 7.0 SE 6.0 AS (as of SP5 CR28) Sun Java 6.0/6.1 SE 5.0 AS SE 6.0 AS (as of SP5 CR25) SE 5.0 AS SE 5.0 AS Sun Java 7.0 SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25) ASF Apache 2.0 SE 5.0 AS (as of SP5 CR4) SE 5.0 AS ASF Apache 2.2 SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25) ASF Apache 1.3 SE 5.0 AS HP Apache 2.0 SE 5.0 AS POLICY SERVER USER INTERFACE (APPLET) Web Servers SUPPORTED VERSIONS Windows: IIS 6.0, IIS7.0 (classic pipeline mode only), ASF Apache 2.2 as of SP5 CR15 Solaris: ASF Apache 2.2, SunOne/Sun Java System 6.0, 6, Sun Java System 7.0 as of SP5 CR24 : HP Apache , HP Apache 2.0, SunOne/Sun Java System 6.0, 6.1 Red Hat: ASF Apache 2.0.x, SunOne/Sun Java System 6.1, ASF Apache 2.2 and Sun 12

13 Web Browsers POLICY SERVER JVM Java Runtime Environment 1 SCRIPTING INTERFACE 2 Operating Systems SDK JDK REQUIREMENTS Web Agent APIs (32-bit) Policy Server APIs (32-bit) Web Agent APIs (64-bit) JavaSystem 7.0 as of SP5 CR24. IHS 6.1 as of SP5 CR27 Internet Explorer and Firefox For SiteMinder r6.0-r6.0 SP4: Sun JRE 1.4.2_07 (32-bit only) and above (1.4.x series only). For SiteMinder r6.0 SP5: Sun/HP 1.5.0_01 (32-bit only) and above (1.5.x series only). For SiteMinder r6.0 SP6: Sun/HP 1.6.0_16 (32-bit only) and above (1.6.x series only). Solaris 8, 9. Support for Solaris 10 as of 6.0 SP Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01 (32-bit only) and above (1.5.x series only) as of 6. Sun Java 1.6 as of CR33.HP andibm Java 1.6 as of 6.0 SP6. Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01 (32-bit only) and above (1.5.x series only). As of 6. Sun Java 1.6 as of CR33. HP and IBM Java 1.6 as of 6.0 SP6. Sun/IBM/HP 1.5.0_10 (64-bit) and above (1.4.x series only). Oracle JRockit R27 as of CR25. Sun Java 1.6 as of CR33.HP and IBM Java 1.6 as of 6.0 SP6. Notes: 1. JDK is required (as opposed to JRE) on Policy Server when installing the Policy Server Option Pack. Policy Server Option Pack not supported on HP-UX for use with the Web Agent Option Pack to enable federation. 2. SiteMinder 6.0 ships with ActiveState Perl on Windows and Solaris. The Scripting Interface is only supported with this version. 13

14 10. SiteMinder Policy Server compatibility with Other SiteMinder Components PRODUCT VERSION WEB AGENTS 5.x and higher SAML AFFILIATE AGENT 5.x and higher APPLICATION SERVER AGENTS Refer to App Server Agent support matrix ERP AGENT Refer to ERP agent support matrix SECURE PROXY SERVER 5.5, 6.0 Note: 1.4.x Agents with SiteMinder Policy Server 6.0 are supported for Japanese customers only. 11. RSA ACE Server, Secure ID, irecorder 1.RSA ACE Server: RSA ACE server 5.2, 6.0, 6.1 supported. The Secure ID Authentication scheme is supported on Windows 2003 (using RSA Authentication Agent for Microsoft Windows ), Solaris 9/10, and Red Hat 3 -based Policy Servers. Red Hat 3 supported as of 6.0 SP5 CR14. SiteMinder ships the client library from the RSA Authentication Agent API 6.1 for C sdk for use on Solaris and Red Hat. RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR29 running on Windows Server 2003 (using RSA Authentication Agent for Microsoft Windows ). RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR30 running on Solaris 10 (using RSA Authentication Agent API 6.1 for C ). RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR31 running on Red Hat 3 (using RSA Authentication Agent API 6.1 for C ).RSA Authentication Manager6.1 & 7.1 is supported with CA SiteMinder 6 SP6 CR2 running on Red Hat 5 (using RSA Authentication Agent API 6.1for C ). 2.iRecorder:iRecorder with Oracle 9i is supported starting from Policy Server 6.0 SP4 CR

15 12. SiteMinder 6.0 Platform Support Japanese Extended Certification 13. SiteMinder Policy Server 6.0 J Components PLATFORM SUPPORTED VERSIONS POLICY SERVER Operating Systems Solaris 9 2 Solaris 10 J 3 Admin Interface Web Servers IIS 5.0 J on Windows 2000 SP4 J IIS 6.0 J on Windows 2003J, Windows 2003 SP1J iplanet 6.0 J on Solaris 9 2 Sun Java Web Server 6.1 on Solaris 10J Internet Explorer 7 on Windows 2003 SP1J Admin Interface browsers Win2000 SP4J, Win2003J, Win2003 SP1J: IE 5.5J, IE 6.0J; Netscape 6.23 Solaris 9 2 : Netscape 6.23 Java Runtime Environment Sun JRE 1.4.2_7 and above(32-bit only, 1.4.x series only) ONE VIEW MONITOR Operating Systems Solaris 9 2,Solaris10 2 Web Servers IIS 5.0 J on Windows 2000 SP4 J IIS 6.0 J on Windows 2003 J iplanet 6.0 J on Solaris 9 2 Servlet Engines Servlet Exec 4.2 ISAPI 4.2 for Windows/IIS AS 4.2 for UNIX/SunOne Java SDK Sun JDK 1.4.2_7 and above(32-bit only, 1.4.x series only) SCRIPTING INTERFACE 1 Operating Systems Solaris 9 2,Solaris 10 2 Notes: 1. SiteMinder 6.0 J ships with ActiveState Perl on Windows and Solaris. The Scripting Interface is only supported with this version. 2. Japanese locale settings are supported on Solaris 9& Supported as of 6.0 SP4. 15

16 14. SiteMinder 6.0 J Web Agent Support Windows 2000 SP4 J Windows 2003 Windows 2003 SP1 J Solaris 9 Web Agents 1 MS IIS 5.0 J Yes MS IIS 6.0 J Yes QMR4 CR7 Apache Yes SunONE 6.0 J Yes Yes Sun Java System 6.1 SP4 J & higher Solaris 10 J Notes: 1. As of 6 CR14 SiteMinder FCC Password Services has been localized into Japanese. 15. SiteMinder Policy Server 6.0 J Directory Support DIRECTORY VERSION NUMBER USER STORE POLICY STORE PASSWORD SERVICES SunOne LDAP Directory V5.1J Yes Yes Yes Novell edirectory V8.7 2 Yes Yes Yes Microsoft Active Directory (AD) Win 2K J, Win2003 J, Win2003 Yes Yes Yes SP1J Microsoft SQL Server J Yes Yes Yes Oracle RDBMS V9i J Yes Yes Yes Notes: 1. Supported only with Windows Policy Servers 2. Japanese locale settings are supported with edir V8.7 16

17 16. SiteMinder 6.0 Simplified Chinese Web Agent Support Windows 2003 SP2 Solaris 9/10 Web Agents 1 MS IIS 6.0 CR14 Sun Java System 7.0 (includes CR14 Updates/SPs) Notes: 1. As of 6 CR14 SiteMinder FCC Password Services has been localized into Simplified Chinese. 17. Reasonable Commercial Effort Statement CA Technical Support will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests that involve the use of currently supported versions of CA SiteMinder on or with "unsupported" platforms as follows: CA Technical Support will accept support incidents (support requests) involving a software platform or a combination of software platforms that is not officially supported per the thencurrent CA published platform support matrices. CA will troubleshoot the issue up to the point that CA has reason to believe that the problem is related to the use of software that is not specified in a then-current platform supported matrix. At such point, CA shall require that the customer reproduce the problem on a fully supported combination of platforms before CA proceeds in troubleshooting the incident Daylight Savings Time Statement For SiteMinder Option Pack for Policy Server, SiteMinder Option Pack for Web Agent, SiteMinder Federation Security Services, and SiteMinder SAML Affiliate Agent: Depends on the JRE/JDK for DST compliance. It is not necessary to upgrade your JRE/JDK to the latest version in order to make it DST compliant. Sun has provided a tool, called the tzupdater, available here will modify a single data file and make your existing JRE/JDK DST compliant without requiring a version upgrade. 19. SiteMinder Support for Arcot Advanced Authentication Products Support forarcot'swebfort Authentication Adapter 1.0 for SiteMinder begins with SiteMinder 6.0 SP5. Support for SiteMinder 6.0 SP6 beginning in CR1: Arcot : Adapter 1.0 with Webfort version 5.4 Arcot: Adapter with Webfort version SiteMinder 6.0 SP6 CR3 and later are supported with Arcot WebFort Authentication Adapter and WebFort 6.2 SiteMinder 6.0 SP6 CR3 and later are supported with Arcot Adapter with RiskFort version SiteMinder 6.0 SP6 CR3 and later are supported with Arcot A-OK Console version 2.10 and Adapter Third Party Products End of Support Statement When a third party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third party product or any SiteMinder components that interoperate with the third party product. Third party products under extended vendor support are not supported by CA. Examples of third party products are: web server, application server, operating system, directory, database, etc. 17