Home
Administering
This section describes how to plan for, install, configure, operate, and manage the SafeLinx Server.
Installing and initial configuration
Initial configuration and installation of HCL SafeLinx varies based on your operating system and relational database.
Initial configuration
After you install the SafeLinx Server software, you must complete a set of initial configuration steps. The initial configuration on Windows is different from the procedure on Linux.
Configuring databases for SafeLinx with DDL
The SafeLinx installation provides a set of database definition language (DDL) scripts to create and configure the SafeLinx session and accounting databases.

Administering
This section describes how to plan for, install, configure, operate, and manage the SafeLinx Server.
- Overview
  HCL SafeLinx uses standards-based protocols to enable secure access from mobile computing devices outside the firewall to business applications and data on your organization's internal network.
- Security
  HCL SafeLinx includes a range of options for configuring the security of your network, applications, and data.
- Installation planning
  Before you install HCL SafeLinx, verify that you meet the hardware and software requirements, and that the network connections that you want to use are available.
- Roadmaps: Installing and setting up SafeLinx
  The following "roadmap" topics guide you through installing and initially configuring SafeLinx. Refer to the topic that corresponds to your relational database and server operating system.
- Installing and initial configuration
  Initial configuration and installation of HCL SafeLinx varies based on your operating system and relational database.
  - Installing the SafeLinx Administrator
    You can install the SafeLinx Administrator on the same host as the SafeLinx Server, or on another computer that has access to the SafeLinx Server.
  - Installing the SafeLinx Server
    Before you install the SafeLinx Server, review the installation checklist.
  - Initial configuration
    After you install the SafeLinx Server software, you must complete a set of initial configuration steps. The initial configuration on Windows is different from the procedure on Linux.
    - Completing the initial SQL Server database configuration on Windows
      On Windows, after the Installation wizard completes, the First steps portal opens to guide you through the initial configuration. From the First steps portal you can start the Database Configuration Wizard. The Database Configuration Wizard guides you through the process of configuring the SafeLinx Server to use the relational database where you want the SafeLinx Server to store persistent data.
    - Completing the initial SQL Server database configuration on Linux
      On Linux, after the installation completes, open the SafeLinx Administrator to complete the initial configuration for SQL Server for SafeLinx. A wizard guides you through the process of configuring where you want the SafeLinx Server to store persistent data.
    - Completing the initial MySQL database configuration on Windows
      On Windows, after the Installation wizard completes, the First Steps portal opens to guide you through the initial configuration.
    - Completing the initial MySQL database configuration on Linux
      On Linux, after the installation completes, open the SafeLinx Administrator to complete the initial configuration. A wizard guides you through the process of configuring where you want the SafeLinx Server to store persistent data.
    - Completing the initial DB2 database configuration on Windows™
      On Windows, after the Installation wizard completes, the First steps portal opens to guide you through the initial configuration. The First steps portal includes a link to open the Database Configuration Wizard, which guides you through the process of configuring the SafeLinx Server to use the relational database where you want the SafeLinx Server to store persistent data.
    - Completing the initial DB2 database configuration on Linux
      On Linux, after the installation completes, open the SafeLinx Administrator to complete the initial configuration. A wizard guides you through the process of configuring the SafeLinx Server to use the DB2 database where you want the SafeLinx Server to store persistent data.
    - Configuring databases for SafeLinx with DDL
      The SafeLinx installation provides a set of database definition language (DDL) scripts to create and configure the SafeLinx session and accounting databases.
      - Configuring DB2® databases for HCL SafeLinx with DDL
        This task describes how to use DDL scripts to create the HCL SafeLinx session and accounting databases on DB2. Complete this task only if you do not want to use the Database configuration wizard
      - Configuring SQL Server databases for HCL SafeLinx with DDL
        This task describes how to use DDL scripts to create the HCL SafeLinx session and accounting databases on SQL Server. When you use DDL scripts to create or update SafeLinx databases on SQL Server, do not run the Database configuration wizard. SQL Server databases are supported for deployments in which the SafeLinx Server is installed on Windows only.
      - Configuring MySQL databases for HCL SafeLinx with DDL
        This task describes how to use DDL scripts to create the HCL SafeLinx session and accounting databases on MySQL. DDL scripts are run on the remote server (Steps 3 - 7).
    - Configuring Oracle database
      To use Oracle Database as the persistent storage repository for the SafeLinx Server, complete the following configuration instructions.
    - Configuring the access manager
      The access manager listens for incoming connections from the SafeLinx Administrator so that you can configure the SafeLinx Server. After you configure the access manager, a new wizard opens so that you can add a SafeLinx Server.
    - Adding a SafeLinx Server
      After you complete the tasks in the Configure the SafeLinx Server Access Manager wizard, complete the initial configuration by defining a SafeLinx Server. Depending on your network requirements, you can then add an HTTP access service, a mobile access service, and users. You can run the Add a New SafeLinx Server wizard to initiate these tasks. If you choose not to use the wizard, you can also add and configure these resources from the SafeLinx Administrator.
  - Removing the SafeLinx Server
    If you installed the accounting and billing database support, use the db2idrop command to delete the instance ID wgdb. Then, delete the operating system user IDs wgdb and wgdbudf.
  - Removing the SafeLinx Administrator
    Directions for removing the SafeLinx Administrator vary based on your operating system.
  - Applying maintenance
    You can apply maintenance on the SafeLinx Server and the SafeLinx Administrator. The specific procedure depends on which operating system you use.
- Adding a secure login profile
  By default, the SafeLinx Administrator communicates with the access manager over an unencrypted connection. If you want the connection between the SafeLinx Administrator and the access manager to use transport layer security (TLS) protocols, add a secure login profile to the SafeLinx Administrator.
- Adding and configuring resources
  After you complete the installation and initial configuration, continue to prepare the deployment by configuring other network resources.
- Administering
  The SafeLinx Administrator administration client is the primary tool for viewing, adding, configuring, and managing HCL SafeLinx resources. Along with the SafeLinx Administrator, you can use the HCL SafeLinx Monitor to view information about packet flow through the SafeLinx Server. You can also use a set of command line tools to perform common SafeLinx Server tasks.
- Programming reference
  There are several programming considerations of which you might want to take advantage.
- Database schema information
  HCL SafeLinx uses a DB2, Oracle, MySQL, or SQL database to store tables of information about current and past activity of SafeLinx Server sessions. The following tables are created and accessed by using the qualifier name wg for DB2 installations.
- Step by step: Nomad configuration
  Here are step-by-step instructions that serve as an example of how to install and configure HCL SafeLinx for Nomad on MySQL on Linux.

Configuring databases for SafeLinx with DDL

The SafeLinx installation provides a set of database definition language (DDL) scripts to create and configure the SafeLinx session and accounting databases.

About this task

To prepare a relational database for use with SafeLinx, you must apply a schema, configure specific database objects, and grant permissions. In many situations, you can complete these tasks automatically when you run the configuration wizards from the SafeLinx Administrator. However, in organizations that grant direct access to database servers, to designated database admins only, it might not be possible to use the configuration wizards. Instead, when a SafeLinx admin is not allowed to access the database server, a database admin can run a set of DDL scripts to create and configure the SafeLinx databases.

When you install SafeLinx, three sets of DDL scripts are copied to the installation directory on the SafeLinx Server. One set is for use with DB2 databases, another set for MySQL databases, and the third is for SQL Server databases. DDL scripts for Oracle database are not provided. Table 1 lists the scripts in the order in which you use them, and describes the action that each script performs. The scripts for DB2, MySQL, and SQL are identically named. Table 2 specifies the directories in which the scripts are installed on each supported operating system.

Table 1. DDL scripts for creating, updating, and granting user access to SafeLinx databases
Script name	Description
wgdata-create.sql	Script to create a session database.
wgacct-create.sql	Script to create an accounting database.
wgdata-update.sql	Script to update a session database. Run this script to update a session database that you created with an earlier version of wgdata-create.sql. If you created the session database with the current version of the creation script, do not run the update script.
wgdata-grant.sql	Script to grant a user limited access permissions to the session database.
wgacct-grant.sql	Script to grant a user limited access permissions to the accounting database

Table 2. Location of DDL scripts by operating system
Operating system	Script locations
Linux™	/opt/hcl/SafeLinx/conf/DB2 /opt/hcl/SafeLinx/conf/MYSQL /opt/hcl/SafeLinx/conf/SQL
Windows™	`<Installation_directory>`\SafeLinx\conf\DB2 `<Installation_directory>`\SafeLinx\conf\MySQL `<Installation_directory>`\SafeLinx\conf\SQL

Rate this topic

5 stars 4 stars 3 stars 2 stars 1 star

Comment on this topic.

By clicking this box, you acknowledge that you are NOT a U.S. Federal Government employee or agency, nor are you submitting information with respect to or on behalf of one. HCL provides software and services to U.S. Federal Government customers through its partners immixGroup, Inc. Contact this team at https://hcltechsw.com/resources/us-government-contact. Do not include any personal data in this Comment box. Note: To report a problem or question about the product software, do not use this form. Instead, go to the HCL Software Support site.