Home
Administering
This section describes how to plan for, install, configure, operate, and manage the SafeLinx Server.
Installing and initial configuration
Initial configuration and installation of HCL SafeLinx varies based on your operating system and relational database.
Initial configuration
After you install the SafeLinx Server software, you must complete a set of initial configuration steps. The initial configuration on Windows is different from the procedure on Linux.
Configuring the access manager
The access manager listens for incoming connections from the SafeLinx Administrator so that you can configure the SafeLinx Server. After you configure the access manager, a new wizard opens so that you can add a SafeLinx Server.
Configuring the access manager to bind to a specific IP address
You can configure the access manager to bind to a specific IP address and listening port when connecting to the SafeLinx Administrator. You can specify one of the default listening ports (9555 or 9559) or another available port.

Administering
This section describes how to plan for, install, configure, operate, and manage the SafeLinx Server.
- Overview
  HCL SafeLinx uses standards-based protocols to enable secure access from mobile computing devices outside the firewall to business applications and data on your organization's internal network.
- Security
  HCL SafeLinx includes a range of options for configuring the security of your network, applications, and data.
- Installation planning
  Before you install HCL SafeLinx, verify that you meet the hardware and software requirements, and that the network connections that you want to use are available.
- Roadmaps: Installing and setting up SafeLinx
  The following "roadmap" topics guide you through installing and initially configuring SafeLinx. Refer to the topic that corresponds to your relational database and server operating system.
- Installing and initial configuration
  Initial configuration and installation of HCL SafeLinx varies based on your operating system and relational database.
  - Installing the SafeLinx Administrator
    You can install the SafeLinx Administrator on the same host as the SafeLinx Server, or on another computer that has access to the SafeLinx Server.
  - Installing the SafeLinx Server
    Before you install the SafeLinx Server, review the installation checklist.
  - Initial configuration
    After you install the SafeLinx Server software, you must complete a set of initial configuration steps. The initial configuration on Windows is different from the procedure on Linux.
    - Completing the initial SQL Server database configuration on Windows
      On Windows, after the Installation wizard completes, the First steps portal opens to guide you through the initial configuration. From the First steps portal you can start the Database Configuration Wizard. The Database Configuration Wizard guides you through the process of configuring the SafeLinx Server to use the relational database where you want the SafeLinx Server to store persistent data.
    - Completing the initial SQL Server database configuration on Linux
      On Linux, after the installation completes, open the SafeLinx Administrator to complete the initial configuration for SQL Server for SafeLinx. A wizard guides you through the process of configuring where you want the SafeLinx Server to store persistent data.
    - Completing the initial MySQL database configuration on Windows
      On Windows, after the Installation wizard completes, the First Steps portal opens to guide you through the initial configuration.
    - Completing the initial MySQL database configuration on Linux
      On Linux, after the installation completes, open the SafeLinx Administrator to complete the initial configuration. A wizard guides you through the process of configuring where you want the SafeLinx Server to store persistent data.
    - Completing the initial DB2 database configuration on Windows™
      On Windows, after the Installation wizard completes, the First steps portal opens to guide you through the initial configuration. The First steps portal includes a link to open the Database Configuration Wizard, which guides you through the process of configuring the SafeLinx Server to use the relational database where you want the SafeLinx Server to store persistent data.
    - Completing the initial DB2 database configuration on Linux
      On Linux, after the installation completes, open the SafeLinx Administrator to complete the initial configuration. A wizard guides you through the process of configuring the SafeLinx Server to use the DB2 database where you want the SafeLinx Server to store persistent data.
    - Configuring databases for SafeLinx with DDL
      The SafeLinx installation provides a set of database definition language (DDL) scripts to create and configure the SafeLinx session and accounting databases.
    - Configuring Oracle database
      To use Oracle Database as the persistent storage repository for the SafeLinx Server, complete the following configuration instructions.
    - Configuring the access manager
      The access manager listens for incoming connections from the SafeLinx Administrator so that you can configure the SafeLinx Server. After you configure the access manager, a new wizard opens so that you can add a SafeLinx Server.
      - Configuring the access manager to bind to a specific IP address
        You can configure the access manager to bind to a specific IP address and listening port when connecting to the SafeLinx Administrator. You can specify one of the default listening ports (9555 or 9559) or another available port.
    - Adding a SafeLinx Server
      After you complete the tasks in the Configure the SafeLinx Server Access Manager wizard, complete the initial configuration by defining a SafeLinx Server. Depending on your network requirements, you can then add an HTTP access service, a mobile access service, and users. You can run the Add a New SafeLinx Server wizard to initiate these tasks. If you choose not to use the wizard, you can also add and configure these resources from the SafeLinx Administrator.
  - Removing the SafeLinx Server
    If you installed the accounting and billing database support, use the db2idrop command to delete the instance ID wgdb. Then, delete the operating system user IDs wgdb and wgdbudf.
  - Removing the SafeLinx Administrator
    Directions for removing the SafeLinx Administrator vary based on your operating system.
  - Applying maintenance
    You can apply maintenance on the SafeLinx Server and the SafeLinx Administrator. The specific procedure depends on which operating system you use.
- Adding a secure login profile
  By default, the SafeLinx Administrator communicates with the access manager over an unencrypted connection. If you want the connection between the SafeLinx Administrator and the access manager to use transport layer security (TLS) protocols, add a secure login profile to the SafeLinx Administrator.
- Adding and configuring resources
  After you complete the installation and initial configuration, continue to prepare the deployment by configuring other network resources.
- Administering
  The SafeLinx Administrator administration client is the primary tool for viewing, adding, configuring, and managing HCL SafeLinx resources. Along with the SafeLinx Administrator, you can use the HCL SafeLinx Monitor to view information about packet flow through the SafeLinx Server. You can also use a set of command line tools to perform common SafeLinx Server tasks.
- Programming reference
  There are several programming considerations of which you might want to take advantage.
- Database schema information
  HCL SafeLinx uses a DB2, Oracle, MySQL, or SQL database to store tables of information about current and past activity of SafeLinx Server sessions. The following tables are created and accessed by using the qualifier name wg for DB2 installations.
- Step by step: Nomad configuration
  Here are step-by-step instructions that serve as an example of how to install and configure HCL SafeLinx for Nomad on MySQL on Linux.

Configuring the access manager to bind to a specific IP address

You can configure the access manager to bind to a specific IP address and listening port when connecting to the SafeLinx Administrator. You can specify one of the default listening ports (9555 or 9559) or another available port.

About this task

For example, if your SafeLinx Server is in a DMZ, you can specify the IP address for the internal-facing NIC so that only SafeLinx Administrator clients running on the internal network can connect to the server.

If no address is specified, access manager allows connections from any network interface.

Procedure

Follow the steps that correspond to your operating system:

Windows

Use regedit to locate the following setting:
```
HKEY_LOCAL_MACHINE->SYSTEM->CurrentControlSet->Services->wgmgrd->ImagePath
```

Specify the following value:

"<SafeLinx install path>\bin\wgmgrd_svc.exe" /bind <ipaddress>:<port>

For example:

"C:\Program Files\HCL\SafeLinx\bin\wgmgrd_svc.exe" /bind 127.0.0.1:9555

Linux
1. Open the following file:
```
/etc/systemd/system/wgmgrd.socket
```
2. Specify the following value for the ListenStream setting:
```
<ipaddress>:<port>
```
  For example:
```
[Unit]
Description=SafeLinx Access Manager

[Socket]
ListenStream=127.0.0.1:9555
Accept=yes

[Install]
WantedBy=sockets.target
```
3. Run the following command to save and restart:
```
sudo systemctl restart wgmgrd.socket
```

What to do next

You can use the following command to test the configuration:

wgmgrd -p <port>