8/28/2012

Unattended Installation of FIM 2010 R2

            by MS Technet
 
 
All components of the FIM 2010 R2 accept properties that allow unattended and silent installation. Those properties can either be set in a Windows Installer Transform (MST) file or specified at the command line during installation.
The FIM 2010 R2 installation packages do not support advertisement (msiexec /j) or administrative (msiexec /a) installations.
There are several different ways to install FIM 2010 R2 silently (unattended). Two methods are described in this section: pass-in parameters in a command line and MST files. It is outside the scope of this document to describe unattended installations in general.

Pass-in parameters on the command line

This can be used with Microsoft System Center Configuration Manager 2007. To install silently, use the command msiexec with an option, followed by properties, for example:
Msiexec /q /i NameofMSI.msi /Option ADDLOCAL=MSIFeatureName Property=Value
The possible values of MSIFeatureName and Property can be found in Features and properties later in this document. Note that all parameters are case sensitive.
The following is an example command for an installation of FIM Add-ins and Extensions from a file server where only the FIM Outlook add-in is installed:
msiexec /i “\\MyServer\Distribution\FIM\32\Add-ins and extensions.msi” /quiet ADDLOCAL=OfficeClient PORTAL_LOCATION=MyPortalServer PORTAL_PREFIX=https MONITORED_EMAIL=fimservice@contoso.com
Msiexec has several command line switches for silent installations. Of those, only a limited number are supported. The following table is a list of supported switches.

Switch Supported or Not Supported Description
/quiet/q:nSupportedInstallation with no UI at all
/q:fSupported(Full UI) The usual User Interface Wizard behavior.
/q:bNot supported(Basic) No pop-ups, except error messages.
/q:rNot supported(Reduced) Similar to basic.
/aNot supported(Admin) Will unpack an MSI to have all files external. Since this is how we deliver the MSI, no need to support this. Will run the Admin sequences, but no compelling scenario for this.
/xSupportedUninstall of the product
/jNot supportedNo scenarios. (We don’t have install on demand.)
noteNote
Windows Installer has a limit of 256 characters in the path when for installation of applications. Ensure that you do not place the root of the tree in a very deep structure, or the installation might fail.

Create an MST file

Another solution is to use an MST file. MST files can be created with tools such as Orca (shipped with the Windows Software Development Kit (SDK)), and they contain the same settings as are passed in on the command line.

Troubleshoot an installation

If an unattended installation fails, add the option /l*v NameOfLogFile.txt to the command line. This option creates a log file that you can use for troubleshooting. You can identify an error in a Windows Installer log file by looking for the text Return Value 3.
Also, you can you the msiexec file without the /q switch. This will cause the UI to appear and the values you have specified in the msiexec command-line will be populated in their respective locations. This is good for determining if the correct value is being set or not.

Features and properties

The first table is listing the feature name in the UI and its feature name in the Synchronization Service.msi, Service and Portal.msi and the Add-ins and Extensions.msi. The second table is listing the feature name in the UI and its feature name in the Add-ins and Extensions.msi. The third table is the feature name in the UI and its feature name in the Service and Portal Language Pack.msi. These can all be used by the ADDLOCAL, REINSTALL, and REMOVE properties above.The tables in this section list the settings in the order that they appear during the user interface (UI) installation. Default values are in brackets.
Table 1 FIM 2010 R2 Windows Installer Features

Name of the feature in the UI Windows Installer feature name
FIM Add-in for OutlookOfficeClient
FIM Password and Authentication ExtensionsPasswordClient
FIM ServiceCommonServices
FIM PortalWebPortals
FIM Password Reset PortalPwdPortals
FIM Synchronization ServiceN/A (only one feature in the installer)
Forefront Identity Manager Certificate Management (FIM CM) Update ServiceCLM_Service
FIM CM PortalWeb_Files
FIM CM CA ModulesCA_Modules
FIM CM Smart Card PIN Reset ToolChangePin
FIM CM Smart Card Personalization ControlAppletManagement
FIM CM Smart Card ClientSelfServiceControl
FIM CM Update ClientProfileUpdateControl
FIM CM Bulk Issuance ClientClientFiles
Microsoft Password Change Notification ServicePCNSSVC
FIM Password and Authentication Extensions
FIM Password and Authentication Extensions for Windows XP
FIM Password and Authentication Extensions for Windows Vista
PasswordClient
FIM Password Registration PortalRegistrationPortal
FIM Password Reset PortalResetPortal
Table 2 Service and Portal Language Pack Features

Feature Description
FIMPortalLPInstalls Languages for the FIM Portal
FIMServiceLPInstalls Languages for the FIM Service
FIMResetPortalLPInstalls Languages for the FIM Password Reset Portal
FIMRegistrationPortalLPInstalls Languages for the FIM Password Registration Portal
PortalzhCNChinese (Simplified) language pack for FIM Portal.
PortalzhTWChinese (Taiwan) language pack for FIM Portal.
PortalcsCZCzech language pack for FIM Portal.
PortaldaDKDanish language pack for FIM Portal.
PortalnlNLDutch language pack for FIM Portal.
PortalfiFIFinnish language pack for FIM Portal.
PortalfrFRFrench language pack for FIM Portal.
PortaldeDEGerman language pack for FIM Portal.
PortalitITItalian language pack for FIM Portal.
PortaljaJPJapanese language pack for FIM Portal.
PortalkoKRKorean language pack for FIM Portal.
PortalnbNONorwegian language pack for FIM Portal.
PortalplPLPolish language pack for FIM Portal.
PortalptBRPortuguese (Brazil) language pack for FIM Portal.
PortalptPTPortuguese (Portugal) language pack for FIM Portal.
PortalruRURussian language pack for FIM Portal.
PortalesESSpanish language pack for FIM Portal.
PortalsvSESwedish language pack for FIM Portal.
PortaltrTRTurkish language pack for FIM Portal.
MTzhCNChinese (Simplified) language pack for FIM Service.
MTzhTWChinese (Taiwan) language pack for FIM Service.
MTcsCZCzech language pack for FIM Service.
MTdaDKDanish language pack for FIM Service.
MTnlNLDutch language pack for FIM Service.
MTfiFIFinnish language pack for FIM Service.
MTfrFRFrench language pack for FIM Service.
MTdeDEGerman language pack for FIM Service.
MTitITItalian language pack for FIM Service.
MTjaJPJapanese language pack for FIM Service.
MTkoKRKorean language pack for FIM Service.
MTnbNONorwegian language pack for FIM Service.
MTplPLPolish language pack for FIM Service.
MTptBRPortuguese (Brazil) language pack for FIM Service.
MTptPTPortuguese (Portugal) language pack for FIM Service.
MTruRURussian language pack for FIM Service.
MTesESSpanish language pack for FIM Service.
MTsvSESwedish language pack for FIM Service.
MTtrTRTurkish language pack for FIM Service.
ResetbgBGBulgarian language pack for FIM Password Reset Portal.
ResetzhCNChinese (Simplified) language pack for FIM Password Reset Portal.
ResetzhTWChinese (Taiwan) language pack for FIM Password Reset Portal.
ResethrHRCroatian language pack for FIM Password Reset Portal.
ResetcsCZCzech language pack for FIM Password Reset Portal.
ResetdaDKDanish language pack for FIM Password Reset Portal.
ResetnlNLDutch language pack for FIM Password Reset Portal.
ResetetEEEstonian language pack for FIM Password Reset Portal.
ResetfiFIFinnish language pack for FIM Password Reset Portal.
ResetfrFRFrench language pack for FIM Password Reset Portal.
ResetdeDEGerman language pack for FIM Password Reset Portal.
ResetelGRGreek language pack for FIM Password Reset Portal.
ResethiINHindi language pack for FIM Password Reset Portal.
ResethuHUHungarian language pack for FIM Password Reset Portal.
ResetitITItalian language pack for FIM Password Reset Portal.
ResetjaJPJapanese language pack for FIM Password Reset Portal.
ResetkoKRKorean language pack for FIM Password Reset Portal.
ResetlvLVLatvian language pack for FIM Password Reset Portal.
ResetltLTLithuanian language pack for FIM Password Reset Portal.
ResetnbNONorwegian language pack for FIM Password Reset Portal.
ResetplPLPolish language pack for FIM Password Reset Portal.
ResetptBRPortuguese (Brazil) language pack for FIM Password Reset Portal.
ResetptPTPortuguese (Portugal) language pack for FIM Password Reset Portal.
ResetroRORomanian language pack for FIM Password Reset Portal.
ResetruRURussian language pack for FIM Password Reset Portal.
ResetsrCSSerbian language pack for FIM Password Reset Portal.
ResetskSKSlovak language pack for FIM Password Reset Portal.
ResetslSISlovenian language pack for FIM Password Reset Portal.
ResetesESSpanish language pack for FIM Password Reset Portal.
ResetsvSESwedish language pack for FIM Password Reset Portal.
ResetthTHThai language pack for FIM Password Reset Portal.
ResettrTRTurkish language pack for FIM Password Reset Portal.
ResetukUAUkranian language pack for FIM Password Reset Portal.
RegistrationbgBGBulgarian language pack for FIM Password Registration Portal.
RegistrationzhCNChinese (Simplified) language pack for FIM Password Registration Portal.
RegistrationzhTWChinese (Taiwan) language pack for FIM Password Registration Portal.
RegistrationhrHRCroatian language pack for FIM Password Registration Portal.
RegistrationcsCZCzech language pack for FIM Password Registration Portal.
RegistrationdaDKDanish language pack for FIM Password Registration Portal.
RegistrationnlNLDutch language pack for FIM Password Registration Portal.
RegistrationetEEEstonian language pack for FIM Password Registration Portal.
RegistrationfiFIFinnish language pack for FIM Password Registration Portal.
RegistrationfrFRFrench language pack for FIM Password Registration Portal.
RegistrationdeDEGerman language pack for FIM Password Registration Portal.
RegistrationelGRGreek language pack for FIM Password Registration Portal.
RegistrationhiINHindi language pack for FIM Password Registration Portal.
RegistrationhuHUHungarian language pack for FIM Password Registration Portal.
RegistrationitITItalian language pack for FIM Password Registration Portal.
RegistrationjaJPJapanese language pack for FIM Password Registration Portal.
RegistrationkoKRKorean language pack for FIM Password Registration Portal.
RegistrationlvLVLatvian language pack for FIM Password Registration Portal.
RegistrationltLTLithuanian language pack for FIM Password Registration Portal.
RegistrationnbNONorwegian language pack for FIM Password Registration Portal.
RegistrationplPLPolish language pack for FIM Password Registration Portal.
RegistrationptBRPortuguese (Brazil) language pack for FIM Password Registration Portal.
RegistrationptPTPortuguese (Portugal) language pack for FIM Password Registration Portal.
RegistrationroRORomanian language pack for FIM Password Registration Portal.
RegistrationruRURussian language pack for FIM Password Registration Portal.
RegistrationsrCSSerbian language pack for FIM Password Registration Portal.
RegistrationskSKSlovak language pack for FIM Password Registration Portal.
RegistrationslSISlovenian language pack for FIM Password Registration Portal.
RegistrationesESSpanish language pack for FIM Password Registration Portal.
RegistrationsvSESwedish language pack for FIM Password Registration Portal.
RegistrationthTHThai language pack for FIM Password Registration Portal.
RegistrationtrTRTurkish language pack for FIM Password Registration Portal.
RegistrationukUAUkranian language pack for FIM Password Registration Portal.
Table 3 Add-ins and Extensions Language Pack Features

Feature Description
FIMALPFIM Add-ins and Extensions Language Pack
bgBGBulgarian language
zhCNChinese (Simplified) language
zhTWChinese (Taiwan) language
hrHRCroatian language
csCZCzech language
daDKDanish language
nlNLDutch language
etEEEstonian language
fiFIFinnish language
frFRFrench language
deDEGerman language
elGRGreek language
hiINHindi language
huHUHungarian language
itITItalian language
jaJPJapanese language
koKRKorean language
lvLVLatvian language
ltLTLithuanian language
nbNONorwegian language
plPLPolish language
ptBRPortuguese (Brazil) language
ptPTPortuguese (Portugal) language
roRORomanian language
ruRURussian language
srCSSerbian language
skSKSlovak language
slSISlovenian language
esESSpanish language
svSESwedish language
thTHThai language
trTRTurkish language
ukUAUkranian language
The following tables list the properties that are associated with the features from above.
Table 4 Synchronization Service properties

Property Name Description
STORESERVERName of SQL Server
SQLDBName of database (FIMSynchronization)
SQLINSTANCEName of database instance
SERVICEACCOUNT(Required) Service account name
SERVICEPASSWORDRequired) Service account password
SERVICEDOMAIN(Required) Service account domain
GROUPADMINSName of admin group (FIMSyncAdmins)
GROUPOPERATORSName of operators group (FIMSyncOperators)
GROUPACCOUNTJOINERSName of joiners group (FIMSyncJoiners)
GROUPBROWSEName of browse group (FIMSyncBrowse)
GROUPPASSWORDSETName of password set group (FIMSyncPasswordSet)
FIREWALL_CONF0 – Do not configure firewall (default)1 – Configure firewall
Table 5 FIM Service and FIM Portal properties

Property name Description
SQMOPTINSETTING1 – opt in, 0 – opt out (default)
SQLSERVER_SERVER(Required) Name of SQL Server instance
SQLSERVER_DATABASEName of database (FIMService)
EXISTINGDATABASE0 – New database (default), 1 – Existing database
MAIL_SERVER(Required) Name of mailserver
MAIL_SERVER_USE_SSL0 – Disable SSL, 1 – Enable SSL (default)
MAIL_SERVER_IS_EXCHANGE0 – SMTP, 1 – Exchange (default)
SERVICE_MANAGER_SERVERName of the FIM Reporting Service Manager management server.
POLL_EXCHANGE_ENABLED0 – Server will not poll for e-mail messages1 – Server will poll for e-mail messages (default)
CERTIFICATE_NAMEName of certificate to generate (ForefrontIdentityManager)
SERVICE_ACCOUNT_NAME(Required) Service account name
SERVICE_ACCOUNT_PASSWORD(Required) Service account password
SERVICE_ACCOUNT_DOMAIN(Required) Service account domain
SERVICE_ACCOUNT_EMAIL(Required) Service account e-mail address
SYNCHRONIZATION_SERVER(Required) Address of FIM Synchronization Service server
SYNCHRONIZATION_SERVER_ACCOUNT FIM Service Management Agent account in format domain\accountname
SERVICEADDRESSAddress used by clients to contact the server
SHAREPOINT_URLURL used to contact the SharePoint server
REGISTRATION_PORTAL_URLAn optional URL of the FIM 2010 R2 password registration portal that the FIM portal will redirect to when the user clicks on the "Register for password reset" FIM portal homepage link.
FIREWALL_CONF0 – Do not configure firewall (default)1 – Configure firewall
SHAREPOINTUSERS_CONF0 – Do not add authenticated users (default1 – Add authenticated users
PASSWORDUSERS_CONF0 – Do not add authenticated users (default1 – Add authenticated users
REQUIRE_REGISTRATIONPORTAL_INFO0 – Do not require password registration information (default)1 – Require password registration information
REGISTRATION_ACCOUNT_NAMEAccount name of the application pool account that will run the password registration portal.
REGISTRATION_ACCOUNT_DOMAINDomain of the application pool account that will run the password registration portal.
REQUIRE_RESET_INFO0 – Do not require password reset information (default)1 – Require password reset information
RESET_ACCOUNT_NAMEAccount name of the application pool account that will run the password reset portal.
RESET_ACCOUNT_DOMAINDomain of the application pool account that will run the password reset portal.
SHAREPOINTTIMEOUTTimeout in seconds the installer should wait for Office SharePoint to deploy the solution packs.
Table 6 FIM 2010 R2 Certificate Management properties

Property Name Description
WEBAPPNAMEName of the virtual folder for certificate Management.
SITELOCK_DOMAINList of sites used by FIM CM installations. This list is used for ActiveX controls to initiate.
Table 7 Add-ins and Extensions properties

Property name Description
SQMOPTINSETTING1 – opt in, 0 – opt out (default)
PORTAL_LOCATIONAddress to the FIM Portal. Used by Outlook add-in.
PORTAL_PREFIXPrefix used to contact the FIM Portal. http or https (default)
MONITORED_EMAIL FIM Service e-mail address. Used by the Outlook add-in when sending e-mail messages.
RMS_LOCATIONAddress to the FIM Service. Used by Password Reset extensions
REGISTRATION_PORTAL_URLThe URL of the FIM 2010 R2 password registration portal that the rich client will navigate to by default. As part of the rich client password registration, the rich client will invoke the user's default browser to navigate to that URL if password registration be required. As part of the rich client password registration, the rich client will invoke the user's default browser to navigate to this URL if password registration be required.
BEST_EFFORT_INSTALLIf both components are selected, but one cannot be installed due to failed prerequisites, silently continue installation with the other component.
0 – Fail installation (default)
1 – Silently continue
The following is an example of installing the FIM 2010 R2 Synchronization Service:
msiexec /q /i “D:\Synchronization Service\Synchronization Service.msi" STORESERVER=LocalMachine SQLDB=FIMSynchronization SERVICEACCOUNT=FimSynchService SERVICEPASSWORD=Pass1word! SERVICEDOMAIN=CORP GROUPADMINS=FIMSyncAdmins GROUPOPERATORS=FIMSyncOperators GROUPACCOUNTJOINERS=FIMSyncJoiners GROUPBROWSE=FIMSyncBrowse GROUPPASSWORDSET=FIMSyncPasswordSet FIREWALL_CONF=1   /L*v C:\mylogfile.txt
The following is an example of installing the FIM 2010 R2 Service and Portal:
msiexec /q /i "D:\Service and Portal\Service and Portal.msi" ADDLOCAL=CommonServices,WebPortals SQMOPTINSETTING=0 SQLSERVER_SERVER=APP1 SQLSERVER_DATABASE=FIMService EXISTINGDATABASE=0 MAIL_SERVER=EX1.corp.contoso.com MAIL_SERVER_USE_SSL=0 MAIL_SERVER_IS_EXCHANGE=1 POLL_EXCHANGE_ENABLED=1 CERTIFICATE_NAME=ForefrontIdentityManager SERVICE_ACCOUNT_NAME=FIMService SERVICE_ACCOUNT_PASSWORD=abc123*2k SERVICE_ACCOUNT_DOMAIN=CORP SERVICE_ACCOUNT_EMAIL=FIMService@corp.contoso.com SERVICE_MANAGER_SERVER=APP2 SYNCHRONIZATION_SERVER=FIM1 SYNCHRONIZATION_SERVER_ACCOUNT=CORP\FIMMA SERVICEADDRESS=FIM1 SHAREPOINT_URL=http://localhost REGISTRATION_PORTAL_URL=https://passwordregistration.corp.contoso.com FIREWALL_CONF=1 SHAREPOINTUSERS_CONF=1 REQUIRE_REGISTRATION_INFO=1 REGISTRATION_ACCOUNT_NAME=FIMPassword REGISTRATION_ACCOUNT_DOMAIN=CORP REQUIRE_RESET_INFO=1 RESET_ACCOUNT_NAME=FIMPassword RESET_ACCOUNT_DOMAIN=CORP  /L*v C:\fimservicelog.txt
The following is an example of a command-line installation for the Password Reset and Registration Portal.
msiexec /q /i “D:\Service and Portal\Service and Portal.msi"  ADDLOCAL=RegistrationPortal,ResetPortal REGISTRATION_ACCOUNT=CORP\FIMPassword REGISTRATION_ACCOUNT_PASSWORD=Pass1word$ REGISTRATION_HOSTNAME=passwordregistration.corp.contoso.com REGISTRATION_PORT=80 REGISTRATION_FIREWALL_CONFIG=1 REGISTRATION_SERVERNAME=FIM1 IS_REGISTRATION_EXTRANET=Extranet RESET_ACCOUNT=CORP\FIMPassword RESET_ACCOUNT_PASSWORD=Pass1word$ RESET_HOSTNAME=passwordreset.corp.contoso.com RESET_PORT=81 RESET_FIREWALL_CONF=1  RESET_SERVERNAME=FIM1 IS_RESET_EXTRANET=Extranet /L*v C:\mylogfile.txt 
The following is an example of a command-line installation for the FIM CM Web Portal and FIM CM Update Service of FIM 2010 Certificate Management
msiexec /q /i “D:\Certificate Management\x64\Certificate Management.msi"  ADDLOCAL=CLM_Service,Web_Files WEBAPPNAME=CertificateManagement /L*v C:\mylogfile.txt
The following is an example of a command-line installation for the FIM CM CA Modules of FIM 2010 Certificate Management
msiexec /q /i “D:\Certificate Management\x64\Certificate Management.msi"  ADDLOCAL=CA_Modules /L*v C:\mylogfile.txt
The following is an example of a command-line installation for the FIM CM Client of FIM 2010 Certificate Management
msiexec /q /i “D:\CM Client\x64\CM Client.msi"  ADDLOCAL=CMClient,ChangePin,AppletManagement,SelfServiceControl,ProfileUpdateControl /L*v C:\mylogfile.txt
The following is an example of installing the Add-ins and Extensions:
msiexec /q /i “D:\Add-ins and extesnisons\x64\Add-ins and extensions.msi" ADDLOCAL=OfficeClient,PasswordClient PORTAL_LOCATION=FIM1 PORTAL_PREFIX=http RMS_LOCATION=FIM1 MONITORED_EMAIL=FIMService@corp.contoso.com REGISTRATION_PORTAL_URL=https://passwordregistratio.corp.contoso.com /L*v C:\mylogfile.txt
The following is an example of installing the Service and Portal Language Pack. It shows how to install the Japanese language pack for all of the components
msiexec /q /i “D:\Service and Portal Language Pack\Service and Portal Language Pack.msi" ADDLOCAL=FIMPortalLP,PortaljaJP,FIMServiceLP,MTjaJP, FIMResetPortalLP,ResetjaJP,FIMRegistrationPortalLP,RegistrationjaJP /L*v C:\mylogfile.txt
The following is an example of installing the Add-ins and Extensions Language Pack. It shows how to install the Japanese language.
msiexec /q /i “D:\Add-ins and Extensions Language Pack\Add-ins and Extensions Language Pack.msi" ADDLOCAL=FIMALP,jaJP /L*v C:\mylogfile.txt

No comments:

Post a Comment