1

Last Updated: July 04th,

2014.Changes from the previous version are in green.

SITEMINDER 6.022,29

– PLATFORM SUPPORT

1. Policy Server11, 28 .......................................................................................................................................................................................................................................................... 2 2. 31-bit/32-bit Web Agents11, 25 .................................................................................................................................................................................................................................... 2

3. SAML Affiliate Agent .................................................................................................................................................................................................................................................. 3 4. Web Agent Option Pack10, 11 ......................................................................................................................................................................................................................................... 4 5. SDK5, 9 .......................................................................................................................................................................................................................................................................... 5 6.Mainframe Support ........................................................................................................................................................................................................................................................ 5 7. 64-bit Support ............................................................................................................................................................................................................................................................... 7 8. SiteMinder Policy Server 6.0 Directory Support ........................................................................................................................................................................................................ 11 9. SiteMinder 6.0 Components ....................................................................................................................................................................................................................................... 12 10. SiteMinder Policy Server compatibility with Other SiteMinder Components .......................................................................................................................................................... 14 11. RSA ACE Server, Secure ID, iRecorder ................................................................................................................................................................................................................... 14 12. SiteMinder 6.0 Platform Support Japanese Extended Certification .......................................................................................................................................................................... 15 13. SiteMinder Policy Server 6.0 J Components ............................................................................................................................................................................................................ 15 14. SiteMinder 6.0 J Web Agent Support ....................................................................................................................................................................................................................... 16 15. SiteMinder Policy Server 6.0 J Directory Support .................................................................................................................................................................................................... 16 16. SiteMinder 6.0 Simplified Chinese Web Agent Support .......................................................................................................................................................................................... 17 17. Reasonable Commercial Effort Statement ................................................................................................................................................................................................................ 17 18. 2007 Daylight Savings Time Statement .................................................................................................................................................................................................................... 17 19. SiteMinder Support for Arcot Advanced Authentication Products ........................................................................................................................................................................... 17 20. Third Party Products End of Support Statement ................................................................................................................................................................................................ 17

2

Operating

System1, 4, 14, 17

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC16

Solaris 10

x86

HPUX

11.11 (PA-

RISC)

HPUX

11.23 (PA-

RISC)

HPUX

11.23

(Itanium)

HPUX

11.31

(Itanium)

AIX 6.123

Red Hat

51, 5, 32

Red Hat 6

Oracle

Enterprise

Linux

51, 5, 32

SuseLinux

95, 21

Suse

Linux 10 5,21

Suse

Linux

115,21

1. Policy

Server11,28

6.0 SP5

CR22

Yes

Solaris 10

support as

of SP4

CR4 Zone

support as

of SP4

CR619, 26

SP1 SP5 CR21

2. 31-bit/32-

bitWeb Agents11, 25

Microsoft IIS

6.012

7.033 QMR5

CR2130,33

SunOne

6.0 RP, 13 Yes (Sol 9

only) Yes

6.1(includes Sun

Java System SPs)

RP, 13

QMR119 QMR5

CR219

QMR5

CR4

QMR6

CR35

QMR5

CR2

Sun Java System

7.0 (includes

Updates/SPs)RP

QMR5

CR619

QMR5

CR7 QMR5 CR6 QMR5 CR30

6QMR5

r6 SP5

CR35

QMR5CR6 QMR5

CR7

ASF Apache

1.3.33 & higher 3, RP Yes19 QMR3

2.0.54 & higher 3, RP

Yes19 QMR5

CR119

QMR5

CR16 QMR5 CR20

QMR2HF5

2.2.x3, RP QMR5

CR20

QMR6

CR9

QMR5

CR219

QMR5

CR319

QMR5

CR15 QMR5 CR20

QMR5

CR34

QMR5

CR3

QMR5

CR4

Red Hat Apache

2.0.46 RP

2.0.5xRP

2.2.x RP QMR5 CR21

IBM HTTP Server

5.3

6.0.x RP QMR319 QMR4 QMR5 CR23 QMR4

3

Operating

System1, 4, 14, 17

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC16

Solaris 10

x86

HPUX

11.11 (PA-

RISC)

HPUX

11.23 (PA-

RISC)

HPUX

11.23

(Itanium)

HPUX

11.31

(Itanium)

AIX 6.123

Red Hat

51, 5, 32

Red Hat 6

Oracle

Enterprise

Linux

51, 5, 32

SuseLinux

95, 21

Suse

Linux 10 5,21

Suse

Linux

115,21

CR4

6.1 RP QMR5

CR31

QMR4

CR819, 26 QMR4 CR9 QMR5CR14 QMR5 CR23

QMR5

CR35

QMR5

CR3

QMR5

CR3

7.0 RP QMR6

CR2

QMR5

CR31

QMR5

CR31 QMR5 CR35

SP6 CR7

QMR

6CR1

QMR6

CR2

Domino

6.5.x QMR4

CR9

QMR2

HF5

7.0, 7.0.1 QMR415, 19

QMR4

CR6

QMR5

CR11

7.0.2

QMR5

CR3

Sol 10

zone

support as

of QMR5

CR8

QMR5

CR03

QMR5

CR03

7.0.3 QMR5

CR29

8.0.x

QMR5

CR11 (Sol

10 only)

QMR5

CR17

QMR5

CR13

8.5 QMR5

CR30

QMR5

CR31

QMR5 CR

32

8.5.1 QMR6

CR4

QMR6CR1

Oracle HTTP

Server

10.1.x (Apache

1.3.x)

QMR3

CR219 QMR3 CR2 QMR5 CR28

QMR5

CR29

QMR5

CR20

QMR5

CR20

10.1.x (Apache

2.0.x)

QMR4

CR919

QMR5

CR3 QMR4 CR8 QMR5CR7

QMR5CR7

QMR5

CR15

11g (Apache 2.2.x) QMR6 CR3

HP Apache Server

2.0.5x

Yes QMR5

CR10

3.SAMLAffiliate

Agent

IIS 6.0

4

Operating

System1, 4, 14, 17

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC16

Solaris 10

x86

HPUX

11.11 (PA-

RISC)

HPUX

11.23 (PA-

RISC)

HPUX

11.23

(Itanium)

HPUX

11.31

(Itanium)

AIX 6.123

Red Hat

51, 5, 32

Red Hat 6

Oracle

Enterprise

Linux

51, 5, 32

SuseLinux

95, 21

Suse

Linux 10 5,21

Suse

Linux

115,21

SunOne 6.0 Yes2

SunOne6.1(includes

Sun Java System

SPs) RP, 13

QMR3

Sun Java System

7.0

QMR5

CR13

QMR5

CR18

ASF Apache 1.3.33

ASF Apache 2.0.54

& higher

Yes2

QMR5

CR4

QMR5

CR15

ASF Apache 2.2.x QMR5

CR11

QMR5

CR7

QMR5

CR15

IBM HTTP Server

6.0.x

IBM HTTP Server

6.1

QMR5

CR16

HP Apache 2.0.5x

QMR5

CR10

4. Web Agent

Option Pack10, 11

ServletExec ISAPI

5.0

ServletExec NSAPI

5.0

QMR27

ServletExec AS 5.0

QMR27, 19 QMR2

QMR2

HF5

ServletExec AS 6.0 QMR6

WebLogic Server

9.1, 9.2

QMR5

CR4 QMR5 CR4

QMR5

CR10

QMR5

CR4

WebLogic 10.0

MP1

QMR5

CR32

WebLogic

10.3(11g)

QMR6

CR3

QMR5

CR35

QMR5

CR35

QMR5

CR35

WebSphere 6.0.2 QMR4 QMR4 QMR4

WebSphere 6.1 QMR5

CR6 QMR5 CR6

QMR5

CR6

WebSphere7.0 QMR6

CR3

JBoss Enterprise

Web Server 4.2.x

QMR4

CR5

QMR5

CR16 QMR4CR5

QMR4CR5

5

Operating

System1, 4, 14, 17

Win

2008

Windows

2008 R2

(64 bit)

Solaris

9/10

SPARC16

Solaris 10

x86

HPUX

11.11 (PA-

RISC)

HPUX

11.23 (PA-

RISC)

HPUX

11.23

(Itanium)

HPUX

11.31

(Itanium)

AIX 6.123

Red Hat

51, 5, 32

Red Hat 6

Oracle

Enterprise

Linux

51, 5, 32

SuseLinux

95, 21

Suse

Linux 10 5,21

Suse

Linux

115,21

Tomcat

6.0 – 6.0.15

QMR5

CR35

5. SDK5, 9

V 6.0 Agent APIs

Yes SP5 CR16 Yes SP5 CR5 SP6 CR 2 SP5 CR21

QMR2

HF5

QMR5

CR16

V 6.0 Server APIs

Yes

Sol 10,

SP4 CR4

6.0 SP1 SP5 CR22

6. Mainframe Support

Operating

System4

Suse

Linux

921

for

System z

Suse

Linux

1021

for

System z

Red Hat

432

for

System z

Red Hat

432

for

System z

(64-bit)

Red Hat

532

for

System z

(64-bit)

Z/OS 1.9 Z/OS

1.10

Z/OS

1.11

Z/OS

1.12

Z/OS

1.13

Z/OS 2.1

31-bit/32-

bitWeb

Agents11, 25

ASF Apache

1.3.33 &

higher 3, RP

2.0.54 &

higher 3, RP

QMR5

CR18

2.0.54 &

higher, (64-

bit) 3, RP

SP6

CR2

QMR5

CR24

IBM HTTP

Server

5.3 Domino

Go

QMR5

CR4

QMR5

CR25

QMR5

CR25 QMR5

CR25 QMR5

CR25

SP6

CR10

6.0.x RP QMR4

CR5

QMR5

CR1331

QMR5

CR1431

6.1 RP QMR4

CR7

QMR5

CR16

QMR5

CR1731

QMR5

CR24

QMR5

CR35

7.0 QMR5

CR35

QMR5

CR35

8.0 QM

Web Agent

Option

6

Operating

System4

Suse

Linux

921

for

System z

Suse

Linux

1021

for

System z

Red Hat

432

for

System z

Red Hat

432

for

System z

(64-bit)

Red Hat

532

for

System z

(64-bit)

Z/OS 1.9 Z/OS

1.10

Z/OS

1.11

Z/OS

1.12

Z/OS

1.13

Z/OS 2.1

Pack10, 11

WebSphere

6.0.2

QMR5

CR6

SDK 5, 9

V 6.0 Agent

APIs

QMR4

CR3

QMR5

CR16

QMR6

CR1

7

7. 64-bit Support

Operating System1,4,

14, 17

Windows 2008

(64-bit)

Windows

2008 R2 (64-

bit)

Solaris 9/10

SPARC(64-

bit) 16

Solaris 10

x86 (64-bit)

HPUX 11.23

(64-bit PA-

RISC)

HPUX 11.23

(64-bit

Itanium)

HPUX 11.31

(64-bit

Itanium)

AIX 6.1 (64

bit) Red Hat 432

(64-bit)

Red Hat

51, 5, 32

(64-

bit)

Oracle

Enterprise

Linux

51, 5, 32

(64-bit)

Suse Linux 10

(64-bit) 5, 21

64-bitWeb Agents

Microsoft IIS

IIS 6.0 (64-bit)

IIS 7.0 (64-bit)33 QMR5 CR24

IIS 7.5 (64-bit)33 QMR6

CR1 24

SunOne

Sun Java System

6.1.x (64-bit) QMR5 CR9

Sun Java System 7.0

(64-bit) (Includes

Updates/SPs)

QMR5

CR13

RP: QMR5

CR28

ASF Apache

2.0.x (64-bit) RP QMR5 CR9 QMR5 CR16 QMR5 CR10 QRM5 CR13

2.2.x (64-bit) RP QMR5

CR16

QMR6

CR2 QMR5 CR21 QMR5 CR21

QMR5 CR11 QMR5 CR23 QMR5 CR35 QRM5 CR13

IBM HTTP Server

6.1 (64-bit) RP QMR5 CR25 QMR5 CR24 QMR5 CR30

7.0 (64-bit) RP QMR6 CR2 QMR5 CR32

Red Hat Apache

2.0.x (64-bit) RP QMR5 CR11

2.2.x (64-bit) RP QMR5 CR23

OEL Apache

2.2.x (64-bit) RP QMR5 CR35

Oracle HTTP

Server

10.1.x (Apache 2.0.x) QMR5 CR17 QMR5

CR18

11g (Apache 2.2.x) QMR 6

CR3

HP Apache

2.0.5x (64-bit)RP QMR5 CR16 QMR5 CR18

2.2.x (64-bit)RP QMR6 CR1

Web Agent Option

Pack10, 11

8

Operating System1,4,

14, 17

Windows 2008

(64-bit)

Windows

2008 R2 (64-

bit)

Solaris 9/10

SPARC(64-

bit) 16

Solaris 10

x86 (64-bit)

HPUX 11.23

(64-bit PA-

RISC)

HPUX 11.23

(64-bit

Itanium)

HPUX 11.31

(64-bit

Itanium)

AIX 6.1 (64

bit) Red Hat 432

(64-bit)

Red Hat

51, 5, 32

(64-

bit)

Oracle

Enterprise

Linux

51, 5, 32

(64-bit)

Suse Linux 10

(64-bit) 5, 21

Servlet Exec AS 6.0

(64-bit)

WebLogic 11g (64

bit)

QMR6

CR3 QMR6 CR3

WebSphere 6.1(64

bit)

SP6 CR5

64-bit SDK

V 6.0 Agent APIs SP5 CR2 SP5 CR26 SP5 CR4 SP5 CR4 SP5 CR17 SP5 CR5 SP5 CR24 SP5 CR12

9

Legend: Yes = supported for SiteMinder v6.0 release and later

QMR vX = supported for Agent release 6QMR vX and later (no backward compatibility)

SPX = Supported for Policy Server 6.0 SPX release and later

RP = Reverse Proxy is supported (if this is not listed for a web server that supports reverse proxy, this configuration is not supported with the Web Agent).

Notes: 1. Windows Server Standard/Enterprise/WebEditions supported. For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the

matrix. Red Hat AS, Red Hat ES, Red Hat Enterprise Linux and Red Hat Enterprise Linux Advanced Platform are supported.

2. Supported on Solaris 8 and 9 only.

3. Agent support policy for Apache:

For ASF Apache CA will specify the minimum version supported. Any problems reported will be fixed on the latest version of ASF Apache.

As ASF Apache releases new versions, CA cannot certify the agents against those releases immediately, but will plan to test and update the minimum supported version to the newest ASF

Apache version in the next QMR. Meanwhile, customers may use the most recent web agent release with the newer version of ASF Apache. If problems are discovered, the issues should be

reported to CA Support and CA will address the issues as escalations.

For Suse Linux Enterprise Server and Red Hat AS/ES CA will support the version of Apache bundled with the OS.

4. Hardware requirements - Solaris on SUN SPARC, Solaris on x86 and x64 (Intel and AMD), SUSE Enterprise Linux on x86 and x64 (Intel and AMD), SUSE Enterprise Linux on s390 and s390x

(IBM Mainframes), Red Hat Enterprise Linux on x86 and x64 (Intel and AMD), Red Hat Enterprise Linux on s390 and s390x (IBM Mainframes), HP-UX on PA-RISC 2 and Itanium, AIX on

PowerPC, z/OS on IBM Mainframes. 5. When building, SiteMinder custom auth schemes, or any other custom built components, you must use GCC version 3.2.2.

6. Supported with Domino 6.0.2 CF2; requires IBM hotfixes as listed in documentation

7. See third-party vendor’s support matrix for version(s) of Solaris supported by server and agent. ServletExec 5.0 is not supported on Solaris 10.

8.When Sun Java Web Server is on the same machine as an r6 SP6 Policy Server on Windows, version 6.1 Patch 12 is required in order for the SiteMinder Console to start.

9. Agent APIs support Suse Linux 8.0 starting from 6.0 SP2

10.Any supported web agent/web server combination can front-end a supported application server listed above for the web agent option pack provided that the application server also supports the web

server as a proxy plug-in.The SiteMinder Web Agent Option Pack is agnostic to Application Server clustering.

11. The SiteMinder Policy Server is supported as a 32-bit applicationrunning on Solaris 10 Sparc 64-bit and Red Hat 4, 5 64-bit. The Policy Server is not supported on Windows 64-bit. SiteMinder

Web Agents are supported as 32-bit applications running on 32-bit web servers running on 32-bit or 64-bit UNIX and Linux Operating Systems.

Only the following 32-bit web servers are supported on Windows 64-bit:

The 32-bit SiteMinder Web Agent for ASF Apache 2.2 (32-bit) is supported on Windows Server 2003 (64-bit) as of 6QMR5 CR30.

The 32-bit SiteMinder Web Agent for IHS 6.1 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6QMR5 CR31.

The 32-bit SiteMinder Web Agent for Domino 8.5 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6QMR5 CR35.

32-bit Web Agents are not supported with 64-bit Web Servers; you must match the bit level of the Web Agent with the bit level of the web server. The SiteMinder Web Agent Option Pack is a 32-bit

application that can run with a 32-bit Application Server on a 32-bit or 64-bit Operating System with the exception of Windows.

12. IIS 6.0 web agent only supports IIS 6.0 native mode, not in IIS 5 isolation mode.

13. Sun Web Server in Reverse Proxy mode support starts from 6QMR3.

14.For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix.

15. Supported on Solaris 9, 10 only.

16. End-of-Service scheduled for 3/31/2009. SUN’s End-of-Life date for Solaris 8 is scheduled for 3/31/2009.

17. Supported on VMWare ESX Server 2.5x, 3.0.x, 3.5x, 4.x.Web Agents starting with QMR4 are supported on VMware ESX Server 2.5x, 3.0.x, and 3.5x. Performance on VMware ESX Server is

dependent on the implementation and parameters of the virtual machine.

18.

10

19. The SiteMinder Web Agent is supported Solaris 10 sparse-root, whole-root, and global zones; the SiteMinder Web Agent is also supported on Solaris Logical Domains. The SiteMinder Policy

Server is supported on Solaris 10 sparse-root and whole-root zones. The Policy Server is supported on the Solaris 10 global zone, as long as there are no other instances of the PS running in

either sparse- or whole-root zones. The SiteMinder Policy Server is also supported on Solaris Logical Domains.

20. Running multiple instances of the web server is supported.

21. Supported with all Suse Linux service packs. Any problems reported will be fixed on the latest service pack of Suse Linux.

22. Microsoft Virtual Server is supported as long as you are running a supported SiteMinder OS as the guest upon which SiteMinder is to be installed.

23. SiteMinder Components running on AIX LPAR are supported.

24. Web Agent 6QMR6 CR01 64-bit has been certified with IIS7.5 (64-bit) web server on Windows 2008 R2 platform.

Once the Web Agent configuration wizard has been run successfully, it will configure the correct permissions to the DefaultAppPool for the SmHost.conf file and the Web Agent log directory.

For any other application pools configured, the administrator will have to explicitly set permissions on the SmHost.conf file and the Web Agent log directory.

This can be done using the following Microsoft Windows “calcs” commands:

For Smhost.conf: cacls "C:\Program Files\CA\web agent\config\SmHost.conf" /T /E /G "AppPoolName":C

For log directory: cacls "C:\Program Files\CA\webagent\log" /T /E /G "AppPoolName":C

Where “DefaultAppPool” is the name of the app pool identity. This command has to be executed for all the configured app pool identities.

25. ISA Server 2006 is supported as of QMR5 CR11. The ISA Server acts as reverse proxy to the web agent protecting the web server. The Web Agent has been certified to run behind ISA Server

2006. Delegated Authentication is not supported.

26. Solaris 10 (Domains and Logical Domains) supported.

27. Microsoft Exchange Outlook Web Access 2003 and Outlook Web Access 2007 are supported.

28. The CA Single Sign-On authentication scheme (smauthetsso) is supported for Windows and Solaris. HPUX support begins with Policy Server 6.0 SP5 CR27.

29. Unless otherwise stated, all 3rd party and SiteMinder components are 32-bit. 64-bit components are explicitly stated.

30. As of 6QMR5 CR6, SiteMinder can authenticate and authorize users to SharePoint 2003. As of 6QMR5 CR21, SiteMinder can authenticate and authorize users to SharePoint 2007, and any site

built on SharePoint Services 3.0.Support for SharePoint 2007 on IIS 7 on Windows 2008 begins with 6QMR5 CR27. Support for SharePoint 2007 on IIS 7 (64-bit) on Windows 2008 (64-bit) begins

with 6QMR5 CR31.

31. Since the web server is a 31-bit application, the SiteMinder Web Agent certified on the web server is also a 31-bit application.

32. Supported with all Red Hat updates. Any problems reported will be fixed on the latest Red Hat update. Security Enhanced Red Hat Linux is supported, please see vendor’s documentation for setup

instructions to enablethird-party processes (such as SiteMinder) to run on the system.

33. The SiteMinder Web Agent is an ISAPI plug-in installed within IIS 7.x. IIS 7.x is supported in classic pipeline mode ONLY;integrated pipeline mode is not supported.

11

8. SiteMinder Policy Server 6.0 Directory Support

DIRECTORY9 VERSIONNUMBER POLICY STORE

9 SESSION STORE USER STORE PASSWORD SERVICES

SunOne LDAP Directory 5.21 YES YES YES

Sun Java System Directory Server EE 6 v6.x SP5 CR6 SP5 CR6 SP5 CR6

7 SP6 SP6 SP6

Novell eDirectory 8.8.x SP4 CR4 SP4 CR4 SP4 CR4

Microsoft Active Directory (AD)2 Win 2003, 2003 R2 Yes Yes Yes

Win 2008 SP5 CR30 SP5 CR30 SP5 CR30

Microsoft Active Directory in Application Mode (ADAM)2 Win 2003 (ADAM 1.x) Yes Yes Yes

Microsoft Active Directory Lightweight Directory Services

(LDS)2

Win 2008 (LDS) SP5 CR31 SP5 CR31 SP5 CR31

Microsoft AD Global Catalog2 Win 2003 Yes

Microsoft SQL Server2, 11 SQL 2005 SP4 SP4 SP4 SP4

SQL 2005 - Cluster

Environment SP5 SP5 SP5 SP5

SQL 2008, 2008 R2 SP6 CR1 SP6 CR1 SP6 CR1 SP6 CR1 MySQL 5.x SP6 SP6 SP6 SP6

Oracle Internet Directory 10g R2, 10g R3 SP5 SP5 Yes

11g SP6 CR1 SP6 CR1 SP6 CR1

Oracle RDBMS 10 10g R2 SP4 SP4 SP4 SP4

11g R1 SP6 SP6 SP6 SP6

Oracle RAC 10g R2 SP5 SP5 SP5 SP5

11g R1 SP6 SP6 SP6 SP6

OpenLDAP 2.3.x SP5 SP5 SP5

Domino LDAP 6.5 Yes

7 SP4

8.0 SP5 CR27

IBM Tivoli Directory Server 6.0 SP4 SP4 SP4

6.1 SP5 CR11 SP5 CR11 SP5 CR11

6.2 SP5 CR35 SP5 CR35 SP5 CR35

IBM ISS LDAP Server for z/OS (RACF) 5 V1R9 SP5 CR11 SP5 CR11

IBM Tivoli Directory Server for z/OS (RACF) 5 V1R9 8 SP5 CR11

Critical Path (IDS) 4.2 Yes Yes Yes

4.2.5 SP5 SP5 SP5

Siemens DirX 6.0D00, EE 2.0 Yes Yes Yes

8.0 SP5 CR11 SP5 CR11 SP5 CR11

CA Directory Server 12 SP5 CR15 SP5 CR15 SP5 CR15

12 SP1 SP5 CR24 SP5 CR24 SP5 CR24

12 SP2 SP6 SP6 SP6

12 SP3, SP4, SP5 SP6 SP6 SP6

CA LDAP Server for z/OS (TopSecret) 12 SP5 CR28

CA LDAP Server for z/OS (RACF) 12 SP5 CR30

12

IBM DB2 UDB 9.5 SP6 SP6 SP6 SP6

OpenWave 6.0.1 SP3 CR2 SP3 CR2

Red Hat Directory Server 7.1 SP4 SP4 SP4

8.0, 8.1 SP6 SP6 SP6

RadiantOne Virtual Directory Server (VDS) 4.5 SP4 SP4

Notes: 1.When Sun Directory Server is on the same machine as an r6 SP6 Policy Server on Windows, version 5.2 Patch 6 is required in order for the SiteMinder Console to start.

2. For Microsoft Windows Server 2003 & 2008 and for Microsoft SQL Server, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix.

3.

4.

5. RACF native authentication and SiteMinder Password Services are supported. However, they may not be used together.

6. Includes support for Directory Proxy.

7.

8. The following must be installed on the Tivoli Directory Server: PTF UA37096 for APAR OA22052.

9.For information on SiteMinder Policy Stores multi-master replication mode support, please see the Product Documentation).

10. SiteMinder supports the following Oracle editions: Standard Edition One, Standard Edition, and Enterprise Edition

11. SiteMinder supports the following Microsoft SQL Server Editions: Standard Edition and Enterprise Edition. For Microsoft SQL Server service packs (e.g., SP1, SP2, SP3) are supported in

addition to base release shown in the matrix.

9. SiteMinder 6.0 Components

ONEVIEW

MONITOR

SUPPORTED SERVLET EXEC VERSIONS

Win2k3 Win2k8 Sol 9/10 HP-UX 11i Red Hat 3/4/5

IIS 6.0 SE 5.0 ISAPI

SE 6.0 AS (as of SP5 CR28)

IIS 7.0 SE 6.0 AS (as of SP5 CR28)

Sun Java 6.0/6.1

SE 5.0 AS

SE 6.0 AS (as of SP5 CR25) SE 5.0 AS SE 5.0 AS

Sun Java 7.0 SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25)

ASF Apache 2.0 SE 5.0 AS (as of SP5 CR4) SE 5.0 AS

ASF Apache 2.2 SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25)

ASF Apache 1.3 SE 5.0 AS

HP Apache 2.0 SE 5.0 AS

POLICY SERVER USER

INTERFACE (APPLET)

SUPPORTED VERSIONS

Web Servers Windows: IIS 6.0, IIS7.0 (classic pipeline mode only), ASF Apache 2.2 as of SP5 CR15

Solaris: ASF Apache 2.2, SunOne/Sun Java System 6.0, 6, Sun Java System 7.0 as of SP5

CR24

HPUX: HP Apache 1.3.28, HP Apache 2.0, SunOne/Sun Java System 6.0, 6.1

Red Hat: ASF Apache 2.0.x, SunOne/Sun Java System 6.1, ASF Apache 2.2 and Sun

13

JavaSystem 7.0 as of SP5 CR24. IHS 6.1 as of SP5 CR27

Web Browsers Internet Explorer and Firefox

POLICY SERVER JVM

Java Runtime Environment1 For SiteMinder r6.0-r6.0 SP4: Sun JRE 1.4.2_07 (32-bit only) and above (1.4.x series only).

For SiteMinder r6.0 SP5: Sun/HP 1.5.0_01 (32-bit only) and above (1.5.x series only).

For SiteMinder r6.0 SP6: Sun/HP 1.6.0_16 (32-bit only) and above (1.6.x series only).

SCRIPTING INTERFACE 2

Operating Systems Solaris 8, 9. Support for Solaris 10 as of 6.0 SP5.

HPUX 11.11

SDK JDK REQUIREMENTS

Web Agent APIs (32-bit) Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01

(32-bit only) and above (1.5.x series only) as of 6QMR5. Sun Java 1.6 as of CR33.HP

andIBM Java 1.6 as of 6.0 SP6.

Policy Server APIs (32-bit) Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01

(32-bit only) and above (1.5.x series only). As of 6QMR5. Sun Java 1.6 as of CR33. HP and

IBM Java 1.6 as of 6.0 SP6.

Web Agent APIs (64-bit) Sun/IBM/HP 1.5.0_10 (64-bit) and above (1.4.x series only). Oracle JRockit R27 as of

CR25. Sun Java 1.6 as of CR33.HP and IBM Java 1.6 as of 6.0 SP6.

Notes: 1. JDK is required (as opposed to JRE) on Policy Server when installing the Policy Server Option Pack. Policy Server Option Pack not supported on HP-UX for use with the Web Agent

Option Pack to enable federation.

2. SiteMinder 6.0 ships with ActiveState Perl 5.6.1 on Windows and Solaris. The Scripting Interface is only supported with this version.

14

10. SiteMinder Policy Server compatibility with Other SiteMinder Components

PRODUCT VERSION

WEB AGENTS 5.x QMR5 and higher

SAML AFFILIATE AGENT 5.x QMR5 and higher

APPLICATION SERVER AGENTS Refer to App Server Agent support matrix

ERP AGENT Refer to ERP agent support matrix

SECURE PROXY SERVER 5.5, 6.0

Note: 1.4.x Agents with SiteMinder Policy Server 6.0 are supported for Japanese customers only.

11. RSA ACE Server, Secure ID, iRecorder

1.RSA ACE Server: RSA ACE server 5.2, 6.0, 6.1 supported. The Secure ID Authentication scheme is supported on Windows 2003 (using “RSA Authentication Agent 6.1.2 for Microsoft

Windows”), Solaris 9/10, and Red Hat 3 -based Policy Servers. Red Hat 3 supported as of 6.0 SP5 CR14. SiteMinder ships the client library from the “RSA Authentication Agent API 6.1 for C”

sdk for use on Solaris and Red Hat.

RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR29 running on Windows Server 2003 (using “RSA Authentication Agent 6.1.2 for Microsoft Windows”). RSA

Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR30 running on Solaris 10 (using “RSA Authentication Agent API 6.1 for C”). RSA Authentication Manager Server 7.1

is supported with SiteMinder 6 SP5 CR31 running on Red Hat 3 (using “RSA Authentication Agent API 6.1 for C”).RSA Authentication Manager6.1 & 7.1 is supported with CA SiteMinder 6

SP6 CR2 running on Red Hat 5 (using “RSA Authentication Agent API 6.1for C”).

2.iRecorder:iRecorder with Oracle 9i is supported starting from Policy Server 6.0 SP4 CR-002.

15

12. SiteMinder 6.0 Platform Support Japanese Extended Certification

13. SiteMinder Policy Server 6.0 J Components

PLATFORM SUPPORTED VERSIONS

POLICY SERVER

Operating Systems Solaris 92

Solaris 10 J3

Admin Interface Web Servers IIS 5.0 J on Windows 2000 SP4 J

IIS 6.0 J on Windows 2003J, Windows 2003 SP1J

iPlanet 6.0 J on Solaris 92

Sun Java Web Server 6.1 on Solaris 10J

Internet Explorer 7 on Windows 2003 SP1J

Admin Interface browsers Win2000 SP4J, Win2003J, Win2003 SP1J: IE 5.5J, IE 6.0J; Netscape 6.23

Solaris 92: Netscape 6.23

Java Runtime Environment Sun JRE 1.4.2_7 and above(32-bit only, 1.4.x series only)

ONE VIEW MONITOR

Operating Systems Solaris 92,Solaris102

Web Servers IIS 5.0 J on Windows 2000 SP4 J

IIS 6.0 J on Windows 2003 J

iPlanet 6.0 J on Solaris 92

Servlet Engines Servlet Exec 4.2

ISAPI 4.2 for Windows/IIS

AS 4.2 for UNIX/SunOne

Java SDK Sun JDK 1.4.2_7 and above(32-bit only, 1.4.x series only)

SCRIPTING INTERFACE 1

Operating Systems Solaris 92 ,Solaris 102

Notes: 1. SiteMinder 6.0 J ships with ActiveState Perl 5.6.1 on Windows and Solaris. The Scripting Interface is only supported with this version.

2. Japanese locale settings are supported on Solaris 9& 10.

3. Supported as of 6.0 SP4.

16

14. SiteMinder 6.0 J Web Agent Support

Windows 2000 SP4 J Windows 2003 Windows 2003

SP1 J

Solaris 9 Solaris 10 J

Web Agents1

MS IIS 5.0 J Yes

MS IIS 6.0 J Yes QMR4 CR7

Apache 1.3.28 Yes

SunONE 6.0 J Yes Yes

Sun Java System 6.1

SP4 J & higher QMR5

Notes: 1. As of 6QMR5 CR14 SiteMinder FCC Password Services has been localized into Japanese.

15. SiteMinder Policy Server 6.0 J Directory Support

DIRECTORY VERSION

NUMBER

USER

STORE

POLICY

STORE

PASSWORD

SERVICES

SunOne LDAP Directory V5.1J Yes Yes Yes

Novell eDirectory V8.72 Yes Yes Yes

Microsoft Active Directory (AD) Win 2K J,

Win2003 J,

Win2003

SP1J

Yes Yes Yes

Microsoft SQL Server 1 2000 J Yes Yes Yes

Oracle RDBMS V9i J Yes Yes Yes

Notes:

1. Supported only with Windows Policy Servers

2. Japanese locale settings are supported with eDir V8.7

17

16. SiteMinder 6.0 Simplified Chinese Web Agent Support

Windows 2003

SP2

Solaris

9/10

Web Agents1

MS IIS 6.0 QMR5 CR14

Sun Java System 7.0

(includes

Updates/SPs)

QMR5

CR14

Notes:

1. As of 6QMR5 CR14 SiteMinder FCC Password Services has been localized into Simplified Chinese.

17. Reasonable Commercial Effort Statement

CA Technical Support will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests that involve the use of currently supported versions of CA SiteMinder on or

with "unsupported" platforms as follows:

CA Technical Support will accept support incidents (support requests) involving a software platform or a combination of software platforms that is not officially supported per the then-

current CA published platform support matrices. CA will troubleshoot the issue up to the point that CA has reason to believe that the problem is related to the use of software that is not

specified in a then-current platform supported matrix. At such point, CA shall require that the customer reproduce the problem on a fully supported combination of platforms before CA

proceeds in troubleshooting the incident.

18. 2007 Daylight Savings Time Statement

For SiteMinder Option Pack for Policy Server, SiteMinder Option Pack for Web Agent, SiteMinder Federation Security Services, and SiteMinder SAML Affiliate Agent: Depends on the JRE/JDK for

DST compliance. It is not necessary to upgrade your JRE/JDK to the latest version in order to make it DST compliant. Sun has provided a tool, called the tzupdater, available here

http://java.sun.com/developer/technicalArticles/Intl/tzupdatertool.htmlthat will modify a single data file and make your existing JRE/JDK DST compliant without requiring a version upgrade.

19. SiteMinder Support for Arcot Advanced Authentication Products

Support forArcot'sWebFort Authentication Adapter 1.0 for SiteMinder begins with SiteMinder 6.0 SP5.

Support for SiteMinder 6.0 SP6 beginning in CR1:

Arcot : Adapter 1.0 with Webfort version 5.4

Arcot: Adapter 2.1.6 with Webfort version 6.0.1.1

SiteMinder 6.0 SP6 CR3 and later are supported with Arcot WebFort Authentication Adapter 2.2.1 and WebFort 6.2

SiteMinder 6.0 SP6 CR3 and later are supported with Arcot Adapter 2.2.1 with RiskFort version 2.2.6

SiteMinder 6.0 SP6 CR3 and later are supported with Arcot A-OK Console version 2.10 and Adapter 1.2.1

20. Third Party Products End of Support Statement

When a third party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third party product or any SiteMinder components that interoperate with

the third party product. Third party products under extended vendor support are not supported by CA.

Examples of third party products are: web server, application server, operating system, directory, database, etc.