Configuring Trusted Agents

Trusted Agents configuration requires steps on two networks and potentially multiple servers.

Good to Know:

You need separate Trusted Agent Hubs and shared keys for each CSM environment (development, test, and production, for example).
Each Trusted Agent Server makes one connection to each LDAP or Active Directory server. If you have multiple domains, you must install a Trusted Agent Server on each domain, but each server can connect to the same Trusted Agent Hub for its environment.
For server and operating system requirements, refer to the CSM System Requirements.
When you upgrade CSM, you must also upgrade all Trusted Agents Servers.

Process for SaaS Customers

To facilitate communications between CSM and your private resources, Cherwell configures the Trusted Agents Hub on Cherwell servers. You install and configure one or more Trusted Agents servers on your network.


Configuration Task	Task Location
1. Request a Trusted Agents Hub from Cherwell.	Cherwell data center.
2. Install the Trusted Agents Server. See Install the Trusted Agents Server.	A server on the same network as your private resource.
3. Configure the Trusted Agents Server. See Configure the Trusted Agents Server.	The same server where you installed the Trusted Agents Server on the same network as your private resource.
4. Grant Security rights to control access to Trusted Agent configuration options in CSM Administrator. See Tools Security Rights.	From CSM Administrator.
5. Connect to the Trusted Agents Hub from CSM Administrator. This step is required if you intend to use features that require configuration in CSM Administrator. These features include: Importing external data using Trusted Agents Scaling Trusted Agents for request routing Importing Directory Service data Into Business Objects Using email Executing One-Step Actions on a remote network See Connect to the Trusted Agents Hub from CSM Administrator.	From CSM Administrator.
6. Create Trusted Agents Service groups. This step is required if you want to route requests to only specific Trusted Agent Services. See Configure Trusted Agents Service Groups.	From CSM Administrator.

Process for On-premises Customers

On-premises customers configure all Trusted Agents components.


Configuration Task	Task Location
1. Enable the Trusted Agents Hub. See Configure the Trusted Agents Hub in the Server Manager.	On the server that runs the CSM Browser Client web application. If you are using server farms, this task must be performed on each server.
2. Install the Trusted Agents Server. See Install the Trusted Agents Server.	A server on the same network as your private resource.
3. Configure the Trusted Agents Server. See Configure the Trusted Agents Server.	The same server where you installed the Trusted Agents Server on the same network as your private resource.
4. Grant Security rights to control access to Trusted Agent configuration options in CSM Administrator. See Tools Security Rights.	From CSM Administrator.
5. Connect to the Trusted Agents Hub from CSM Administrator. This step is required if you intend to use features that require configuration in CSM Administrator. These features include: Importing external data using Trusted Agents Scaling Trusted Agents for request routing Importing Directory Service data Into Business Objects Using email Executing One-Step Actions on a remote network See Connect to the Trusted Agents Hub from CSM Administrator.	From CSM Administrator.
6. Create Trusted Agents Service groups. This step is required if you want to route requests to only specific Trusted Agent Services. See Configure Trusted Agents Service Groups.	FromCSM Administrator.