Last Updated: January 11 2013. Changes from the previous version are in green. SITEMINDER 6.

022,29 PLATFORM SUPPORT

1. Policy Server11, 28 .......................................................................................................................................................................................................................................................... 2 2. 31-bit/32-bit Web Agents11, 25.................................................................................................................................................................................................................................... 2 3. SAML Affiliate Agent .................................................................................................................................................................................................................................................. 4 4. Web Agent Option Pack10, 11 ......................................................................................................................................................................................................................................... 5 5. SDK5, 9 .......................................................................................................................................................................................................................................................................... 5 6. Mainframe Support ....................................................................................................................................................................................................................................................... 6 7. 64-bit Support ............................................................................................................................................................................................................................................................... 7 8. SiteMinder Policy Server 6.0 Directory Support ........................................................................................................................................................................................................ 11 9. SiteMinder 6.0 Components ....................................................................................................................................................................................................................................... 12 10. SiteMinder Policy Server compatibility with Other SiteMinder Components .......................................................................................................................................................... 14 11. RSA ACE Server, Secure ID, iRecorder ................................................................................................................................................................................................................... 14 12. SiteMinder 6.0 Platform Support Japanese Extended Certification .......................................................................................................................................................................... 15 13. SiteMinder Policy Server 6.0 J Components ............................................................................................................................................................................................................ 15 14. SiteMinder 6.0 J Web Agent Support ....................................................................................................................................................................................................................... 16 15. SiteMinder Policy Server 6.0 J Directory Support .................................................................................................................................................................................................... 16 16. SiteMinder 6.0 Simplified Chinese Web Agent Support .......................................................................................................................................................................................... 17 17. Reasonable Commercial Effort Statement ................................................................................................................................................................................................................ 17 18. 2007 Daylight Savings Time Statement .................................................................................................................................................................................................................... 17 19. SiteMinder Support for Arcot Advanced Authentication Products ........................................................................................................................................................................... 17 20. Third Party Products End of Support Statement ................................................................................................................................................................................................ 17

Win Operating Win 2003 System1, 4, 14, 17 2003 R2 1. Policy Server11, 28

Win 2008

Solaris HPUX HPUX HPUX HPUX Windows 9/10 Solaris 11.11 11.23 11.23 11.31 AIX 2008 R2 SPARC 10 x86 (PA- (PA- (Itani (Itani 5.323 (64 bit) 16 RISC) RISC) um) um)

AIX 6.123

Red Hat 45, 32

Oracle Suse Suse Suse Red Hat Red Hat Enterpri Linux 9 Linux 10 Linux 11 1, 5, 32 se Linux 5 6 5, 21 5,21 5,21 51, 5, 32

6.0

Yes

SP4 CR1

SP5 CR22

Yes Solaris 10 support as of SP4 CR4 Zone support as of SP4 CR619, 26

SP1

SP5 CR11

SP5 CR21

2. 31-bit/32-bit Web Agents11,

25

Microsoft IIS
6.012 7.033 SunOne 6.0 RP, 13 6.1(includes Sun Java System SPs) RP,
13

Yes27, QMR4
30 27, 30

QMR5 CR2130,
33

Yes (Sol 9 only) QMR2 HF18 QMR119 QMR5 CR219

Yes QMR5 CR4 QMR6 QMR5 CR35 CR3 6QMR5 r6 SP5 CR35 QMR5 CR2

QMR3

Sun Java System 7.0 QMR QMR5 (includes 5CR6 CR6 Updates/SPs) RP ASF Apache 1.3.33 & higher
3, RP

QMR5 CR619

QMR5 QMR5 CR7 CR6

QMR5 CR7

QMR5 CR30

QMR5 CR6

QMR5 CR7

Yes19 Yes19 QMR5 CR119

QMR4 CR3 QMR5 QMR5 QMR4 CR1 CR16 CR1 QMR5 CR20

QMR3 QMR2 HF5

2.0.54 & higher

3, RP

QMR2 HF1 QMR4 CR620

Win Operating Win 2003 System1, 4, 14, 17 2003 R2 2.2.x3, RP Red Hat Apache 2.0.46 RP 2.0.5x RP 2.2.x RP IBM HTTP Server 5.3 6.0.x RP 6.1 RP 7.0 RP Domino 6.5.x 7.0, 7.0.1

Solaris HPUX HPUX HPUX HPUX Windows 9/10 Solaris 11.11 11.23 11.23 11.31 AIX 2008 R2 SPARC 10 x86 (PA- (PA- (Itani (Itani 5.323 (64 bit) 16 RISC) RISC) um) um) QMR5 QMR5 QMR6 QMR5 QMR5 QMR5 CR2 CR20 CR9 CR219 CR319 CR2 Win 2008

AIX 6.123

Red Hat 45, 32

QMR5 QMR5 CR15 CR2

Oracle Suse Suse Suse Red Hat Red Hat Enterpri Linux 9 Linux 10 Linux 11 1, 5, 32 se Linux 5 6 5, 21 5,21 5,21 51, 5, 32 QMR5 QMR5 QMR5 QMR5 CR20 CR34 CR3 CR4

QMR4 CR1 QMR5 CR21

QMR QMR4 3 CR6 QMR QMR4 QMR5 4 CR8 CR31 CR8 QMR6 CR1 QMR2 HF1 QMR QMR4 3 CR5 CR3

QMR319 QMR4 CR819, 26 QMR6 CR2 QMR5 CR31 QMR4 CR9 QMR415,
19

QMR4 QMR4 CR9

QMR2 HF4

QMR4 CR1

QMR5 CR23 QMR5 CR23 QMR5 CR35 SP6 CR7 QMR5 CR35

QMR4 CR4 QMR5 CR3 QMR5 CR3 QMR 6CR1 QMR2 HF5 QMR6 CR2

QMR4 QMR5 QMR4 CR7 CR14 CR8 QMR5 QMR5 QMR5 CR35 CR31 CR30

QMR5 QMR4 QMR5 CR5

QMR4 CR6

QMR5 CR11

7.0.2

QMR QMR5 5 CR03 CR03

QMR5 CR3 Sol 10 zone support as of QMR5 CR8 QMR5 CR29 QMR5 CR11

QMR5 CR04

QMR5 CR5

QMR5 CR03

QMR5 CR03

7.0.3 8.0.x

QMR QMR5 5 CR25 CR25 QMR5 CR11

QMR5 CR30 QMR5 QMR5 CR11 CR17 QMR5 CR13

Win Operating Win 2003 System1, 4, 14, 17 2003 R2

8.5 8.5.1 Oracle HTTP Server 10.1.x (Apache 1.3.x) 10.1.x (Apache 2.0.x) 11g (Apache 2.2.x) HP Apache Server 2.0.5x 3. SAML Affiliate Agent IIS 6.0 SunOne 6.0 SunOne6.1(incl udes Sun Java System SPs) RP,
13

Solaris HPUX HPUX HPUX HPUX Windows 9/10 Solaris 11.11 11.23 11.23 11.31 AIX AIX 2008 R2 SPARC 10 x86 (PA- (PA- (Itani (Itani 5.323 6.123 (64 bit) 16 RISC) RISC) um) um) (Sol 10 only) QMR5 QMR5 QMR5 QMR5 CR27 CR30 CR31 CR 32 QMR5 QMR6 QMR6 CR35 CR4 CR1 Win 2008

Red Hat 45, 32

Oracle Suse Suse Suse Red Hat Red Hat Enterpri Linux 9 Linux 10 Linux 11 1, 5, 32 se Linux 5 6 5, 21 5,21 5,21 51, 5, 32

QMR5 CR11

QMR3 CR219 QMR4 CR919

QMR3 CR2 QMR5 QMR4 QMR5 CR3 CR8 CR7

QMR5 CR28 QMR4 CR5 QMR4 CR6 QMR6 CR3

QMR5 CR29

QMR5 CR20 QMR5 CR7

QMR5 CR20 QMR5 CR15

Yes

QMR5 CR10

QMR QMR5 3 CR6 Yes2 QMR3 QMR QMR5 5 CR13 CR13

Sun Java System 7.0

QMR5 CR13

QMR5 CR18

QMR5 CR11

ASF Apache 1.3.33 ASF Apache QMR5 2.0.54 & higher CR28 ASF Apache QMR5 2.2.x CR12 IBM HTTP Server 6.0.x IBM HTTP QMR QMR5

Yes2 QMR5 CR11

QMR5 CR4 QMR5 CR7

QMR4 CR7 QMR5 CR11

QMR5 CR15 QMR5 CR15

QMR5

QMR5

Win Operating Win 2003 System1, 4, 14, 17 2003 R2 Server 6.1 HP Apache 2.0.5x 4. Web Agent Option Pack10,
11

Win 2008

5 CR8 CR8

Solaris HPUX HPUX HPUX HPUX Windows 9/10 Solaris 11.11 11.23 11.23 11.31 AIX 2008 R2 SPARC 10 x86 (PA- (PA- (Itani (Itani 5.323 (64 bit) 16 RISC) RISC) um) um) CR16 QMR5 CR10

AIX 6.123

Red Hat 45, 32 CR8

Oracle Suse Suse Suse Red Hat Red Hat Enterpri Linux 9 Linux 10 Linux 11 1, 5, 32 se Linux 5 6 5, 21 5,21 5,21 51, 5, 32

ServletExec QMR QMR2 ISAPI 5.0 2 ServletExec QMR QMR2 NSAPI 5.0 2 ServletExec AS QMR QMR2 5.0 2 ServletExec AS QMR QMR6 6.0 6 QMR WebLogic QMR5 5 Server 9.1, 9.2 CR4 CR4 WebLogic 10.0 MP1 WebLogic QMR6 10.3(11g) CR3 WebSphere QMR QMR4 6.0.2 4 QMR QMR5 WebSphere 6.1 5 CR6 CR6 QMR6 WebSphere7.0 CR3 JBoss QMR QMR4 Enterprise Web 4CR5 CR5 Server 4.2.x Tomcat 6.0 6.0.15 5. SDK5, 9 V 6.0 Agent Yes APIs V 6.0 Server Yes APIs

QMR27 QMR27,
19

QMR2

QMR2 HF3

QMR5 CR3

QMR2 HF5

QMR6 QMR5 CR4 QMR5 CR32 QMR5 CR35 QMR4 QMR5 CR6 QMR4 QMR5 CR6 QMR5 CR4 QMR5 CR10 QMR5 CR4 QMR5 CR4

QMR5 CR35 QMR4 QMR5 CR6 QMR4 QMR5 CR6

QMR5 CR35 QMR4 QMR5 CR6

QMR4 CR5

QMR5 QMR4 CR16 CR5

QMR4 CR5

QMR4 CR5

QMR4 CR5 QMR5 CR35

Yes Yes Sol 10,

SP5 CR16

Yes 6.0 SP1

SP5 CR5

QMR2 SP6 CR QMR4 SP5 CR21 HF3 2 SP5 SP5 CR22 CR16

QMR2 HF5

QMR5 CR16

Win Operating Win 2003 System1, 4, 14, 17 2003 R2

Win 2008

Solaris HPUX HPUX HPUX HPUX Windows 9/10 Solaris 11.11 11.23 11.23 11.31 AIX 2008 R2 SPARC 10 x86 (PA- (PA- (Itani (Itani 5.323 (64 bit) 16 RISC) RISC) um) um) SP4 CR4

AIX 6.123

Red Hat 45, 32

Oracle Suse Suse Suse Red Hat Red Hat Enterpri Linux 9 Linux 10 Linux 11 1, 5, 32 se Linux 5 6 5, 21 5,21 5,21 51, 5, 32

6. Mainframe Support
Operating System4 31-bit/32-bit Web Agents11, 25 ASF Apache 1.3.33 & higher 3, RP 2.0.54 & higher 3, RP 2.0.54 & higher, (64bit) 3, RP IBM HTTP Server 5.3 6.0.x RP 6.1 RP 7.0 8.0 Web Agent Option Pack10, 11 WebSphere 6.0.2 SDK 5, 9 V 6.0 Agent APIs QMR4 CR5 QMR4 CR7 QMR5 QMR5 CR1331 CR1431 QMR5 QMR5 CR1731 CR24 Suse Suse Red Hat Red Hat Red Hat Z/OS 1.9 Z/OS Linux Linux 432 for 432 for 532 for 1.10 921 for 1021 for System z System z System z System z System z (64-bit) (64-bit) Z/OS 1.11 Z/OS 1.12 Z/OS 1.13

QMR5 CR18 SP6 CR2 QMR5 CR24

QMR5 CR4

QMR5 QMR5 CR25 CR25

QMR5 CR25

QMR5 CR25

QMR5 CR16 QMR5 CR35

QMR5 CR35 QMR5 CR35 QM

QMR5 CR6 QMR4 CR3 QMR5 CR16 QMR6 CR1

7. 64-bit Support
Operating System1,4, 14, 17 64-bit Web Agents Microsoft IIS IIS 6.0 (64-bit) IIS 7.0 (64bit)33 IIS 7.5 (64bit)33 SunOne Sun Java System 6.1.x (64-bit) Sun Java System 7.0 (64bit) (Includes Updates/SPs) ASF Apache 2.0.x (64-bit)
RP

AIX 6.1 Oracle Solaris HPUX Windows HPUX HPUX (64 bit) Red Hat Red Hat Enterprise Suse Linux Windows Windows 9/10 Solaris 11.23 2003, 11.23 (64- 11.31 AIX 5.3 Linux 2008 (64- 2008 R2 SPARC 10 x86 (64-bit 432 (64- 51, 5, 32 10 (64-bit) 2003 R2 bit (64-bit (64-bit) 5, 21 bit) (64-bit) (64-bit) (64-bit) PAbit) (64-bit) 51, 5, 32 (64(64-bit) Itanium) Itanium) 16 RISC) bit)

QMR5 CR7 QMR5 CR24 QMR6 CR1 24 QMR5 CR9 QMR5 CR13 RP: QMR5 CR28 QMR5 CR9 QMR5 QMR6 CR16 CR2 QMR5 CR16 QMR5 CR21 QMR5 CR13 QMR5 CR13 QMR5 CR10 QMR5 CR11 QRM5 CR13 QRM5 CR13

2.2.x (64-bit) RP IBM HTTP Server 6.1 (64-bit) RP 7.0 (64-bit) RP Red Hat Apache 2.0.x (64-bit)
RP

QMR5 CR21

QMR5 CR23

QMR5 CR35

QMR5 CR25 QMR6 CR2

QMR5 CR24

QMR5 CR30 QMR5 CR32

QMR5 CR11 QMR5 CR23

2.2.x (64-bit) RP OEL Apache

Operating System1,4, 14, 17

2.2.x (64-bit) RP Oracle HTTP Server 10.1.x (Apache 2.0.x) 11g (Apache 2.2.x) HP Apache 2.0.5x (64-bit)
RP

AIX 6.1 Oracle Solaris HPUX Windows HPUX HPUX (64 bit) Red Hat Red Hat Enterprise Suse Linux Windows Windows 9/10 Solaris 11.23 2003, 11.23 (64- 11.31 AIX 5.3 Linux 2008 (64- 2008 R2 SPARC 10 x86 (64-bit 432 (64- 51, 5, 32 10 (64-bit) 2003 R2 bit (64-bit (64-bit) 5, 21 bit) (64-bit) (64-bit) (64-bit) PAbit) (64-bit) 51, 5, 32 (64(64-bit) Itanium) Itanium) 16 RISC) bit) QMR5 CR35

QMR5 CR17 QMR 6 CR3 QMR5 CR16 QMR5 CR18 QMR6 CR1

QMR5 CR18

2.2.x (64-bit)
RP

Web Agent Option Pack10,

11

Servlet Exec SP5 CR26 AS 6.0 (64-bit) WebLogic 11g (64 bit) WebSphere 6.1(64 bit) 64-bit SDK V 6.0 Agent SP5 CR5 APIs

QMR6 CR3

QMR6 CR3 SP6 CR5

SP5 CR2

SP5 SP5 CR4 SP5 CR4 CR26

SP5 SP5 CR3 CR17

SP5 CR5

SP5 CR24

SP5 CR12

Legend: Yes = supported for SiteMinder v6.0 release and later QMR vX = supported for Agent release 6QMR vX and later (no backward compatibility) SPX = Supported for Policy Server 6.0 SPX release and later RP = Reverse Proxy is supported (if this is not listed for a web server that supports reverse proxy, this configuration is not supported with the Web Agent). Notes: 1. Windows Server Standard/Enterprise/Web Editions supported. For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix. Red Hat AS, Red Hat ES, Red Hat Enterprise Linux and Red Hat Enterprise Linux Advanced Platform are supported. 2. Supported on Solaris 8 and 9 only. 3. Agent support policy for Apache: For ASF Apache CA will specify the minimum version supported. Any problems reported will be fixed on the latest version of ASF Apache. As ASF Apache releases new versions, CA cannot certify the agents against those releases immediately, but will plan to test and update the minimum supported version to the newest ASF Apache version in the next QMR. Meanwhile, customers may use the most recent web agent release with the newer version of ASF Apache. If problems are discovered, the issues should be reported to CA Support and CA will address the issues as escalations. For Suse Linux Enterprise Server and Red Hat AS/ES CA will support the version of Apache bundled with the OS. 4. Hardware requirements - Solaris on SUN SPARC, Solaris on x86 and x64 (Intel and AMD), SUSE Enterprise Linux on x86 and x64 (Intel and AMD), SUSE Enterprise Linux on s390 and s390x (IBM Mainframes), Red Hat Enterprise Linux on x86 and x64 (Intel and AMD), Red Hat Enterprise Linux on s390 and s390x (IBM Mainframes), HP-UX on PA-RISC 2 and Itanium, AIX on PowerPC, z/OS on IBM Mainframes. 5. When building, SiteMinder custom auth schemes, or any other custom built components, you must use GCC version 3.2.2. 6. Supported with Domino 6.0.2 CF2; requires IBM hot fixes as listed in documentation 7. See third-party vendors support matrix for version(s) of Solaris supported by server and agent . ServletExec 5.0 is not supported on Solaris 10. 8. When Sun Java Web Server is on the same machine as an r6 SP6 Policy Server on Windows, version 6.1 Patch 12 is required in order for the SiteMinder Console to start. 9. Agent APIs support Suse Linux 8.0 starting from 6.0 SP2 10. Any supported web agent/web server combination can front-end a supported application server listed above for the web agent option pack provided that the application server also supports the web server as a proxy plug-in. The SiteMinder Web Agent Option Pack is agnostic to Application Server clustering. 11. The SiteMinder Policy Server is supported as a 32-bit application running on Solaris 10 Sparc 64-bit and Red Hat 4, 5 64-bit. The Policy Server is not supported on Windows 64-bit. SiteMinder Web Agents are supported as 32-bit applications running on 32-bit web servers running on 32-bit or 64-bit UNIX and Linux Operating Systems. Only the following 32-bit web servers are supported on Windows 64-bit: The 32-bit SiteMinder Web Agent for ASF Apache 2.2 (32-bit) is supported on Windows Server 2003 (64-bit) as of 6QMR5 CR30. The 32-bit SiteMinder Web Agent for IHS 6.1 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6QMR5 CR31. The 32-bit SiteMinder Web Agent for Domino 8.5 (32-bit) is supported on Windows Server 2008 (64-bit) as of 6QMR5 CR35. 32-bit Web Agents are not supported with 64-bit Web Servers; you must match the bit level of the Web Agent with the bit level of the web server. The SiteMinder Web Agent Option Pack is a 32-bit application that can run with a 32-bit Application Server on a 32-bit or 64-bit Operating System with the exception of Windows. 12. IIS 6.0 web agent only supports IIS 6.0 native mode, not in IIS 5 isolation mode. 13. Sun Web Server in Reverse Proxy mode support starts from 6QMR3. 14. For Microsoft Windows Server 2003 & 2008, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix. 15. Supported on Solaris 9, 10 only. 16. End-of-Service scheduled for 3/31/2009. SUNs End-of-Life date for Solaris 8 is scheduled for 3/31/2009. 17. Supported on VMWare ESX Server 2.5x, 3.0.x, 3.5x, 4.x. Web Agents starting with QMR4 are supported on VMware ESX Server 2.5x, 3.0.x, and 3.5x. Performance on VMware ESX Server is dependent on the implementation and parameters of the virtual machine. 18.

19. The SiteMinder Web Agent is supported Solaris 10 sparse-root, whole-root, and global zones; the SiteMinder Web Agent is also supported on Solaris Logical Domains. The SiteMinder Policy Server is supported on Solaris 10 sparse-root and whole-root zones. The Policy Server is supported on the Solaris 10 global zone, as long as there are no other instances of the PS running in either sparse- or whole-root zones. The SiteMinder Policy Server is also supported on Solaris Logical Domains. 20. Running multiple instances of the web server is supported. 21. Supported with all Suse Linux service packs. Any problems reported will be fixed on the latest service pack of Suse Linux. 22. Microsoft Virtual Server is supported as long as you are running a supported SiteMinder OS as the guest upon which SiteMinder is to be installed. 23. SiteMinder Components running on AIX LPAR are supported. 24. Web Agent 6QMR6 CR01 64-bit has been certified with IIS7.5 (64-bit) web server on Windows 2008 R2 platform. Once the Web Agent configuration wizard has been run successfully, it will configure the correct permissions to the DefaultAppPool for the SmHost.conf file and the Web Agent log directory. For any other application pools configured, the administrator will have to explicitly set permissions on the SmHost.conf file and the Web Agent log directory. This can be done using the following Microsoft Windows calcs commands: For Smhost.conf: cacls "C:\Program Files\CA\web agent\config\SmHost.conf" /T /E /G "AppPoolName":C For log directory: cacls "C:\Program Files\CA\webagent\log" /T /E /G "AppPoolName":C Where DefaultAppPool is the name of the app pool identity. This command has to be executed for all the configured app pool identities.

25. ISA Server 2006 is supported as of QMR5 CR11. The ISA Server acts as reverse proxy to the web agent protecting the web server. The Web Agent has been certified to run behind ISA Server 2006. Delegated Authentication is not supported. 26. Solaris 10 (Domains and Logical Domains) supported. 27. Microsoft Exchange Outlook Web Access 2003 and Outlook Web Access 2007 are supported. 28. The CA Single Sign-On authentication scheme (smauthetsso) is supported for Windows and Solaris. HPUX support begins with Policy Server 6.0 SP5 CR27. 29. Unless otherwise stated, all 3rd party and SiteMinder components are 32-bit. 64-bit components are explicitly stated. 30. As of 6QMR5 CR6, SiteMinder can authenticate and authorize users to SharePoint 2003. As of 6QMR5 CR21, SiteMinder can authenticate and authorize users to SharePoint 2007, and any site built on SharePoint Services 3.0. Support for SharePoint 2007 on IIS 7 on Windows 2008 begins with 6QMR5 CR27. Support for SharePoint 2007 on IIS 7 (64-bit) on Windows 2008 (64-bit) begins with 6QMR5 CR31. 31. Since the web server is a 31-bit application, the SiteMinder Web Agent certified on the web server is also a 31-bit application. 32. Supported with all Red Hat updates. Any problems reported will be fixed on the latest Red Hat update. Security Enhanced Red Hat Linux is supported, please see vendors documentation for setup instructions to enable third-party processes (such as SiteMinder) to run on the system. 33. The SiteMinder Web Agent is an ISAPI plug-in installed within IIS 7.x. IIS 7.x is supported in classic pipeline mode ONLY; integrated pipeline mode is not supported.

10

8. SiteMinder Policy Server 6.0 Directory Support DIRECTORY9 SunOne LDAP Directory Sun Java System Directory Server EE 6 Novell eDirectory Microsoft Active Directory (AD) 2 Microsoft Active Directory in Application Mode (ADAM) 2 Microsoft Active Directory Lightweight Directory Services (LDS) 2 Microsoft AD Global Catalog 2 Microsoft SQL Server 2, 11

VERSION NUMBER 5.2 1 v6.x 7 8.8.x Win 2003, 2003 R2 Win 2008 Win 2003 (ADAM 1.x) Win 2008 (LDS) Win 2003 SQL 2005 SQL 2005 - Cluster Environment SQL 2008, 2008 R2 5.x 10g R2, 10g R3 11g 10g R2 11g R1 10g R2 11g R1 2.3.x 6.5 7 8.0 6.0 6.1 6.2 V1R9 V1R9 8 4.2 4.2.5 6.0D00, EE 2.0 8.0 12 12 SP1 12 SP2 12 SP3, SP4, SP5 12 12

POLICY STORE9 YES SP5 CR6 SP6 SP4 CR4 Yes SP5 CR30 Yes SP5 CR31 SP4 SP5 SP6 CR1 SP6 SP5 SP6 CR1 SP4 SP6 SP5 SP6 SP5

SESSION STORE

USER STORE YES SP5 CR6 SP6 SP4 CR4 Yes SP5 CR30 Yes SP5 CR31

PASSWORD SERVICES YES SP5 CR6 SP6 SP4 CR4 Yes SP5 CR30 Yes SP5 CR31 SP4 SP5 SP6 CR1 SP6 Yes SP6 CR1 SP4 SP6 SP5 SP6 SP5

SP4 SP5 SP6 CR1 SP6

Yes SP4 SP5 SP6 CR1 SP6 SP5 SP6 CR1 SP4 SP6 SP5 SP6 SP5 Yes SP4 SP5 CR27 SP4 SP5 CR11 SP5 CR35 SP5 CR11 SP5 CR11 Yes SP5 Yes SP5 CR11 SP5 CR15 SP5 CR24 SP6 SP6 SP5 CR28 SP5 CR30

MySQL Oracle Internet Directory Oracle RDBMS 10 Oracle RAC OpenLDAP Domino LDAP

SP4 SP6 SP5 SP6

IBM Tivoli Directory Server

SP4 SP5 CR11 SP5 CR35

IBM ISS LDAP Server for z/OS (RACF) 5 IBM Tivoli Directory Server for z/OS (RACF) 5 Critical Path (IDS) Siemens DirX CA Directory Server

SP4 SP5 CR11 SP5 CR35 SP5 CR11 Yes SP5 Yes SP5 CR11 SP5 CR15 SP5 CR24 SP6 SP6

Yes SP5 Yes SP5 CR11 SP5 CR15 SP5 CR24 SP6 SP6

CA LDAP Server for z/OS (TopSecret) CA LDAP Server for z/OS (RACF)

11

IBM DB2 UDB OpenWave Red Hat Directory Server RadiantOne Virtual Directory Server (VDS)

9.5 6.0.1 7.1 8.0, 8.1 4.5

SP6 SP3 CR2 SP4 SP6 SP4

SP6

SP6 SP3 CR2 SP4 SP6 SP4

SP6 SP4 SP6

Notes: 1. When Sun Directory Server is on the same machine as an r6 SP6 Policy Server on Windows, version 5.2 Patch 6 is required in order for the SiteMinder Console to start. 2. For Microsoft Windows Server 2003 & 2008 and for Microsoft SQL Server, service packs (e.g., SP1, SP2) are supported in addition to base releases shown in the matrix. 3. 4. 5. RACF native authentication and SiteMinder Password Services are supported. However, they may not be used together. 6. Includes support for Directory Proxy. 7. 8. The following must be installed on the Tivoli Directory Server: PTF UA37096 for APAR OA22052. 9. For information on SiteMinder Policy Stores multi-master replication mode support, please see the Product Documentation). 10. SiteMinder supports the following Oracle editions: Standard Edition One, Standard Edition, and Enterprise Edition 11. SiteMinder supports the following Microsoft SQL Server Editions: Standard Edition and Enterprise Edition. For Microsoft SQL Server service packs (e.g., SP1, SP2, SP3) are supported in addition to base release shown in the matrix.

9. SiteMinder 6.0 Components ONE VIEW MONITOR Win2k3 IIS 6.0 SE 5.0 ISAPI SE 6.0 AS (as of SP5 CR28) IIS 7.0 Sun Java 6.0/6.1 Sun Java 7.0 ASF Apache 2.0 ASF Apache 2.2 ASF Apache 1.3 HP Apache 2.0 POLICY SERVER USER INTERFACE (APPLET) Web Servers

Win2k8

SUPPORTED SERVLET EXEC VERSIONS Sol 9/10 HP-UX 11i

Red Hat 3/4/5

SE 6.0 AS (as of SP5 CR28) SE 5.0 AS SE 6.0 AS (as of SP5 CR25) SE 6.0 AS (as of SP5 CR25) SE 5.0 AS (as of SP5 CR4) SE 6.0 AS (as of SP5 CR25) SE 5.0 AS SE 5.0 AS SE 6.0 AS (as of SP5 CR25) SE 5.0 AS SE 6.0 AS (as of SP5 CR25) SE 5.0 AS SE 5.0 AS

SUPPORTED VERSIONS Windows: IIS 6.0, IIS7.0 (classic pipeline mode only), ASF Apache 2.2 as of SP5 CR15 Solaris: ASF Apache 2.2, SunOne/Sun Java System 6.0, 6, Sun Java System 7.0 as of SP5 CR24 HPUX: HP Apache 1.3.28, HP Apache 2.0, SunOne/Sun Java System 6.0, 6.1 Red Hat: ASF Apache 2.0.x, SunOne/Sun Java System 6.1, ASF Apache 2.2 and Sun Java

12

Web Browsers POLICY SERVER JVM Java Runtime Environment 1 SCRIPTING INTERFACE 2 Operating Systems

System 7.0 as of SP5 CR24. IHS 6.1 as of SP5 CR27 Internet Explorer and Firefox For SiteMinder r6.0-r6.0 SP4: Sun JRE 1.4.2_07 (32-bit only) and above (1.4.x series only). For SiteMinder r6.0 SP5: Sun/HP 1.5.0_01 (32-bit only) and above (1.5.x series only). For SiteMinder r6.0 SP6: Sun/HP 1.6.0_16 (32-bit only) and above (1.6.x series only). Windows 2003. Support for Windows 2003 SP1 as of 6.0 SP5 Solaris 8, 9. Support for Solaris 10 as of 6.0 SP5. HPUX 11.11 Red Hat Enterprise Linux AS 2.1, 3.0. Support for Red Hat AS 4.0 as of 6.0 SP5. Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01 (32-bit only) and above (1.5.x series only) as of 6QMR5. Sun Java 1.6 as of CR33. HP and IBM Java 1.6 as of 6.0 SP6. Sun 1.4.2_07 (32-bit only) and above (1.4.x series only). Support for Sun/IBM/HP 1.5.0_01 (32-bit only) and above (1.5.x series only). As of 6QMR5. Sun Java 1.6 as of CR33. HP and IBM Java 1.6 as of 6.0 SP6. Sun/IBM/HP 1.5.0_10 (64-bit) and above (1.4.x series only). Oracle JRockit R27 as of CR25. Sun Java 1.6 as of CR33. HP and IBM Java 1.6 as of 6.0 SP6.

SDK JDK REQUIREMENTS Web Agent APIs (32-bit)

Policy Server APIs (32-bit)

Web Agent APIs (64-bit)

Notes: 1. 2.

JDK is required (as opposed to JRE) on Policy Server when installing the Policy Server Option Pack. Policy Server Option Pack not supported on HP-UX for use with the Web Agent Option Pack to enable federation. SiteMinder 6.0 ships with ActiveState Perl 5.6.1 on Windows and Solaris. The Scripting Interface is only supported with this version.

13

10. SiteMinder Policy Server compatibility with Other SiteMinder Components PRODUCT WEB AGENTS SAML AFFILIATE AGENT APPLICATION SERVER AGENTS ERP AGENT SECURE PROXY SERVER VERSION 5.x QMR5 and higher 5.x QMR5 and higher Refer to App Server Agent support matrix Refer to ERP agent support matrix 5.5, 6.0

Note: 1. 4.x Agents with SiteMinder Policy Server 6.0 are supported for Japanese customers only. 11. RSA ACE Server, Secure ID, iRecorder 1. RSA ACE Server: RSA ACE server 5.2, 6.0, 6.1 supported. The Secure ID Authentication scheme is supported on Windows 2003 (using RSA Authen tication Agent 6.1.2 for Microsoft Windows), Solaris 9/10, and Red Hat 3 -based Policy Servers. Red Hat 3 supported as of 6.0 SP5 CR14. SiteMinder ships the client library from the RSA Authentication Agent API 6.1 for C sdk for use on Solaris and Red Hat. RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR29 running on Windows Server 2003 (using RSA Auth entication Agent 6.1.2 for Microsoft Windows). RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR30 running on Solaris 10 (using RSA Authentication Agent API 6.1 for C). RSA Authentication Manager Server 7.1 is supported with SiteMinder 6 SP5 CR31 running on Red Hat 3 (using RSA Authentication Agent API 6.1 for C). RSA Authentication Manager 6.1 & 7.1 is supported with CA SiteMinder 6 SP6 CR2 running on Red Hat 5 (using RSA Authentication Agent API 6.1 for C). 2. iRecorder: iRecorder with Oracle 9i is supported starting from Policy Server 6.0 SP4 CR-002.

14

12. SiteMinder 6.0 Platform Support Japanese Extended Certification 13. SiteMinder Policy Server 6.0 J Components PLATFORM POLICY SERVER Operating Systems SUPPORTED VERSIONS Windows 2000 SP4J Windows 2003J Windows 2003 SP1J Solaris 92 Solaris 10 J3 IIS 5.0 J on Windows 2000 SP4 J

Admin Interface Web Servers

IIS 6.0 J on Windows 2003J, Windows 2003 SP1J

iPlanet 6.0 J on Solaris 92 Sun Java Web Server 6.1 on Solaris 10J Internet Explorer 7 on Windows 2003 SP1J Admin Interface browsers Java Runtime Environment ONE VIEW MONITOR Operating Systems

Win2000 SP4J, Win2003J, Win2003 SP1J: IE 5.5J, IE 6.0J; Netscape 6.23

Solaris 92: Netscape 6.23 Sun JRE 1.4.2_7 and above (32-bit only, 1.4.x series only) Win2000 SP4 J Win2003 J Solaris 92 ,Solaris 102 IIS 5.0 J on Windows 2000 SP4 J IIS 6.0 J on Windows 2003 J iPlanet 6.0 J on Solaris 92 Servlet Exec 4.2 ISAPI 4.2 for Windows/IIS AS 4.2 for UNIX/SunOne Sun JDK 1.4.2_7 and above (32-bit only, 1.4.x series only) Win2000 SP4 J Win2003 J, Win2003 R2 SP2 J Solaris 92 ,Solaris 102

Web Servers

Servlet Engines

Java SDK SCRIPTING INTERFACE 1 Operating Systems

Notes: 1. SiteMinder 6.0 J ships with ActiveState Perl 5.6.1 on Windows and Solaris. The Scripting Interface is only supported with this version. 2. Japanese locale settings are supported on Solaris 9 & 10. 3. Supported as of 6.0 SP4.

15

14. SiteMinder 6.0 J Web Agent Support Windows 2000 SP4 J Web Agents1 MS IIS 5.0 J MS IIS 6.0 J Apache 1.3.28 SunONE 6.0 J Sun Java System 6.1 SP4 J & higher Windows 2003 Windows 2003 Solaris 9 SP1 J Solaris 10 J

Yes Yes Yes QMR4 CR7 Yes Yes QMR5

Notes: 1. As of 6QMR5 CR14 SiteMinder FCC Password Services has been localized into Japanese. 15. SiteMinder Policy Server 6.0 J Directory Support DIRECTORY SunOne LDAP Directory Novell eDirectory Microsoft Active Directory (AD) VERSION NUMBER V5.1 J V8.72 USER STORE Yes Yes Yes Yes Yes POLICY STORE Yes Yes Yes Yes Yes PASSWORD SERVICES Yes Yes Yes Yes Yes

Win 2K J, Win2003 J, Win2003 SP1J

Microsoft SQL Server 1 2000 J Oracle RDBMS V9i J Notes: 1. Supported only with Windows Policy Servers 2. Japanese locale settings are supported with eDir V8.7

16

16. SiteMinder 6.0 Simplified Chinese Web Agent Support Windows 2003 SP2 Web Agents1 MS IIS 6.0 Sun Java System 7.0 (includes Updates/SPs) QMR5 CR14 QMR5 CR14 Solaris 9/10

Notes: 1. As of 6QMR5 CR14 SiteMinder FCC Password Services has been localized into Simplified Chinese.
17. Reasonable Commercial Effort Statement CA Technical Support will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests that involve the use of currently supported versions of CA SiteMinder on or with "unsupported" platforms as follows: CA Technical Support will accept support incidents (support requests) involving a software platform or a combination of software platforms that is not officially supported per the thencurrent CA published platform support matrices. CA will troubleshoot the issue up to the point that CA has reason to believe that the problem is related to the use of software that is not specified in a then-current platform supported matrix. At such point, CA shall require that the customer reproduce the problem on a fully supported combination of platforms before CA proceeds in troubleshooting the incident. 18. 2007 Daylight Savings Time Statement For SiteMinder Option Pack for Policy Server, SiteMinder Option Pack for Web Agent, SiteMinder Federation Security Services, and SiteMinder SAML Affiliate Agent: Depends on the JRE/JDK for DST compliance. It is not necessary to upgrade your JRE/JDK to the latest version in order to make it DST compliant. Sun has provided a tool, called the tzupdater, available here http://java.sun.com/developer/technicalArticles/Intl/tzupdatertool.html that will modify a single data file and make your existing JRE/JDK DST compliant without requiring a version upgrade.

19. SiteMinder Support for Arcot Advanced Authentication Products Support for Arcot's WebFort Authentication Adapter 1.0 for SiteMinder begins with SiteMinder 6.0 SP5.

Support for SiteMinder 6.0 SP6 beginning in CR1: Arcot : Adapter 1.0 with Webfort version 5.4 Arcot: Adapter 2.1.6 with Webfort version 6.0.1.1 SiteMinder 6.0 SP6 CR3 and later are supported with Arcot WebFort Authentication Adapter 2.2.1 and WebFort 6.2 SiteMinder 6.0 SP6 CR3 and later are supported with Arcot Adapter 2.2.1 with RiskFort version 2.2.6 SiteMinder 6.0 SP6 CR3 and later are supported with Arcot A-OK Console version 2.10 and Adapter 1.2.1

20. Third Party Products End of Support Statement When a third party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third party product or any SiteMinder components that interoperate with the third party product. Third party products under extended vendor support are not supported by CA. Examples of third party products are: web server, application server, operating system, directory, database, etc.

17

18