Welcome
Reference
Review reference information for the product.
Configuring Wizard topics
Learn about configuring wizard topics.
License Server
Use this page to apply the AppScan Enterprise license.

Welcome
Welcome to the HCL AppScan Enterprise 10.11.0 documentation, where you can find information about how to install, maintain, and use HCL AppScan Enterprise.
Accessibility features for AppScan® Enterprise
Accessibility features assist users who have a disability, such as restricted mobility or limited vision, to use information technology content successfully.
Overview
Learn general information about the product.
Installing
Learn how to install the product.
Upgrading and migrating
Learn how to upgrade the product.
Integrating
Learn how to integrate the product with other solutions.
DevOps
Learn how to extend the product with REST APIs and plugins.
Best practices
Learn best practices for using the product.
Configuring
Learn how to configure the product.
Administering
Learn how to administer the product.
Managing application risk
Follow this workflow to manage application security risks in your organization.
Troubleshooting and support
To help you understand, isolate, and resolve problems with your HCL® software, the troubleshooting and support information contains instructions for using the problem-determination resources that are provided with your HCL products.
Reference
Review reference information for the product.
- Configuring Wizard topics
  Learn about configuring wizard topics.
  - Server Components
    Select the components you want to configure. The components available to you depend on the license.
  - License Server
    Use this page to apply the AppScan Enterprise license.
  - Instance Name
    Specify the name of the instance you want to configure.
  - Database Connection
    Enter the SQL Server name, port number, select the authentication mode and the name of the database you are connecting to. If you select SQL Authentication, enter the username and password before you click Test Connection to verify that you can connect to the SQL Server. The configuration wizard does not proceed until the connection is successful. When AppScan® Enterprise Server creates the database in SQL Server, it automatically configures the collation for it.
  - Database encryption changes
    AppScan® Enterprise no longer uses proprietary encryption mechanisms to prevent unauthorized transfers of its database because there are other third-party mechanisms that are designed to specifically perform physical layer encryption with less impact on performance. This type of encryption is usually applied at the database server level; for example, SQL Server Enterprise Edition has a built-in encryption TDE mechanism (Transparent Data Encryption). TDE encrypts the data residing in the database or in backups on physical media. SQL Server Standard Edition uses Windows™ Encrypting File System.
  - Service Account
    Specify the service account that will be used by the services.
  - Server Certificate
    For security reasons, HTTPS is enabled for Enterprise Console. Choose a certificate from the list of certificates that are installed in IIS. Taking these actions will help you deploy a secure AppScan® Enterprise in your environment.
  - Restore AppScan Server settings
    Upon upgrade, you can choose to restore previous AppScan Server customized settings on the Liberty Server. This screen appears once upon upgrade; if you run the configuration wizard later, this screen won't appear.
  - Server Keystore
    If you choose to use a keystore that contains a trusted certificate chain for this host, complete the available fields.
  - Authentication Mechanism
    Select an Authentication Mechanism to use to log into the Enterprise Console. If you choose Windows, you must be part of a domain.
  - Product Administrator
    This user is licensed separately; if you want to reassign the Product Administrator license, you must rerun the configuration wizard.
  - Server Group Changes
    A server group is a group of items that can be tested as a unit; the same security tests will be applied to all the servers in the group. A server group can be any combination of domains and IP addresses. You must create one or more server groups to define what can be tested. Once a server group is created, you then assign it to a Job Administrator. That person then creates jobs that perform security tests on a specific group of servers. As of version 9.0, Server Groups are no longer defined by URL. Any existing URL definitions are removed from existing Server Groups and listed in the WFCfigWiz.log.
  - Server Configuration
    Configure the host name and port of the Liberty server for AppScan Enterprise Server to use. If you are using Windows authentication, prefix the host name with your domain name.
- Folder Explorer topics
  Learn about folder explorer topics.
- Triage with reports
  Reports are automatically generated after a job has run. They provide a way of managing issues so that you can helps you manage issues that are important to your organization and do so in a way that is supported both by the Enterprise Console's workflow and the workflows of other processes within your organization.
- Configuration Manager
- Command-line utilities
  This section provides information about standalone command-line utilities that are included with AppScan Enterprise. These tools perform specific tasks outside of the main graphical user interface.
- AppScan resources
  A GitHub collection of integrations, helper scripts, utilities, useful examples, libraries, and other resources related to HCL AppScan.
- Compliance
  Compliance with United States government security and information technology regulations helps to remove sales impediments and roadblocks. It also provides a proof point to prospects worldwide that HCL® is working to make its products the most secure in the industry. This topic lists the standards and guidelines that AppScan® Enterprise supports.
- WebSocket support
  AppScan Enterprise seamlessly handles WebSocket protocols that use JSON or XML messages for data exchange by automatically detecting them and executing the appropriate tests during the scan, without requiring any special configuration.
Glossary

License Server

Use this page to apply the AppScan Enterprise license.

Copy the Fingerprint Key and use it to generate your license file from the My HCLSoftware (MHS) portal. Place the generated .license file in the installation directory.

When you select Next, the wizard validates that the license signature is correct, that the machine fingerprint matches, and that the current system date falls within the license start and expiration dates.

Note:

Inactive licenses: If the license has a valid signature but a start date in the future, the wizard considers it "Inactive." Verify that the start date in the license file (viewable via MHS) has been reached and check your system clock.
Entitlements priority: If multiple entitlements exist in a license file, the system prioritizes them in the following order: Active > Inactive (Future) > Expired.