Welcome
Welcome to the documentation for HCL® AppScan® Source.
Introduction to HCL® AppScan® Source
HCL® AppScan® Source delivers maximum value to every user in your organization who plays a role in software security. Whether a security analyst, quality assurance professional, developer, or executive, the AppScan Source products deliver the functionality, flexibility, and power you need - right to your desktop.
What's New in AppScan® Source
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install the product.
- System requirements and installation prerequisites
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
  - Installing all required components on one machine
    In this scenario, all components are installed on one machine. When configuring component connections, localhost settings are applied.
  - Installing AppScan® Source components in a multi-machine environment
    AppScan® Source components can be installed on multiple machines. In this scenario, components are deployed in a multi-machine environment. HCL® AppScan License Server, AppScan Enterprise Server, AppScan Source client products, and the AppScan Source Database are all installed on different machines.
  - Installing AppScan® Source and integrating it with an existing AppScan® Enterprise Server
    In this scenario, AppScan® Source components are installed on one machine - and they are configured to connect to an existing AppScan Enterprise Server.
  - Installing AppScan® Source in standalone mode
    In this scenario, all components are installed on one machine without a connection to AppScan® Enterprise or the AppScan Database Service.
  - Loading the AppScan Source Docker image
    In this scenario, the AppScan® Source command line interface (CLI) Docker image is downloaded and loaded into your Linux environment.
  - AppScan® Enterprise configuration
    With new installations of AppScan® Source version 10.0.2 and newer, you must configure AppScan Enterprise if you want to work in connected mode. These tasks need to be performed once.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure the product.
Administering
Learn how to administer the product.
Developing
Learn how to develop by using the product.
Extending product function
Learn how to extend the product.
Reference
Review reference information for the product.
Troubleshooting and support
There are a number of self-help information resources and tools to help you troubleshoot problems.

Sample installation scenarios

When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.

Important:

Before installing any component required for AppScan® Source, consult the component's system requirements to ensure it supports your operating system.
Obtain the appropriate license. See How to obtain and apply licenses for AppScan Source products.

Note: As of version 9.0.3.11, AppScan® Source no longer supports macOS or iOS Xcode project scanning.

AppScan® Source consists of key components, listed here in the order in which they should be installed:

HCL® AppScan® License Server: This is required for AppScan® Enterprise Server license application. It is also used for applying AppScan® Source floating licenses (but not for applying AppScan® Source local license files).
AppScan® Enterprise Server: All AppScan® Source products and components must communicate with an AppScan® Enterprise Server. Once installed, you specify the HCL® AppScan® License Server to which you have imported the AppScan® Enterprise Server license.
AppScan® Source product images: This includes AppScan® Source for Analysis, AppScan® Source for Automation, AppScan® Source for Development, and AppScan® Source for Remediation. Once installed, you specify the AppScan® Enterprise Server that the AppScan® Source Database will connect to. In addition, if you will make use of a floating license for AppScan® Source, you specify the HCL® AppScan® License Server to which you have imported the AppScan® Source license.

The instructions in these scenarios assume that:

All components are being installed on Microsoft™ Windows™. For some instructions, basic Linux™ settings and information are provided - however, main scenario workflow is described only for Windows™.
You have administrative privileges on the machine or machines on which you are installing AppScan® Source components.
A floating license will be used for activating the AppScan® Enterprise Server and local license files will be used for activating AppScan® Source components.