Home
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
Advanced installation and activation topics
This section describes advanced installation options and activation procedures.
Installing AppScan® Source for Development
The AppScan® Source for Development plug-ins are installed to your computer via the standard AppScan Source installation wizard.
AppScan® Source for Development (plug-in for Eclipse and IBM® MobileFirst Platform
If you are installing the AppScan® Source for Development plug-in for Eclipse or IBM® MobileFirst Platform, you will need to apply the plug-ins to your workbench after installing them to your computer.

Welcome
Welcome to the documentation for HCL® AppScan® Source.
What's New
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
- System requirements and installation prerequisites
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
  - Starting the installation wizard
    The AppScan® Source installation wizard runs on Microsoft™ Windows™ and Linux™ operating systems.
  - Installation and user data file locations
    When you install AppScan® Source, user data and configuration files are stored outside of the installation directory.
  - AppScan® Enterprise Server overview
    The AppScan® Enterprise Server is a separately-installable component. The server provides centralized user management capabilities and a mechanism for sharing assessments via the AppScan Source Database. In addition, if your administrator has installed the Enterprise Console component of the AppScan Enterprise Server, you can publish assessments to it. The Enterprise Console offers a variety of tools for working with your assessments - such as reporting features, issue management, trend analysis, and dashboards. Most AppScan Source products and components must communicate with an AppScan Enterprise Server. Without one, you can use AppScan Source for Analysis in standalone mode and AppScan Source for Development in local mode.
  - Installing AppScan® Source for Development
    The AppScan® Source for Development plug-ins are installed to your computer via the standard AppScan Source installation wizard.
    - AppScan® Source for Development (plug-in for Eclipse and IBM® MobileFirst Platform
      If you are installing the AppScan® Source for Development plug-in for Eclipse or IBM® MobileFirst Platform, you will need to apply the plug-ins to your workbench after installing them to your computer.
      - Installing the plug-in for Eclipse
      - Applying the AppScan® Source for Development (Eclipse plug-in) to Eclipse and supported Eclipse-based products
        Eclipse and Eclipse-based products include a feature that allows you to install new software. You can use the feature to update your installation or browse to plug-ins that you want to add to your installation. The instructions in this topic guide you through the application of the AppScan® Source for Development plug-in to Eclipse.
      - Additional AppScan® Source for Development installation requirements
        The AppScan® Source for Development Eclipse plug-in requires additional configuration.
      - Upgrading previously-installed versions of the AppScan® Source for Development Eclipse plug-in to a new product version
        To upgrade the AppScan® Source for Development Eclipse plug-in to a new product version, you must remove or disable the current plug-ins from the computer and then install the newer version.
    - Installing the AppScan® Source for Development plug-in for Visual Studio
  - Installing AppScan® Source for Automation
  - Installing AppScan Source on Linux without a graphical installer
    AppScan Source provides only a graphical installer. To install AppScan Source on a Linux system without X Windows, configure a silent install.
  - Fix pack installation
    AppScan® Source fix packs are delivered by delta installer. To apply an AppScan Source fix pack, follow the instructions in this help topic.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure applications and projects, and set attributes and properties in HCL® AppScan® Source.
Administering
Learn how to administer user accounts and permissions, audit user activity, and manage integrations in HCL® AppScan® Source.
Scanning
This section explains how to scan your source code and manage assessments in HCL® AppScan® Source.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Reporting
Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
Extending product function
Learn how to extend the product to meet specific development requirements.
Reference
Review reference information for HCL® AppScan® Source, including using utilities, plug-ins, and APIs.
Troubleshooting and support
Self-help information, resources, and tools to help you troubleshoot issues while using HCL® AppScan® Source.

AppScan® Source for Development (plug-in for Eclipse and IBM® MobileFirst Platform

If you are installing the AppScan® Source for Development plug-in for Eclipse or IBM® MobileFirst Platform, you will need to apply the plug-ins to your workbench after installing them to your computer.

The application of the AppScan® Source for Development Eclipse plug-in depends on the application of some Eclipse tools (the Graphical Editing Framework (GEF) and Draw2d). Most versions of Eclipse that are supported by AppScan® Source for Development include these features. If yours does not, install these components into your Eclipse environment using the appropriate eclipse.org update site before installing AppScan® Source for Development. Failure to do this may result in errors while applying the AppScan® Source for Development plug-in to Eclipse.

If you are upgrading the AppScan® Source product to a new product version and want to apply the upgrade to theAppScan® Source for Development Eclipse plug-ins, you must first uninstall the plug-ins from your Eclipse or Eclipse-based product. After you have upgraded AppScan® Source, you can then install the updated plug-ins back to Eclipse or supported Eclipse-based products. Instructions for this are located in Upgrading previously-installed versions of the AppScan Source for Development Eclipse plug-in to a new product version.

If you are upgrading the AppScan® Source product as part of a fix pack upgrade, you do not need to uninstall the plug-ins before upgrading. Instructions for installing fix packs (and applying upgraded AppScan® Source for Development plug-ins) can be found in Fix pack installation.