Welcome
Welcome to the documentation for HCL® AppScan® Source.
What's New
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
- System requirements and installation prerequisites
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
  - Starting the installation wizard
    The AppScan® Source installation wizard runs on Microsoft™ Windows™ and Linux™ operating systems.
  - Installation and user data file locations
    When you install AppScan® Source, user data and configuration files are stored outside of the installation directory.
  - AppScan® Enterprise Server overview
    The AppScan® Enterprise Server is a separately-installable component. The server provides centralized user management capabilities and a mechanism for sharing assessments via the AppScan Source Database. In addition, if your administrator has installed the Enterprise Console component of the AppScan Enterprise Server, you can publish assessments to it. The Enterprise Console offers a variety of tools for working with your assessments - such as reporting features, issue management, trend analysis, and dashboards. Most AppScan Source products and components must communicate with an AppScan Enterprise Server. Without one, you can use AppScan Source for Analysis in standalone mode and AppScan Source for Development in local mode.
  - Installing AppScan® Source for Development
    The AppScan® Source for Development plug-ins are installed to your computer via the standard AppScan Source installation wizard.
  - Installing AppScan® Source for Automation
  - Installing AppScan Source on Linux without a graphical installer
    AppScan Source provides only a graphical installer. To install AppScan Source on a Linux system without X Windows, configure a silent install.
  - Fix pack installation
    AppScan® Source fix packs are delivered by delta installer. To apply an AppScan Source fix pack, follow the instructions in this help topic.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure applications, folders, and projects, and set attributes and properties in HCL® AppScan® Source.
Administering
Learn how to administer user accounts and permissions, audit user activity, and manage integrations in HCL® AppScan® Source.
Scanning
This section explains how to scan your source code and manage assessments in HCL® AppScan® Source.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Reporting
Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
Extending product function
Learn how to extend the product to meet specific development requirements.
Reference
Review reference information for HCL® AppScan® Source, including using utilities, plug-ins, and APIs.
Troubleshooting and support
Self-help information, resources, and tools to help you troubleshoot issues while using HCL® AppScan® Source.

Advanced installation and activation topics

This section describes advanced installation options and activation procedures.

AppScan® Source software is downloaded from FlexNet Operations or purchased as a media pack. Activation licenses are acquired through the HCL® License & Delivery Portal.

Self-extracting installation files are available for Windows™, and Linux™. They produce these setup files:

Windows™: AppScanSrc_Installer.exe
Linux™: setup.bin

The Installation Wizard guides you through the out-of-the-box installation of all AppScan® Source components that are supported on the operating system on which you are installing.

When the installation completes, you have the option to launch the activation License Manager from the final installation panel - or you can choose to activate the product at a later time.

Important: You must activate the software before you can use it.

You must be familiar with your environment and deployment requirements before installing AppScan® Source components (see AppScan Source deployment models for additional information). For example, to run AppScan® Source for Analysis on a notebook computer that does not have connectivity to a remote AppScan® Enterprise Server, install AppScan® Source for Analysisin standalone mode.

Standard Desktop

A standard desktop installation consists of the client and server components necessary to run AppScan® Source for Analysis on a single computer, even when disconnected from the network. Standard desktop installation component options include:

Server components:
- AppScan® Source for Automation
Client components:
- AppScan® Source for Analysis
- AppScan® Source Command Line Interface
- AppScan® Source for Development for Visual Studio 2019
- AppScan® Source for Development for Eclipse, MobileFirst (not selected by default)

Server

Server components that you can choose to install include:

AppScan® Source for Automation

Client

Client components that you can choose to install include:

AppScan® Source for Analysis
AppScan® Source Command Line Interface
AppScan® Source for Development for Visual Studio 2019
AppScan® Source for Development for Eclipse, MobileFirst (not selected by default)