Welcome
Welcome to the documentation for HCL® AppScan® Source.
What's New
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
- System requirements and installation prerequisites
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
  - Starting the installation wizard
    The AppScan® Source installation wizard runs on Microsoft™ Windows™ and Linux™ operating systems.
    - Install Model
      The Install Model installation panel allows you to specify whether you will use AppScan® Source with an AppScan Enterprise Server connection or as a standalone tool.
  - Installation and user data file locations
    When you install AppScan® Source, user data and configuration files are stored outside of the installation directory.
  - AppScan® Enterprise Server overview
    The AppScan® Enterprise Server is a separately-installable component. The server provides centralized user management capabilities and a mechanism for sharing assessments via the AppScan Source Database. In addition, if your administrator has installed the Enterprise Console component of the AppScan Enterprise Server, you can publish assessments to it. The Enterprise Console offers a variety of tools for working with your assessments - such as reporting features, issue management, trend analysis, and dashboards. Most AppScan Source products and components must communicate with an AppScan Enterprise Server. Without one, you can use AppScan Source for Analysis in standalone mode and AppScan Source for Development in local mode.
  - Installing AppScan® Source for Development
    The AppScan® Source for Development plug-ins are installed to your computer via the standard AppScan Source installation wizard.
  - Installing AppScan® Source for Automation
  - Installing AppScan Source on Linux without a graphical installer
    AppScan Source provides only a graphical installer. To install AppScan Source on a Linux system without X Windows, configure a silent install.
  - Fix pack installation
    AppScan® Source fix packs are delivered by delta installer. To apply an AppScan Source fix pack, follow the instructions in this help topic.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure applications, folders, and projects, and set attributes and properties in HCL® AppScan® Source.
Administering
Learn how to administer user accounts and permissions, audit user activity, and manage integrations in HCL® AppScan® Source.
Scanning
This section explains how to scan your source code and manage assessments in HCL® AppScan® Source.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Reporting
Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
Extending product function
Learn how to extend the product to meet specific development requirements.
Reference
Review reference information for HCL® AppScan® Source, including using utilities, plug-ins, and APIs.
Troubleshooting and support
Self-help information, resources, and tools to help you troubleshoot issues while using HCL® AppScan® Source.

Starting the installation wizard

The AppScan® Source installation wizard runs on Microsoft™ Windows™ and Linux™ operating systems.

Note: As of version 9.0.3.11, AppScan® Source no longer supports macOS or iOS Xcode project scanning.

To start the installation:

Microsoft™ Windows™: Run AppScanSrc_Installer.exe
Linux™: Run setup.bin as root.

Important: On Windows™ 8 and higher, the installer must be run in Windows™ 7 compatibility mode. To enable this, right-click AppScanSrc_Installer.exe and select Properties. In the Properties window, select the Compatibility tab and then select the Run this program in compatibility mode for check box and set the menu to be Windows 7. Click OK to make the change and then run AppScanSrc_Installer.exe to start the AppScan® Source installation.

Note: If you encounter issues with graphical installer support on Linux systems, verify all libraries are loaded, make sure the $DISPLAY variable is set to a proper display, and try starting the installation with the system's default JRE as follows:

./setup.bin LAX_VM /usr/bin/java

For additional information, see Installing AppScan Source results in error "Graphical installers are not supported by the vm".

The wizard checks for network port availability. If it finds conflicts, you must exit the installation. See Port configuration for more details about required ports.

When you first launch the installation wizard, you are presented with a screen that allows you to select the national language that will be displayed in the installation panels. Select the language and click OK to proceed.

The installation wizard then displays an important notice regarding licensing. For additional information on licensing, see How to obtain and apply licenses for AppScan Source products. Click OK to proceed.

After you launch the installation wizard, the Welcome - Installation Wizard panel opens and recommends that you quit any open applications. Click Next to begin the installation procedure (see Installation and user data file locations for information about installation file locations).