Home
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
Advanced installation and activation topics
This section describes advanced installation options and activation procedures.
Installing AppScan® Source for Development
The AppScan® Source for Development plug-ins are installed to your computer via the standard AppScan Source installation wizard.
AppScan® Source for Development (plug-in for Eclipse and IBM® MobileFirst Platform
If you are installing the AppScan® Source for Development plug-in for Eclipse or IBM® MobileFirst Platform, you will need to apply the plug-ins to your workbench after installing them to your computer.
Additional AppScan® Source for Development installation requirements
The AppScan® Source for Development Eclipse plug-in requires additional configuration.

Welcome
Welcome to the documentation for HCL® AppScan® Source.
What's New
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install, upgrade, and activate HCL® AppScan® Source.
- System requirements and installation prerequisites
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
  - Starting the installation wizard
    The AppScan® Source installation wizard runs on Microsoft™ Windows™ and Linux™ operating systems.
  - Installation and user data file locations
    When you install AppScan® Source, user data and configuration files are stored outside of the installation directory.
  - AppScan® Enterprise Server overview
    The AppScan® Enterprise Server is a separately-installable component. The server provides centralized user management capabilities and a mechanism for sharing assessments via the AppScan Source Database. In addition, if your administrator has installed the Enterprise Console component of the AppScan Enterprise Server, you can publish assessments to it. The Enterprise Console offers a variety of tools for working with your assessments - such as reporting features, issue management, trend analysis, and dashboards. Most AppScan Source products and components must communicate with an AppScan Enterprise Server. Without one, you can use AppScan Source for Analysis in standalone mode and AppScan Source for Development in local mode.
  - Installing AppScan® Source for Development
    The AppScan® Source for Development plug-ins are installed to your computer via the standard AppScan Source installation wizard.
    - AppScan® Source for Development (plug-in for Eclipse and IBM® MobileFirst Platform
      If you are installing the AppScan® Source for Development plug-in for Eclipse or IBM® MobileFirst Platform, you will need to apply the plug-ins to your workbench after installing them to your computer.
      - Installing the plug-in for Eclipse
      - Applying the AppScan® Source for Development (Eclipse plug-in) to Eclipse and supported Eclipse-based products
        Eclipse and Eclipse-based products include a feature that allows you to install new software. You can use the feature to update your installation or browse to plug-ins that you want to add to your installation. The instructions in this topic guide you through the application of the AppScan® Source for Development plug-in to Eclipse.
      - Additional AppScan® Source for Development installation requirements
        The AppScan® Source for Development Eclipse plug-in requires additional configuration.
      - Upgrading previously-installed versions of the AppScan® Source for Development Eclipse plug-in to a new product version
        To upgrade the AppScan® Source for Development Eclipse plug-in to a new product version, you must remove or disable the current plug-ins from the computer and then install the newer version.
    - Installing the AppScan® Source for Development plug-in for Visual Studio
  - Installing AppScan® Source for Automation
  - Installing AppScan Source on Linux without a graphical installer
    AppScan Source provides only a graphical installer. To install AppScan Source on a Linux system without X Windows, configure a silent install.
  - Fix pack installation
    AppScan® Source fix packs are delivered by delta installer. To apply an AppScan Source fix pack, follow the instructions in this help topic.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure applications, folders, and projects, and set attributes and properties in HCL® AppScan® Source.
Administering
Learn how to administer user accounts and permissions, audit user activity, and manage integrations in HCL® AppScan® Source.
Scanning
This section explains how to scan your source code and manage assessments in HCL® AppScan® Source.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Reporting
Security analysts and risk managers can access reports of select findings or a series of audit reports that measure compliance with software security best practices and regulatory requirements. This section explains how to create reports of aggregate finding data.
Extending product function
Learn how to extend the product to meet specific development requirements.
Reference
Review reference information for HCL® AppScan® Source, including using utilities, plug-ins, and APIs.
Troubleshooting and support
Self-help information, resources, and tools to help you troubleshoot issues while using HCL® AppScan® Source.

Additional AppScan® Source for Development installation requirements

The AppScan® Source for Development Eclipse plug-in requires additional configuration.

The AppScan® Source for Development plug-in for Eclipse requires a Java™ Runtime Environment (JRE) that is Version 1.5 or higher. If your environment points to a JRE that does not meet this requirement, edit the eclipse.ini file in the Eclipse installation directory so that it points to a JRE that does meet this requirement. For information about making this change to the eclipse.ini file, see the Specifying the JVM section of http://wiki.eclipse.org/Eclipse.ini.
The AppScan® Source for Development plug-in for Eclipse on Linux™ (Eclipse) requires that you add the AppScan® Source installation directory to the LD_LIBRARY_PATH. For example, if you use the bash shell, add this line to the ~/.bashrc initialization:
```
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/hcl/appscansource
```
The AppScan® Source for Development plug-in for Eclipse on Red Hat Enterprise Linux™ Version 7.3 or higher requires that you edit the eclipse.ini file in the Eclipse installation directory to include the following command:
```
-Dorg.eclipse.swt.browser.XULRunnerPath=<install-location>/lib/xulrunner-compat
```