Installing AppScan Source for Automation

About this task

AppScan® Source for Automation is an optional component in the installation packages.

Important: To install AppScan Source for Automation, you must have root/administrator privileges.

Procedure

  1. Start the installation wizard.
  2. Select Server Component Selection and then select AppScan Source for Automation as the component to install.

    Click Next advance to the next installation panel.

  3. Specify the installation directory.
    • 32-bit versions of Microsoft Windows:
      <SYSTEMDRIVE>:\Program Files\HCL\AppScanSource
    • 64-bit versions of Microsoft Windows:
      <SYSTEMDRIVE>:\Program Files (x86)\HCL\AppScanSource
    • Linux: If you are the root user, the Installation Wizard installs your software in /opt/hcl/appscansource. If you are not the root user, you can install the AppScan Source for Development Eclipse plug-in - which installs to <home_directory>/AppScan_Source by default.
    • macOS: /Applications/AppScanSource.app

    Click Next advance to the next installation panel.

  4. In the HCL® AppScan Source for Automation Configuration panel, specify:

    If your AppScan Enterprise Server authentication method is user ID and password:

    • AppScan Enterprise Server Host Name: The host name or IP address of the AppScan Enterprise Server to which the Automation Server will connect.
    • User Name: Enter the AppScan Source user that the Automation Server uses to process requests.
    • Password: Enter the AppScan Source user's password.
    • Confirm Password: Confirm the password.

    Click Next to advance to the next installation panel.

    If your AppScan Enterprise Server is enabled for Common Access Card (CAC) authentication, leave all fields in this page blank and click Next to advance to the next installation panel.

    Note: If you do not complete the HCL AppScan Source for Automation Configuration panel during installation, or if your AppScan Enterprise Server is enabled for Common Access Card (CAC) authentication, you must configure AppScan Source for Automation after installation to run as an AppScan Source user by specifying login credentials from the command line. See the HCL AppScan Source Utilities User Guide for more information.
  5. In the language pack selection panel, choose the language packs to install. When you install a language pack, the AppScan Source user interface will display in that language when it runs on an operating system that is running that locale.

    By default, English is selected (and cannot be deselected). If the installation wizard is displaying a national language other than English (in other words, a language other than English was selected in the installation wizard welcome panel), that language will also be selected in this panel (however, it can be deselected).

    After you have selected the language packs that you want to install, click Next to advance to the next installation panel.

    Note: If you do not install a specific language pack, you will not be able to add that language post-installation.
  6. Review and accept the terms of the license agreement and then click Next to continue.
  7. Review the summary of installation options before copying files.
  8. The installation requests the following:
    • AppScan Enterprise Server: The host name or IP address of the AppScan Enterprise Server to which AppScan Source for Automation will connect.
    • User Name: The AppScan Source user that AppScan Source for Automation will use to process requests.
    • Password: The password for the user specified in the User Name field.
    • Confirm Password: Confirm the password.
  9. Click Next to install the files, and then click Done to complete the installation.
  10. macOS: In a terminal, change to the <install_dir>/bin/ directory (where <install_dir> is the location of your AppScan Source installation). Run the automationDaemonRestart.sh script that is in this directory by issuing ./automationDaemonRestart.sh (without using sudo).
  11. Linux: Issue this command to change permissions of the AppScan Source data directory and its contents: 
    sudo chmod -R a+rwx /var/opt/ibm/appscansource

    This allows the AppScan Source for Automation user to run scans.

Results

If the AppScan Source user account does not already exist, you will need to specify it in the AppScan Source for Automation Configuration installation panel and then create it manually (post-installation) with the AppScan Enterprise Server, AppScan Source for Analysis, or the AppScan Source command line interface (CLI). For complete access to AppScan Source for Automation capabilities, this user account requires these permissions:
  • Application and Project Management
    • Register
    • Scan
  • Assessment Management
    • Save Assessments
    • Publish Assessments