Overview#
Microsoft® Forefront Identity Manager (FIM 2010) 2010 enables organizations to manage the entire lifecycle of user identities and their associated credentials.
Applies To: Forefront Identity Manager 2010
FIM is part of the Microsoft Identity Managment Product Line
The Microsoft® Forefront™ Identity Manager Installation Guide enables IT professionals to install FIM 2010. A FIM 2010 deployment has two major component groups, the server-side and the client-side.
server-side components#
The server-side components are as follows:
- FIM Synchronization Service
- FIM Service
- FIM Portal
- FIM Password Portal
- FIM Service and Portal Language Pack
Required Hardware#
The server(s) hosting the FIM 2010 server components must meet the following hardware requirements:
- A x64 capable processor
- 2 gigabytes (GB) of available hard disk drive space
- 2 gigabytes (GB) or more of RAM
- A monitor with a resolution of 1024x768
- A CD-ROM or DVD-ROM drive
Required Software#
Each server hosting the different FIM 2010 server-side components has a different software requirement. Below, you will find the software requirements for each of the FIM 2010 server-side components. If you decide to install all of the server-side components on one server, you must install the software requirements for each of the FIM 2010 server-side components on that server.
Important#
When you install Windows Server 2008, do not install Windows Server 2008 Terminal Services. If you install Terminal Services, the FIM server components do not install.
FIM 2010 Synchronization Service Software Requirements#
The server hosting the FIM 2010 Synchronization Service must have the following prerequisite software installed:
- Windows Server 2008 or Windows Server 2008 R2 64-bit Standard or Enterprise Editions.
- Windows Installer 4.5 - Windows Installer 4.5 can be downloaded from Microsoft download center.
- SQL Server 2008 64-bit Standard or Enterprise Editions, Service Pack 1 or later. - The following SQL features must be installed: Database Engine Services
- Microsoft Visual Studio 2008 - Microsoft Visual Studio 2008 is required if you are planning to develop rules extensions for FIM 2010 Synchronization Service on this server.
- Windows PowerShell 1.0 or Powershell 2.0 -
- PowerShell 1.0 or newer is required to provision resources for Exchange 2007.
- PowerShell 2.0 is required to provision resources for Exchange 2010.
- You cannot have both versions of PowerShell installed at the same time.
- Microsoft .NET 3.5 SP1 Framework - You can download Microsoft .NET 3.5 SP1 Framework here http://go.microsoft.com/fwlink/?LinkId=129538.
- Exchange 2007 SP1 Management Console - Exchange 2007 SP1 Management Tools is required to fully provision Exchange Server 2007 mailboxes, contacts, and groups that are created by the FIM Synchronization Service. You will receive an extension-dll-exception error if you attempt to synchronize these objects to Active Directory without the Exchange 2007 SP1 Management Console installed. Exchange 2010 provisioning does not require any additional tools to be installed on the FIM Synchronization Service server.
FIM Service Software Requirements#
The server hosting the FIM Service must have the following software installed:
- Windows Server 2008 or Windows Server 2008 R2 64-bit Standard or Enterprise Editions.
- Windows Installer 4.5 - Windows Installer 4.5 can be downloaded from Microsoft download center.
- SQL Server 2008 64-bit Standard or Enterprise Editions, Service Pack 1 or later. - You can use the same SQL Server 2008 instance that the FIM Synchronization Service is using. The following SQL features must be installed:
- Database Engine Service
- Full-Text Search
- Windows PowerShell 1.0 or PowerShell 2.0
- Microsoft .NET 3.0 Features - Microsoft .NET Framework 3.0 Features can be installed from the Features options interface included with Windows Server 2008.
- Microsoft .NET 3.5 SP1 Framework - You can download Microsoft .NET 3.5 SP1 Framework here http://go.microsoft.com/fwlink/?LinkId=129538.
FIM Portal and Password Portal Software Requirements#
The server(s) hosting the FIM Portal and Password Portal must have the following software installed:
If you decide to install the FIM Portal and Password Portal software on different servers, the software prerequisites for both servers are the same.
- Windows Server 2008 or Windows Server 2008 R2 64-bit Standard or Enterprise Editions.
- Microsoft .NET Framework 3.0 Features - Microsoft .NET Framework 3.0 Features can be installed from the Features options interface included with Windows Server 2008.
- Microsoft .NET 3.5 SP1 Framework - You can download Microsoft .NET 3.5 SP1 Framework here http://go.microsoft.com/fwlink/?LinkId=129538.
- Windows SharePoint Services 3.0 SP1 or SP2 - You can download Windows SharePoint Service 3.0 SP2 here http://go.microsoft.com/fwlink/?LinkID=152405. Make sure you install Windows SharePoint services before you install other server roles. Refer to the installation guide for SharePoint Services for further information: http://go.microsoft.com/fwlink/?LinkID=123878.
- Windows SharePoint Services 3.0 Language Pack - If you have installed Windows SharePoint Services 3.0 in a different language than English, then you must install the Windows SharePoint Services 3.0 Language Pack. You can download SP2 from http://go.microsoft.com/fwlink/?LinkID=178266
BHOLD#
Microsoft BHOLD Suite extends these capabilities of FIM 2010 by adding role-based access control to FIM 2010, enabling organizations to define user roles and to control access to sensitive data and applications in a way that is appropriate for those roles.
UAG#
Forefront Unified Access Gateway (UAG) provides remote client endpoints with access to corporate applications, networks, and internal resources via a Web portal or site.
FIM Add-ins and Extensions Components Software Requirements#
The client computers that host the FIM add-ins and extensions components must meet the following software requirements:
- Windows XP Professional SP2 or later, 32bit or Windows Vista Enterprise SP1 or later, 32 or 64bit, or Windows 7, 32 or 64 bit.
- Windows Installer 3.1 or later (only needed for Windows XP SP2) - You can download Windows Installer 3.1 here http://go.microsoft.com/fwlink/?LinkID=62933
- Microsoft .NET Framework 3.5 SP1 - You can download Microsoft .NET 3.5 SP1 Framework here http://go.microsoft.com/fwlink/?LinkId=129538.
- Microsoft Office Outlook 2007 SP2 - This software is required only if you use the FIM Office add-in.
- Microsoft Forms 2.0 .NET Programmability Support - This software is required only if you use FIM 2010 Office Integration. This software is an add-in feature of Microsoft Office 2007. To install this software, select Microsoft Forms 2.0 .NET Programmability Support option under Office Tools when you run setup for Microsoft Office 2007.
- Smart Tag .NET Programmability Support - This software is required only if you use FIM 2010 Office Integration. This software is an add-in feature of Microsoft Office 2007. To install this software, select Smart Tag .NET Programmability Support option under Office Tools when you run setup for Microsoft Office 2007.
- .Net Programmability Support for Microsoft Office Outlook - This software is required only if you use FIM 2010 Office Integration. This software is an add-in feature of Microsoft Office 2007. To install this software, select the .NET Programmability Support option under Microsoft Office Outlook when you run setup for Microsoft Office 2007.
client-side components#
The client-side components are as follows:
- FIM Add-in for Outlook
- FIM Password Reset Extensions
- FIM Add-ins and Extensions Language Pack
Topology#
FIM supports a variety of deployment topologies. Each of the main components:
- FIM Service
- FIM Synchronization Service
- FIM Portal
- FIM Password Portal
- SQL Server 2008 database for the FIM Service
- SQL Server 2008 database for the FIM Synchronization Service
There might be more information for this subject on one of the following: