Fortify SSC Manual Install Notes - 18F/azure-sandbox GitHub Wiki

HP Fortify Sofware Security Center (SSC) Manual Install Notes

Ref: HP Fortify Software Security Center Installation and Configuration Guide.pdf which is included with install media

Steps

Setup

  1. Unpack HP_Fortify_SSC_Server_4.40.zip
  2. Unpack HP_Fortify_SSC_4.40_Server_WAR.zip into $DIR (HP-Fortify-Server-WAR for me)
  3. copy 3 *Seed_Bundle*.zip files into $DIR, do not unzip
  4. Locate and copy fortify.license to $DIR

Pre-reqs

  1. Install Java, standalone installer w/o customization :
  2. Install Tomcat 8, standalone installer w/o customization

Database Config

  1. Create new CASE SENSITIVE MS-SQL Database, Latin1_General_CS_AS Collation (CS = CaseSensitive).
  2. Run SQL script $DIR/sql/mssql/create-tables.sql on the new db
  3. Create a new SQL Server username/password with access to this database.

SSC Config

  1. Double click $DIR/ssc-configuration-wizard.cmd
  2. Select the license file. If the installer errors with "Invalid License", you have been given an incorrect license file.
  3. On "Core" Screen
    1. Application Server : Tomcat
  4. On "Database Setup" screen
    1. Database Type : SQL Server
    2. download JDBC 4.0 Drivers. Download the .exe version and run it to unzip contents.
    3. Click "Add JDBC Driver" and select the newly unzipped .jar
    4. Specify JDBC url : jdbc:sqlserver://<sql-server-host>:1433;database=<database-name>;sendStringParametersAsUnicode=false
    5. Specify "Database Username" and "Database Password"
    6. Click "Test JDBC" for confirmation
    7. Click "Seed Process Templates" and select the appropriate .zip file from above
    8. Click "Seed Reports" and select the appropriate .zip file from above
    9. Click "Validate Database" for confirmation
    10. Click "Next"
  5. Click "Next" through the rest of the screens without changes.
  6. ssc.war was generated by the installer, copy it to C:\Program Files\Apache Software Foundation\Tomcat 8.5\webapps

Tomcat Config

Launch "Configure Tomcat" tool and make these settings:

  1. on "General" tab change "Startup Type" to "Automatic" and Save.
  2. on "General" tab Stop, then Start Tomcat

Access

  • Find SSC running at http://<hostname>:8080/ssc
  • Login: admin : Password1!
⚠️ **GitHub.com Fallback** ⚠️