Setting Up a Fortify Software Security Center (SSC) Connection

After setting up Micro Focus Fortify WebInspect Enterprise Manager and database users, the Set Up SSC Connection Information window appears.

To set up a connection to Micro Focus Fortify Software Security Center:

  1. The WebInspect Enterprise URL field has a default value based on previous configuration. Make a note of this URL.

  2. Ensure that the Integrate with SSC check box is selected.

  3. Specify the Software Security Center URL. See Installing or Upgrading Fortify Software Security Center (Optional).

  4. Click Next.

    The Software Security Center Users window appears.

  5. Before continuing, make sure that Fortify Software Security Center is running and that a Fortify Software Security Center administrator is logged on.

  6. In the Software Security Center Users window, specify the Fortify Software Security Center accounts for that administrator and for the Fortify WebInspect Enterprise Service Account. See Installing or Upgrading Fortify Software Security Center (Optional). The Fortify Software Security Center administrator you specify here will automatically become the first Fortify WebInspect Enterprise system administrator.

  7. Click Next.

    The installation software verifies that Fortify WebInspect Enterprise can access the Fortify Software Security Center server and use the Fortify Software Security Center accounts you specified. If it cannot, an error message is displayed; make sure that Fortify Software Security Center is running.

Initializing Fortify WebInspect Enterprise

After configuring the connection to Fortify Software Security Center, the Ready to Start window appears.

Verify your previous choices and begin initializing Fortify WebInspect Enterprise.

  1. Do one of the following:

    • To change settings, click Back.

    • To begin initializing Fortify WebInspect Enterprise using the values you have specified, click Next.

      The Initialization Wizard:

      • Creates a new database if you chose to do so in Configuring the Database.

      • Registers Fortify WebInspect Enterprise with Fortify Software Security Center. Then Fortify Software Security Center sends all current application versions (finished and unfinished) to Fortify WebInspect Enterprise, where they get created and can be displayed.

      • Configures various system components.

      • In the displayed, cumulative Status list in the Ready to Start window, adds the next step when it begins, with a flashing blue information icon while that step is running, and changes that icon to a green check mark when that step completes successfully (except for the first step, which is Initializing Database).

      When the initialization completes successfully, a window displays a list of initialization steps and the final initialization step is “Web Service Initialization Succeeded...”

  2. Click Next.

    The Fortify Software Security Center administrator you specified in Setting Up a Fortify Software Security Center (SSC) Connection automatically becomes the first System Administrator in Fortify WebInspect Enterprise.

    Note: If the Fortify Software Security Center administrator’s password expires or is changed, or if a new Fortify Software Security Center administrator is chosen for interaction with Fortify WebInspect Enterprise, a Fortify WebInspect Enterprise administrator will need to rerun the Initialization Wizard (Start > All Programs > Fortify > Fortify WebInspect Enterprise 21.1.0 > WebInspect Enterprise Initialize) and specify the new credentials for the Fortify Software Security Center administrator in Setting Up a Fortify Software Security Center (SSC) Connection. Then at this point in the initialization process, the Initialization Wizard will detect that the newly specified Fortify Software Security Center administrator exists in Fortify Software Security Center but is not a System Administrator in Fortify WebInspect Enterprise. In this case, the Wizard will display the Administrator Role Page, allowing you to add the new administrator to Fortify WebInspect Enterprise with the System Administrator role by selecting the Add Current User to System Administrator Role check box and clicking Next.

    The Connecting to WebInspect Enterprise Manager screen appears until the connection is made.

Adding Sensor Users

After Fortify WebInspect Enterprise is initialized, the Sensor Users window appears.

Optionally add at least one sensor user for Fortify WebInspect Enterprise to use to run scans. Sensor users must not be general console users and they must have been previously created as Windows users as described in Preparing to Install Fortify WebInspect Enterprise.

You do not have to add any sensor users to Fortify WebInspect Enterprise at this point, but you will need to specify at least one sensor user before you can run any scans. Post‑installation configuration procedures in this document also describe how to add sensor users.

To add a sensor user to Fortify WebInspect Enterprise now:

  1. Click Add.

  2. In the Select Users or Groups dialog box, type the name of an existing user to add (see Preparing to Install Fortify WebInspect Enterprise), in the format localhost\user or domain\user. If you specify only the user, you can click Check Names to help identify the localhost or domain.

  3. Click OK.

  4. Verify that the sensor user you specified has been added to the list of Sensor Users in the window.

Completing Initialization

To complete the initialization process:

  1. Click Next.

    The Initialization Wizard completes.

  2. Click Finish.

    The Initialization Wizard closes.

What's Next?

Continue with Configuring Services.