This document will describe the steps and configuration for installing Forefront Endpoint Protection 2010 Server on a one-server topology.

The available prerelease version only supports one server topology for now.
(After the RTM will be released, we will provide the new installation articles).

Prerequisites
Every time that you start the setup wizard, the FEP2010 Setup wizard will verify the installation prerequisites. Use the check to make sure that you are deploying Endpoint Protection on an environment that has all prerequisites. If prerequisites are missing, the check points you to locations where you can download and install the required components before continuing.

Following is a list of the minimum requirements for installation:

• 2GB of RAM
• 13GB of available disk space
• 64-bit English version of Microsoft Windows Server 2008 R2
• No earlier versions of Microsoft Forefront Endpoint Protection server are installed
• No other antimalware protection is installed
• Microsoft Windows Installer 3.1 or later
• Microsoft .Net Framework 3.5 SP1
• Microsoft SQL Server 2008 SP1 Enterprise with the following features installed:
• Analysis Services
• Integration Services
• Reporting Services

Important:

In the prerelease version, only the default virtual name ReportServer is supported for the Reporting Service

Important:

In the prerelease version, all SQL Server services must be configured to run using the LOCAL SYSTEM startup account, and the Start Mode for the SQL Server Agent service must be set to Automatic

• A Microsoft System Center Configuration Manager 2007 SP2 R2 site that is installed with all roles, and configured to use SQL Server Reporting Services

For more information about how to install Configuration Manager, see Configuration Manager Single Site Planning and Deployment (http://go.microsoft.com/fwlink/?LinkId=186935)

• Dundas Charts

You can download the Dundas Charts from the Connect site (http://go.microsoft.com/fwlink/?LinkId=186936).

To install Dundas Charts, open a Command Prompt, locate the source files, and then run:- RSChartInstaller2008.exe /install DundasRSChart.dll

Important:

To install Endpoint Protection in the prerelease version, you must be a member of the Domain Admins group for the domain of which the Endpoint Protection Server is a member

Installing FEP Server

• Navigate to the location where you extracted the downloaded Endpoint Protection Server source files, and then double-click serversetup.exe.

• The Microsoft Forefront Endpoint Protection Setup wizard opens. On the Welcome page, type your name and organization and then click Next.

• On the License Agreement page, review the license agreement. If you accept the terms and conditions, select the I accept the terms in the license agreement check box, and then click Next.

• On the Deployment Topology page, select the Basic configuration topology type and then click Next.

Important:

In this prerelease version of Endpoint Protection Server, basic configuration is the only topology supported.

• On the Report Configuration page, type the URL for the report server, and the credentials for the user account that Endpoint Protection Server will use to access the reporting database, and then click Next.

Important:

If you specify an Administrator account, click Yes on the warning message that appears (Not recommended).

• On the Options page, review the available options; select the Use Microsoft Update to keep my products up to date and Join the Customer Experience Improvement Program check boxes (Or Your Choice), and then click Next.

• On the SpyNet Policy Configuration page, review the available SpyNet membership levels, select the option that you require, and then click Next.

• On the Installation Location page, select the root folder for the installation and then click Next.

• On the Prerequisites Verification page, review the results and then click Next. If there are verifications that did not succeed (Like in our Example), click View Log to determine the cause, and take appropriate action.

One of the most common problem are service configuration problems, as we mentioned earlier, all SQL Server services must be configured to run using the LOCAL SYSTEM startup account, and the Start Mode for them must be set to Automatic.

• On the Setup Summary Page, review and click Next.

• The Component Installation page shows the installation progress of each Component.

• After the Component Installation will finish, click Next.

• On the Installation Complete page, click Finish.

• After the installation will finish, please review the SCCM console with the Forefront Endpoint Protection 2010 management.

In the near future, we will provide on our website management and reporting articles.