1.1 Requirements for the Plug-in

This section describes the requirements to enable monitoring of an SGD deployment.

1.1.1 Supported Versions

The plug-in supports the following versions of Oracle Enterprise Manager Cloud Control and Oracle Secure Global Desktop:

Oracle Enterprise Manager Cloud Control 12c Release 4 (12.1.0.4) ^[1]
Oracle Secure Global Desktop version 5.2 or later ^[2]

1.1.2 Prerequisites

Before you install the plug-in, verify that your environment meets these requirements:

An Oracle Enterprise Manager installation must be running.
An Oracle Management Agent (Management Agent) must be installed on each SGD host that you want to monitor.

For Oracle Enterprise Manager Cloud Control system requirements and installation instructions, see the Oracle Enterprise Manager Cloud Control installation documentation.

1.1.3 User Requirements

To monitor an SGD array with the plug-in, the following user requirements apply:

On each SGD host, the Oracle Software Owner User must have an account and must be a member of the ttaserv UNIX group.
The Oracle Software Owner User (typically, oracle) is required to install the Oracle Management Agent on the host. For details of the requirements for this user, see the Oracle Enterprise Manager Cloud Control installation documentation.
The ttaserv group contains the SGD server system account users. Adding the Oracle Software Owner User to this group enables the Oracle Software Owner User to run tarantella commands.
When you add the Oracle Software Owner User to the ttaserv group, ensure that you preserve any existing supplementary groups for this user.
For example, if the Oracle software owner user is oracle:
```
# usermod -G group1,group2,ttaserv oracle
```
where group1 and group2 are the existing supplementary groups for the oracle user.
A single dedicated SGD Administrator must be available for use with the plug-in.
You enter the credentials for this user when you add the SGD host as a target in Oracle Enterprise Manager.
The user must be able to authenticate to SGD using any of the enabled SGD authentication mechanisms.
The user profile must be shareable. Ensure that the Login: Multiple (--shared) attribute is enabled for the user profile object.
The user must be a member of the Enterprise Manager Agents role.
In the following example, the user profile object sgd-agent-user is added as a member of the Enterprise Manager Agents role.
```
# tarantella role add_member \
--role "o=Tarantella System Objects/cn=Enterprise Manager Agents" \
--member "o=Example/cn=sgd-agent-user"
```
Verify that the SGD Administrator user can log in to SGD on each host, and that they can access the SGD Administration Console.
For more information on how to configure SGD Administrator accounts and roles, see the Oracle Secure Global Desktop Administration Guide.
To monitor an Oracle Secure Global Desktop target, an Oracle Enterprise Manager administrator must have PERFORM_OPERATION privileges for the target. See the Oracle Enterprise Manager Cloud Control documentation for more information on configuring privileges.

^[1] Requires ARU 18654647.

^[2] For information on earlier versions of SGD, contact Oracle Support.