Install Forcepoint DLP management components

When the Forcepoint DLP installer is launched, a Welcome screen appears. Click Next to begin Forcepoint DLP installation.

Note: If any prerequisites are missing, the Forcepoint DLP installer attempts to install them.

If prompted, click OK to allow services such as SMTP to be enabled and required Windows components to be installed. Access to the operating system installation disc or image may be required.
On the Destination Folder screen, accept the default installation directory (C:\Program Files (x86)\Websense\Data Security), or click Browse to select another location.
To continue, click Next.
On the Local Administrator screen, specify the User Name and Password for a local administrator account with complete access to all servers that include Forcepoint DLP components.
- As a best practice, use the same account information for all servers that host Forcepoint DLP components.
- If the local administrator is also a domain account, enter the user name in the “DOMAIN\user_name” format. The domain name must not exceed 15 characters.
- If the local administrator is a local account, use the “hostname\user_name” format. The hostname must not exceed 15 characters.
- The password must:
  - Be at least 8 characters
  - Contain uppercase characters
  - Contain lowercase characters
  - Contain numbers
  - Contain non-alphanumeric characters
If the SQL Server database is on a remote machine, use the Temporary File Location screen to enable incident archiving and system backups, then specify where the system stores temporary files during archive processing and system backup and restore.
Before proceeding, create a folder in a location that both the database and management server can access. On average, this folder will hold 10 GB of data.
Complete the fields on the Temporary Folder Location screen as follows:
1. Select Enable incident archiving and system backup to allow archiving of old or aging incidents, as well as system backup or restore.
2. Under From SQL Server, enter the Path that the SQL Server should use to access the temporary folder. A remote UNC path is recommended, but local and shared network paths are supported. Make sure the account used to run SQL has write access to this folder.
  To grant this permission, issue the following T-SQL commands on the SQL Server instance:
```
USE master
```
```
GRANT BACKUP DATABASE TO <user>
```
```
GO
```
  After installation of Forcepoint DLP components, you can revoke this permission:
```
USE master
```
```
REVOKE BACKUP DATABASE TO <user>
```
```
GO
```
3. Under From Forcepoint Management Server, enter the UNC Path themanagement server should use to access the temporary folder, then enter credentials for an account authorized to access the location.
On the Fingerprinting Database screen, accept the default database directory (C:\Program Files (x86)\Websense\Data Security\PreciseID DB\), or click Browse to select another local path.
To continue, click Next.
On the Installation Confirmation screen, first verify that the current time and data displayed are correct, then click Install to start installing Forcepoint DLP components.
The Installation Progress screen is displayed.
During installation, the setup program may display a prompt to:
- Install required third-party services.
- Free port 80.
- Free port 443.
Click Yes to continue the installation (No cancels the installation).
When the Installation Complete screen appears, click Finish to close the Forcepoint DLP installer.

Depending on whether or not other modules have been selected for installation, when the Forcepoint DLP installer completes, either the next module installer or the Modify Installation dashboard is displayed.

For information on installing other Forcepoint DLP components, such as the protector or endpoint client, refer to the below topics.

Also, if the user wants to later add, change, or remove components from a Forcepoint DLP machine, see Adding or modifying Forcepoint DLP components.