Skip to main content

Prerequisites

Netwrix Identity Manager is available as a SaaS offering and an on-premises offering.

  • SaaS: Netwrix hosts and operates the server. You install and manage only the agent on your infrastructure.
  • On-premises: You install and manage the server, agent, and database on your own infrastructure.

Both deployment models require an agent installed on your premises. The prerequisites below are organized accordingly.

Both SaaS and On-Premises Deployments (Agent)​

Required Knowledge​

  • Windows Server administration

Hardware​

Each machine hosting an agent requires at minimum:

  • CPU: dual-core
  • RAM: 8 GB
  • Disk: 20 GB

Software​

ComponentRequirement
OSWindows Server 2022 or later
.NET RuntimeASP.NET Core Runtime 10.0 (Windows hosting bundle)
Web browserChrome, Firefox, Safari, or Edge Chromium (latest 2 versions)

Accounts and Permissions​

  • Local administrator account on the Windows Server machine where the agent will be installed
  • Agent service account with read/write permissions on the working directory
  • Managed system service accounts: one per target managed system, with read and/or write permissions as required by each connector

Certificates​

  • Encryption key pair: RSA-2048 (.pfx file or Windows certificate store entry) — used for agent encryption operations

Network​

  • DNS hostname assigned for the agent, resolvable within the organization's domain
  • SMTP server accessible from the agent host (required for email notifications)
  • Agent must be able to reach the server over HTTPS

License​

A valid Netwrix Identity Manager license key is required. License keys are available from the Netwrix portal.

On-Premises Only (Server and Database)​

Additional Required Knowledge​

  • Internet Information Services (IIS) administration
  • SQL Server administration

Hardware​

Server machine (minimum):

  • CPU: dual-core (4-core recommended if SQL Server is co-located)
  • RAM: 8 GB
  • Disk: 20 GB

Database machine (minimum):

  • Disk: scales with data volume — approximately 15 GB per 100,000 identities
note

SQL Server Express has a maximum database size of 10 GB. For production use, a full SQL Server edition is recommended.

Software​

ComponentRequirement
SQL Server2022 or later
SQL toolingSQL Server Management Studio or sqlcmd
IIS10.0 or later (recommended for hosting the server)

Accounts and Permissions​

  • Server service account with:
    • db_owner (database-level) and bulkadmin (server-level) roles on the SQL Server database
    • Read/write permissions on the working directory
  • Domain account recommended over IIS application pool identity when the server connects to a remote SQL Server instance
  • An account with sysadmin or securityadmin server-level role is required during setup to grant the bulkadmin role

Certificates​

  • SSL certificate: required for HTTPS communication between end-users and the server, and between the server and agents. Must be trusted by all client browsers — typically signed by the organization's PKI root CA.
  • Encryption key pair: RSA-2048 (.pfx file or Windows certificate store entry) — used for server encryption operations and identity server authentication

Network​

  • SQL feed open from the server host to the SQL Server instance
  • DNS hostname assigned for the server, resolvable within the organization's domain
  • SMTP server accessible from the server host (required for email notifications)

Component Details​

Full requirements for each component: