All of the following components are required for your first ESA installation:

At least one instance of the Authentication Server

At least one of the authentication endpoints (API, Windows Login, Web Application, Remote Desktop, or RADIUS)


All the components may be installed on a single machine, or they may be installed across multiple machines in a distributed environment, except for ESA Web Console, which is part of the Authentication Server. As is the case with distributed systems, there are many possible installation scenarios.

You do not have to install ESA Authentication Server on the domain controller specifically, it can be installed on any other machine within your Active Directory network.

The example below illustrates a generic installation scenario in an Active Directory environment; however, this example can serve as a basic guide for other deployment scenarios. The example installation consists of two sequences—after completing both, your deployment will correspond with the figure below.