Skip to main content

Installing the CxSAST Manager in a Distributed Environment

The second component to install in this sequence is the CxSAST Manager.


The required prerequisites are listed below. For further information and instructions on installing and making them available, refer to Preparing for Installation.

  • C++ Redist 2010 and 2015 SP3

  • IIS v7.0 (or higher)

  • ASP.NET Core 3.1.11 Runtime & Hosting

  • MS SQL

  • Java 1.8 64-bit


  • Java installation should be located where permission fulfillment is possible (e.g., C:\Program Files) and not in personal user folders such as the Desktop folder. The approved and recommended Java version is 1.8. The minimum version for Oracle is 8u241 and for AdoptOpenJdk, it is 8u242.

  • If you are switching Java versions, for example due to upgrading or otherwise modifying your CxSAST installation in a way that it requires a newer Java installation, you have to update the newer Java location with the certificate from the previous Java location. This means, you have to copy the cacerts file from the previous Java location (..\Checkmarx Risk Management\jre\lib\security\) to the new Java location (<install path>\openjdk-8u242-b08-jre\lib\security\) and overwrite the existing cacerts file in the new location with your existing cacerts file.

  • Make sure that the SQL password does not exceed 32 characters. You may have to reset this password before upgrading as the SQL password could exceed 32 characters in previous versions. For further information, refer to Installing CxSAST (v9.3.0)

  • If you perform a silent installation in a Distributed environment, you cannot stop the installation before it is complete and you have to run Reconfigure to properly configure the setup after ActiveMQ has been installed.

  • Access Control and CxManager must be installed on the same server station.

Installing CxSAST Manager

This section illustrates the syntax for each available service account option.


If no additional syntax is added, the CxManager services use the Network Service account by default.

Local System Account

Dedicated Service Account

In the instructions for the regular GUI based installation, this account is referred to as 'This Account'.


  • Since the database installs now with ActiveMQ, the database server usually resides on the ActiveMQ host.

  • Access Control installs together with CxManager as both components must reside on the same host.


For a table of parameters with additional information on them, refer to the Parameter page.