3.2 Installing ACDI

Download the installer file (acdi_v24.2.zip) from the Software License and Download portal. The acdi_v24.2.zip contains the following packages:

  • AuditDriver.zip

  • AuditExport.zip

  • AuditProxy.zip

  • AuditReportEdir.zip

  • AuditServer.zip

  • data.zip

  • logstash-8.4.0.zip

  • opensearch-2.8.0.zip

  • opensearch-dashboards-2.8.0.zip

Prerequisites

Ensure that the system on which you want to install ACDI has a resolvable hostname.

To install ACDI, perform the following steps:

  1. Log in as a root user.

  2. Unzip the acdi_v24.2.zip in the root directory of the system. For example, in /opt.

  3. Change your location to acdi<version> directory and run the ./install.sh script.

    For example,

    linux-nzdp:/opt #cd acdi4.0.3/
    linux-nzdp:/opt/acdi4.0.3 # ./install.sh

    The program determines whether the system's hostname, linux-nzdp, can be resolved. After successful verification, the installation process starts.

  4. Press Enter to extract all components required for ACDI installation.

  5. Choose whether you want to use an existing Linux user or create a new one. The install script suggests that you create a new user named, for example, acdi. Press Enter to use the default name.

  6. Specify a resolvable fully qualified domain name (FQDN) hostname for the ACDI instance. For example, acdi-dev.mycompany.com.

  7. Specify the name of a local account that will have administrative rights and access to all components. If you don't have any specific name, press Enter to use the default acdiadmin username and set a password for it. The user is required to set up a connection to ACDI within the ACDI Driver in Identity Manager.

  8. To configure an admin service account for OpenSearch, specify the OpenSearch osadmin username and password. The user will be granted access to the OpenSearch.

  9. To configure OpenSearch Dashboards (OSD) service account, press Enter to use the default osdadmin username and provide the password.

  10. To configure the LDAP connection to eDirectory:

    1. Specify a resolvable FQDN of the LDAP server and its port.

    2. Specify the LDAP Service account and password which has access and can read data from the LDAP server.

      After the authorization is successful, the connection to the LDAP server is established.

      NOTE:If the installation connection is lost or interrupted, you can resume the installation from the point of interruption by running ./install.sh again.

  11. To run the Audit report service, enter the CRON string. By default, the CRON string shows that the report service takes snapshots of a directory every day at 01:05 AM. Press Enter to use the default settings.

  12. Press Enter to install AutoStart Scripts and start ACDI components. The services start one by one.

  13. During installation, the start script creates a self-signed certificate and stores it at ../certs/keystore.pfx location.

  14. To launch ACDI, open a web browser and specify the URL: https://acd-dev.mycompany.com:3190. You can log in using the local admin account acdiadmin.

    The OpenSearch URL is: https://acdi-dev.mycompany.com:3190/opensearch

  15. To add the ACDI software license:

    IMPORTANT:After installation, the ACDI will run in the Basic version. To unlock the features offered in the Advanced version or to receive a 90-day Trial license, contact your sales representative.

    1. Log in to ACDI using credentials specified in Step 7.

    2. Go to Administration > Audit Server and copy the server ID. Share the server ID to generate a license.

    3. After the license is generated, copy it in License.

    4. Click Save.

    5. Refresh the page to view the license information. The following information is displayed on the bottom of the Home page: the company name for which the license was issued and its validity.

NOTE:

  • To change the certificate, go to /opt/acdi<version>/certs and replace the certificate in the keystore.pfx file. Restart the Audit Proxy and Audit Server Services.

  • By default, logs and data are stored under /var/log/acdi/ and data in /var/data/acdi/, respectively. To change the default location, define the required path in the ACDIinstaller/config.json file.