4.3 Local Installation

To manually install the Security Agents for UNIX:

1. From Change Guardian Main click, Integration > Agent Manager.

2. Download the agent artifacts and certificates. See Downloading Agent Artifacts and Certificates in Change Guardian User Guide.

3. Click All Assets, and then click Manage Installation and select Download.

4. Select the package you want to download and the configuration you want to use, and then click Start Download.

   Agent Manager downloads SecurityAgentForUnix.zip to your computer.

5. Extract SecurityAgentForUnix.zip to the computer where you want to install the Security Agent for UNIX.

6. Provide file execute permission to the install.sh file and execute the install.sh script.

7. When prompted to continue with installation, enter y.

8. Specify the target installation directory, then press Enter.

9. Enter y to continue with the same installation path. However, you can enter n change the installation path.

10. When prompted, enter y to install the components like Sentinel, Secure Configuration Manager and Change Guardian. You can enter n if you do not need any specific component.

11. Specify the port number and the startup script of the Security Agent for UNIX.

12. Specify y if you want to install Security Agent for UNIX in FIPS mode. By default, the value is n.

13. Specify the IP address and port numbers for all the components that you selected to install in Step 10.

14. If you selected Change Guardian in Step 10, specify the username and password.

15. Continue with the installation steps. The installation might take a few minutes for all services to start after installation.

    NOTE:Manual Installation of Security Agent for UNIX downloaded from Change Guardian Agent Manager accepts the agent certificate configuration even if there is a mismatch of the agent hostname and IP address. You must ensure that you use the correct configuration before installing Security Agent for UNIX.

To install an Agent on a local computer:

1. Download agent artifacts and certificates. For information on how to download, see Downloading Agent Artifacts and Certificates in Change Guardian User Guide

2. Log on to an Agent computer using an account with superuser privileges.

3. Download the package in the root folder and specify the following command to extract the install files from the tar file.

   tar -zxvf <install_filename>

   Replace <install_filename> with the actual name of the install file.

4. Change to the directory where you extracted the installer:

   cd <directory_name>

5. Specify the following command to start the install script:

   /bin/sh ./install.sh

6. (Conditional) If a compatible agent is already installed, enter y when you are prompted with the following text:

   A compatible agent is already installed on this machine in the directory '/usr’. Do you want to add or upgrade existing agents to it? 

7. (Conditional) If you are installing a new agent, when prompted, enter /usr and proceed through the prompts.

8. (Conditional) To install the Agent in FIPS mode, enter y when you are prompted with the following text in the command prompt:

   Do you want to enable FIPS security restrictions for communication with this component? [n]

   The default value is n.

9. Proceed through the prompts.

10. Enter y if you want the Agent to monitor other NetIQ security products. Otherwise, enter n.

11. When prompted, specify rclink.

    rclink is the default option for restart method. For more information about restart methods, see Restart Methods for the Security Agent for UNIX.

12. (Conditional) If you are using Sentinel, when the installation completes, add the host using UAM for deploying the Sentinel rules. For information about how to deploy rules, see Activating Rule Sets.

13. (Conditional) If you are monitoring Oracle databases with Sentinel, provide the configuration information for the computer by clicking Configure> Sentinel Options > Configure Oracle Endpoints.