Previous Topic: Install Using Product Explorer

Next Topic: Upgrade from CA Access Control r12.0 SP1


Install Using install_base Script

You can install CA Access Control on any supported OS using the install_base script. This is an interactive script but you can also run it silently.

Note: Before you run the install_base script, make sure you decide which functionality you want to install and review the install_base command so you know how to initiate the installation of this functionality. You may also want to learn first how the install_base script works.

Follow these steps:

  1. If you already have CA Access Control installed and it is running, shut it down by logging in as an administrator and entering the following commands:
    ACInstallDir/bin/secons ‑sk
    ACInstallDir/bin/SEOS_load -u
    
  2. Log in as root.

    To install CA Access Control, you need to have root permissions.

  3. Mount the optical disc drive with the CA Access Control Endpoint Components for UNIX DVD.

    Important! If you are installing on HP from an optical disk drive, you need to ensure the proper reading of file names from the DVD. To prevent the file names from being forced into a shortened and all‑uppercase format, enter the pfs_mountd & and the pfsd & commands and make sure that the following four daemons are invoked: pfs_mountd, pfsd.rpc, pfs_mountd.rpc, and pfsd. For more information, see the man pages of the particular pfs* daemons and commands.

  4. Read the license agreement.

    To run the install_base script you need to accept the End User License Agreement. After you have read the license agreement, you can continue the installation by entering the command found at the end of that file. To get the license file name and location, run install_base -h.

  5. Run the install_base script.

    The install_base script starts and, based on your choices, prompts you for the appropriate installation questions.

    Note: The installation script finds the appropriate compressed tar file, so typing the name the tar file for your platform is optional.

    Now the CA Access Control installation is complete; however, it is not yet running.

Example: Upgrade to CA Access Control r12.6SP1 for UNIX Using Silent Install

This example shows you how to upgrade an existing CA Access Control r8.0SP1 endpoint to CA Access Control r12.6SP1 for UNIX. In this example, you install CA Access Control using the parameters file that enables you to install new features on the endpoint.

  1. Review the install_base script command.

    You use the install_base script to install CA Access Control r12.6SP1 in silent mode. For more information, refer to the Implementation Guide.

  2. Extract the parameters file from the tar compressed file from the CA Access Control Endpoint Components for UNIX media. The file is located in the following directory:
    \Unix\Access-Control\
    
  3. Install CA Access Control using the install_base script.

    Use the -autocfg command and specify to use the parameters file you customized.

    CA Access Control r12.6SP1 is installed with the options you specified.

Example: The parameters file

The parameters file lets you select the software components to add to the endpoint. If you install CA Access Control in native installation mode, you customize the file before you begin the installation. If you install CA Access Control in interactive mode, you can extract the installation parameters into a file and then customize the installation parameters.

The following is a snippet from the parameters file:

#  Specifies whether you want to configure PUPM Agent 
#  Values: "yes", "no"
#  Default: "no"
INSTALL_PUPM="yes"

# Specifies whether  enables KBL audit records management
# Values: yes, no
# Default: no
ENABLE_KBL=yes 

In this example, you specified to install the PUPM Integration on, (INSTALL_PUPM=yes). and enabled keyboard logging on the endpoint, (ENABLE_KBL=yes).

Example: Install the Client and Server Packages with Default Features

The following command shows how to initiate the install_base interactive script to install the client and server packages with all default CA Access Control features. During the installation you are asked to answer questions related to installing the client and server packages of CA Access Control.

/dvdrom/Unix/Access‑Control/install_base

Note: As we did not specify a package to install, the install_base command installs both client and server packages.

Example: Install the Client Package with STOP Enabled to a Custom Directory

The following command shows how to initiate the install_base interactive script to install the client package to the /opt/CA/AC directory, and enable the Stack Overflow Protection option.

/dvdrom/Unix/Access‑Control/install_base -client -stop  -d /opt/CA/AC