The install_base command runs the installation script and installs one or more of the CA ControlMinder packages with one or more of the selected installation options.
This command has the following format:
install_base [tar_file] [packages] [options]
(Optional) Defines the name of the tar file containing the CA ControlMinder installation files for your platform. The installation script finds the appropriate compressed tar file automatically, so typing the name of your tar file is optional.
(Optional) Defines the CA ControlMinder packages you want to install. If you do not specify any packages, the installation script installs both the client and server packages unless you are upgrading CA ControlMinder, in which case the installation script installs the same packages you already have installed.
Note: You must install the client package before you install any other package. You can, however, specify to install the client package together with any other package.
The following are the CA ControlMinder packages you can install:
Installs all CA ControlMinder packages. These are the client package, server package, API package, and the MFSD package. It also enables STOP (-stop option).
Installs the API package that includes API libraries and sample programs.
Installs the client package that has the core CA ControlMinder functionality required for a standalone computer.
Installs the MFSD package that includes the mainframe synchronization daemon.
Note: You must install the server package before you install the MFSD package.
Installs the server package, which includes more binaries and scripts (selogrcd, sepmd, sepmdd, sepmdadm, secrepsw). These complement the client package. For example, sepmdd lets you set up the computer with a Policy Model.
Installs the Unicenter security integration and migration package that supports CA ControlMinder integration with CAUTIL, Workload Management, and Event Management components of Unicenter, and the Unicenter EMSec API.
(Optional) Defines additional installation options you want to set.
Note: Installation options that affect CA ControlMinder functionality, (for example, -stop) can only be specified when you install the client package. Installation options that affect the installation process (for example, -verbose) can be specified with any package.
The following are the options you can specify:
Runs the installation in silent mode (not in interactive mode). If a response file is specified, the installation uses the preferences stored in the file to automatically respond to the interactive installation process. If you do not specify a response file, or if the response file is missing any options, the installation uses preset defaults.
To create a response file:
Important! If you do not specify a response file, you must use the -command option when using the ‑autocfg option.
When running a silent installation, consider the following:
To install any other package or feature, you must specify the appropriate option as you would in a normal installation.
To view installation messages on the screen during installation, use the -verbose option.
Defines the command that specifies that you accept the license agreement. You can find this command at the end of the license agreement (inside square brackets) and you must use it when you use the -autocfg option. To locate the license agreement file, run install_base -h
Note: The license agreement is only available while the help is displayed. When you finish reading the help, the license agreement is deleted.
Defines a custom installation directory. The default installation directory is /opt/CA/AccessControl.
Important! You cannot put the CA ControlMinder database in a mounted network file system (NFS).
Creates a lookaside database with or without DNS hosts. The -nodns option specifies that CA ControlMinder will not perform an nslookup on any hosts in the DNS during installation.
Specifies to activate FIPS-only public key (asymmetric) encryption.
Forces the installation to ignore an active new subscriber update (sepmd -n and subs <pmdb> newsubs(sub_name)) and continue the installation. By default, the installation stops and asks you to finish the subscriber update first.
Note: If you use this option, the new subscriber update will fail.
Forces the installation to accept a non-default encryption key without warning you.
Important! After the upgrade is complete, your encryption key is set to the default.
Note: CA ControlMinder also provides SSL, AES (128bit, 192bit, and 256bit), DES, and 3DES encryption options that you can choose.
Forces the new installation over the already installed version. Use this option when you want to install over the same version.
Forces the installation to continue without warning you it cannot unload your old kernel.
Note: You may need to reboot the computer after the installation is complete.
Defines the name of the group owner of CA ControlMinder files. The default value is 0.
Displays help for this command.
Specifies that the installation does not check for dependency with other products.
Restores your encryption key during an upgrade.
Note: During an upgrade you must use the same encryption key that you used before the upgrade.
Defines the language in which to install CA ControlMinder. For a list of supported languages and character sets, read the description for this option when you display the help (install_base -h).
If the license program is not already installed, defines the license program installation directory.
Note: The license program installs to the specified directory only if $CASHCOMP variable is not defined in your or the computer's environment (it can be defined in /etc/profile.CA). Otherwise, the license program installs to $CASHCOMP. If $CASHCOMP is not defined and you do not specify -lic_dir, the license program installs to the /opt/CA/SharedComponents directory. CAWIN installs to the same directory as the license package.
Specifies not to create a link to seos.ini in the /etc directory when you install CA ControlMinder to the default path (/opt/CA/AccessControl).
CA ControlMinder creates a link to seos.ini in the /etc directory when you install CA ControlMinder to a non-default directory. This lets CA ControlMinder "detect" the Installation location. Use this option if you are installing to the default path and you do not want to update /etc (due to a security requirement).
Specifies that a log is not kept for the installation process. By default, all transactions associated with the installation process are stored to ACInstallDir/AccessControl_install.log (where ACInstallDir is the installation directory for CA ControlMinder).
Specifies for the installation not to attempt to set up selogrd integration with Unicenter Event Management.
If you do not specify this option, the installation script checks whether Unicenter Event Management is installed. If the script finds that Unicenter Event Management seems to be installed, it sets up selogrd integration with Unicenter Event Management by adding the following line to selogrd.cfg:
uni hostname
Specifies not to load /etc/profile.CA to the user environment.
Specifies a program to run after the installation is complete.
Specifies a program to run before the installation starts.
Specifies the full path name to the root certificate file.
Note: When you use this option, the script extract the tar file and then repackages it with the file you provide replacing the default file (def_root.pem).
Specifies the full path name to the root key file.
Note: When you use this option, the script extract the tar file and then repackages it with the file you provide replacing the default file (def_root.key).
Specifies that sepass changes to the root password are sent to the Policy Model.
Note: You can set this after the installation is complete using the AllowRootProp token of the seos.ini file. For more information about the seos.ini initialization file, see the Reference Guide.
Stores your responses to the interactive installation for later use by the ‑autocfg option.
Enables the use of the STOP (Stack Overflow Protection) feature.
Specifies to use system functions, which define a bypass for network caching on your system.
Note: You cannot use this option on IBM AIX platforms.
Displays the version of the CA ControlMinder package.
Specifies that installation messages are displayed on the screen during installation. This is the default in an interactive installation and you only need to specify this option if you want to see these messages when you use the -autocfg option.
|
Copyright © 2013 CA Technologies.
All rights reserved.
|
|