Implementation Guide › Installing and Customizing a UNIX Endpoint › How to Install on Solaris Zones

How to Install on Solaris Zones

Installing CA ControlMinder on Solaris 10 zones is no different than a regular installation. The recommended way of installing CA ControlMinder on Solaris 10 is using Solaris native packaging (pkgadd and pkgrm) commands.

Important: For CA ControlMinder to work in any nonglobal zone, install it in the global zone first.

Depending on whether you want to install CA ControlMinder on all zones, or only on selected zones, use one of the following methods:

• Install CA ControlMinder using Solaris native packaging

  We recommend using the Solaris native package installation. You can either:

  • Install CA ControlMinder on all zones.
  • Install CA ControlMinder on the global zone and selected zones.
• Install CA ControlMinder on a selected zone using the install_base script

  The install_base script installs CA ControlMinder in the zone you are executing the script in. Install CA ControlMinder in the global zone first.

Follow these steps:

1. Install CA ControlMinder using one of the following methods:
   • Install CA ControlMinder using Solaris native packaging (recommended)
     1. Verify prerequisites
     2. Customize the Solaris native package
     3. Install Solaris Native Package
     4. Install on a Solaris Branded Zone
     5. Use ioctl for communication
     6. Start CA ControlMinder
   • Install CA ControlMinder in each zone using the install_base script
     1. Verify prerequisites
     2. Customize and install using install_base script
     3. Configure post-installation settings
     4. Start CA ControlMinder
2. Allow admin access using zlogin
3. Define rules to protect resources

Note: Due to a Solaris 11 limitation, the CA ControlMinder package is not propagated into nonglobal zones during installation. We recommend you to install CA ControlMinder in each zone individually using the Solaris native packaging tool (pkgadd).