Installation and Upgrade Guides › Policy Server Installation Guide › Installing the Policy Server on UNIX Systems › Before You Install the Policy Server › Install the Policy Server in Console Mode

Install the Policy Server in Console Mode

You install the Policy Server using the installation media on the Technical Support site. Consider the following:

• Depending on your permissions, you may need to add executable permissions to the install file by running the following command:

  chmod +x installation_media
  

  installation_media

  Specifies the Policy Server installer executable.

• If you execute the Policy Server installer across different subnets, it can crash. Install the Policy Server directly on the host system to avoid the problem.

To install the Policy Server

1. Exit all applications that are running.
2. Open a shell and navigate to the installation media.
3. Run the following command:

   ./installation_media -i console
   

   installation_media

   Specifies the Policy Server installer executable.

   The installer starts.

   Note: For a list of installation media names, see the Policy Server Release Notes.

4. Use the system and component information you have gathered to install the Policy Server.

   Consider the following when entering information:

   • The installer prompts you to select a FIPS mode of operation. The use of FIPS-compliant algorithms in your environment is optional. If your organization does not require this type of encryption, install the Policy Server in FIPS-compatibility mode.
   • The installer prompts you to select components you want to configure. Enter the numbers separated by commas (,). To select none of the features, enter only a comma.
     • As detailed in Policy Store Considerations, the Policy Server installer can automatically configure a policy store. If you are using a vendor that this topic does not list or you do not have the required information, do not select Policy Store. You can configure the policy store manually after installing the Policy Server.
     • If you plan on using features related to Federation Security Services, be sure to select Web Server(s) and Create SM Key Database/Change SM Key Database Password. Configuring a web server installs the FSS Administrative UI. If you do not plan on using Federation Security Services, you do not require the FSS Administrative UI.

     Note: If you are installing the Policy Server for the first–time on this system, do not configure a web server or the OneView Monitor GUI. You are installing the Policy Server using the smuser UNIX account. The installer modifies the web server configuration files, for which the smuser account does not have the appropriate root privileges. When the Policy Server installation is complete, run the Policy Server Configuration Wizard as root to configure the web server for the FSS Administrative UI or the OneView Monitor GUI.

     • If you plan on configuring the SiteMinder Information Card Authentication Scheme, be sure that Create SM Key Database/Change SM Key Database Password is selected. For example, you can use the SiteMinder Information Card Authentication Scheme for the support of Microsoft CardSpace.

     Note: If you decide to create a key database, you are prompted to install the default certificate authority (CA) certificates. Leave the Import default CA certificates selected and install these certificates.

   • The installer prompts you to choose a browser executable. If there is no browser installed on the system and you do not plan to use the FSS Administrative UI, hit Enter and then enter "2" (No) when prompted if you would like to specify a different browser.
   • If you are initializing a policy store, you are prompted to enter a password for the default SiteMinder user account. The default account name is siteminder.
   • If you are using IPv6 addresses, be sure that entries include brackets.

     Example: [2001:db8::1428:57ab]

   • When prompted to initialize the LDAP instance do so only to configure a new policy store instance.
5. Review the installation settings and press Enter.

   The Policy Server and selected components are installed and configured.

   Note: The installation can take several minutes.

6. Press Enter.

   The installer closes.

   Note: If you chose to install the FSS Administrative UI, register the FSS Administrative UI with the Policy Server after installing and registering the Administrative UI. For more information about registering the FSS Administrative UI, see Registering the Federation Security Services UI.

Note: If you experience problems during the installation, you can locate the installation log file and the policy store details file in siteminder_home/siteminder/install_config_info.

siteminder_home

Specifies the Policy Server installation path.

More information:

Locate the Installation Media

Installation Media Names

Troubleshoot the Policy Server Installation

Troubleshoot the Policy Server Installation

Use the following files to troubleshoot the Policy Server installation:

• CA_SiteMinder_Policy_Server_release_InstallLog.log

  The installation log contains a summary section that lists the number of successes, warnings, non–fatal errors, and errors that occurred during the installation. Individual installation actions are listed with the respective status.

  release

  Specifies the Policy Server release.

  Location: siteminder_home\siteminder\install_config_info

• ca-ps-details.log

  The policy store log details the policy store status.

  Location: siteminder_home\siteminder\install_config_info

• smps.log

  The smps.log is created when you start the Policy Server. This log contains the following line if the Policy Server installed successfully:

  [Info] Journaling thread started, will delete commands older than 60 minutes.
  

  Location: siteminder_home\siteminder\log

  siteminder_home

  Specifies the Policy Server installation path.

Restart the SNMP Daemon

You only have to restart the SNMP daemon if you configured SNMP during the Policy Server installation.

To restart the SNMP daemon

1. Enter S76snmpdx stop in /etc/rc3.d.

   The SNMP daemon stops.

2. Enter S76snmpdx start in /etc/rc3.d.

   The SNMP daemon starts.

Configure a Policy Store

If you did not use the Policy Server installer to configure a policy store automatically, manually configure a supported LDAP directory server or relational database as a policy store.