Contents

Prerequisites

The Charon -SSP VE License Server has a number of prerequisites:

1. The VE license server package
2. A suitable Linux instance to be used as the VE license server. This instance must run
   
   1. in a supported cloud environment, or
   2. in a supported VMware environment.
3. Correct firewall settings
4. The VE-capable Charon -SSP emulator software running on a Charon host with appropriate network access to the VE license server

These requirements are described in detail below.

VE License Server Package

The Charon -SSP VE License Server package is delivered as an RPM package. Stromasys or your Stromasys VAR will provide you with the software or a download link.

...

Where <version> indicates the version of the software, for example, 1.1.6.

Linux Instance for License Server

The license server package must be installed on a Linux cloud instance or a Linux VM on VMware.

Currently Supported Cloud Providers

At the time of writing, the following cloud providers are supported by the VE license server:

...

Depending on the cloud environment, Stromasys may offer a prepackaged Charon -SSP VE image on the selected cloud marketplacemarketplaces. This image includes the Charon VE-SSP enabled emulator software (already installed) and the VE License Server RPM package (can be installed optionally). An instance launched from such a prepackaged image can also be used as a VE license server.

Currently Supported VMware Platforms and Requirements

At the time of writing, the following VMware Platforms are supported by the VE license server.

...

The VE license server has also been tested successfully in a Google GCVE (Google Cloud VMware Engine) environment. Please contact Stromasys to discuss your requirements if you need this product combination.

Linux Host Requirements for the VE License Server

The Linux system on which the VE license server runs must fulfill the requirements described below.

Linux Hardware and Software requirements

Software requirements for the VE License Server itself:

...

Additional hardware requirements (cloud instance capabilities or VMware host configuration) for running the emulator software on the same system:

If the license server is combined with the Charon

...

emulator software on the same instance, the instance used must satisfy the requirements of the Charon

...

emulator host and all instances that will run on it.

...

Please refer to your product-specific documentation for more information:

• For Charon-SSP, refer to the Charon-SSP user's guide of your emulator version for details (see CHARON-SSP for Linux).

Additional Linux Host Requirements for AWS cloud

In the AWS cloud, an IAM role allowing the ListUsers action (IAMReadOnlyAccess in the example below) must be attached to the instance. This can be done during the launch of the instance as shown in the sample below.

Alternatively, the role can be set/changed by selecting the instance, right-clicking on it, and selecting Security > Modify IAM Role (in the older AWS console, use the Action menu). If such a role has not yet been defined, please refer to Creating and Attaching an AWS IAM Role and to the documentation provided by AWS for additional information.

Additional Linux Host Requirements for IBM cloud

For the license server to work properly in the IBM cloud, an API key must be created and installed. Please refer to Creating and Installing an IBM API Key.

Firewall Settings

Communication Between License Server and Client System

Any intermediate firewall as well as the cloud-specific subnet and instance security settings must permit the following ports for the appropriate source systems:

...

• The default zone name can be found with the command firewall-cmd --get-default-zone, a list of all zones can be displayed with the command firewall-cmd --get-zones.
• The parameter --permanent writes the command to the respective firewalld configuration files. To add the command to the running firewall, re-run it without the parameter --permanent.
• The simplified sample above does not limit the source IP address to the addresses of the license clients. This would require a more sophisticated configuration. Please refer to the documentation of your Linux system.

Communication Between License Server and Cloud Infrastructure

The license server must be able to access information provided by the cloud infrastructure. In particular, it must be able to communicate with the following addresses/systems:

...

Any intermediate firewall as well as the cloud-specific subnet and instance security settings must permit communication with these systems for the VE license server to function properly. See Cloud-Specific Firewall Information for an overview about the mechanisms used in the different cloud environments, and your Linux firewall documentation for any Linux specific questions.

Communication Between License Server and ESXi Host / vCenter Server

The license server must be able to access the following ports on the ESXi host or vCenter server it binds to: ports 443 (TCP) and 902 (TCP and UDP).

Charon

...

VE-Capable Emulator and Management Software

The VE license server software requires matching Charon emulator software. At the time of writing this support was available for Charon-SSP emulator products.

Please note: The protocol versions used by the emulator software and the license server must be compatible. The software checks for compatible protocol versions and reports an error should there be a mismatch.

Charon-SSP Emulator Packages for VE Licenses

The necessary features are available in Charon-SSP 4.2.x and later. Stromasys or your Stromasys VAR will provide you with the software or a download link. In certain cloud environments, Stromasys may offer a prepackaged Charon-SSP VE image on the selected cloud marketplacemarketplaces. This image includes the Charon-SSP emulator software (already installed) and the VE License Server RPM package (can be installed optionally). If you use a Charon host in the cloud and the instance was launched from such a prepackaged image, the required VE-capable emulator software is already installed (refer to the respective cloud-specific Getting Started Guide for more information).Please note: The protocol versions used by the emulator software and the license server must be compatible. The software checks for compatible protocol versions and reports an error should there be a mismatchcloud-specific Getting Started Guide for more information).

The Charon-SSP packages to be installed are the following RPM packages:

...

• Unless there is GUI access to the Charon-SSP host system (or an option to use X11-Forwarding via SSH), Charon Manager and Charon Director must be installed on a remote management system that will be used to configure and manage the Charon-SSP software. The Charon-SSP emulator software can also be run from the command-line, in which case Charon Manager and Director are not required.
• The Charon Agent package contains the RPM and Debian packages for the Charon Manager on Linux and a ZIP file for the Charon Manager on Microsoft Windows (charon-manager-ssp-<version>.zip).
• The Charon-SSP VE emulator software can run on the same system as the license server or on a separate system with appropriate network access to the VE License Server.

VE License Server Software Installation

If you are not familiar with the installation of RPM packages, please refer to the general Charon -SSP user's guide of your product, or your Linux system documentation.

...

• In versions before 1.0.17, the license server will not start automatically after the initial installation. It will be started once a valid license has been installed (see Installing a License on the VE License Server).
• When upgrading to version 1.0.24 from an older version of the license server, a license update is required due to a change in the license schema.
• If you plan to use a primary and a backup license server, the license server software must be installed on both systems.

VE License Server Installation Steps

Perform the following steps to install the VE License Server software:

...

# dnf install license-server-1.1.5.rpm 
Last metadata expiration check: 1:14:52 ago on Fr 29 Jan 2021 09:46:32 CET.
Dependencies resolved.
================================================================================
 Package               Architecture  Version          Repository           Size
================================================================================
Installing:
 license-server        x86_64        1.1.5-1          @commandline         52 M

Transaction Summary
================================================================================
Install  1 Package

Total size: 52 M
Installed size: 79 M
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Running scriptlet: license-server-1.1.5-1.x86_64                          1/1 
  Installing       : license-server-1.1.5-1.x86_64                          1/1 
  Running scriptlet: license-server-1.1.5-1.x86_64                          1/1 
Created symlink /etc/systemd/system/multi-user.target.wants/licensed.service → /etc/systemd/system/licensed.service.

  Verifying        : license-server-1.1.5-1.x86_64                          1/1 

Installed:
  license-server-1.1.5-1.x86_64                                                 

Complete!

Charon

...

VE-Capable Emulator Software Installation

The installation of the Charon emulator software is described in detail in the user's guides of the respective products and versions. This section provides a short overview.

Installing Charon-SSP for VE Licenses

General Information

The Charon-SSP packages are RPM packages that are installed using the yum (Linux 7.x), dnf (Linux 8.x), or rpm command. They can be copied to the Charon host system using SFTP as shown in the example for copying the license server RPM, or using other methods.

...

Please note: To use the graphical user interface (Charon Manager for SSP) the Charon Manager package typically is installed on your local Linux or Windows PC that will be used for management purposes. Running the Charon Manager in a non-graphical cloud or VMware instance and export it via X11-Forwarding is possible, but will require additional configuration and installation steps (with access to a package repository) - this is outside the scope of this document. It is also possible to manage Charon-SSP via the command-line only. This is described in the general Charon-SSP user's guide.

Possible Additional Requirements

Many Linux server instances are missing packages that are typically available on workstation installations. Such packages may have to be installed, for example, if Charon-SSP graphics device emulation or audio emulation are to be used.  The same applies to the Charon-SSP Manager, the Server JIT feature, and some non-critical functions of the Charon Agent. On prepackaged Charon-SSP cloud marketplace images, the necessary packages are preinstalled.

...

The packages above have their own dependencies. Install the above packages with the yum (or dnf) command in order to have their dependencies automatically installed. If your server does not have access to the standard operating system repositories, refer to this document for instructions on setting up a local repositories.

Sample Installation

Only the Charon-SSP emulator packages (4M, 4U(+), 4V(+)) are specific to the license model used. The packages required for managing Charon-SSP (Charon Agent, Manager, and Director) are the same as in the conventional product of the same version.

...