...
The Sentinel HASP runtime is a necessary software component used to license the CHARON-SSP for GNU/ Linux virtual machine software. Without this package it is not possible to run the CHARON-SSP virtual machine software. The RPM package is included as part of the tar, gzip CHARON-SSP distribution.
The CHARON-SSP for Linux software comes in two separate install packages. To begin the installation you must first obtain the package archive. This can be downloaded from Stromasys or distributed by read-only media, such as a CD-ROM. If you do not have the software package, then please contact either Stromasys or your Value Added Reseller for further help. The table below describes these:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | CHARON-SSP for Linux Installation Packages |
|---|
|
| Product Name | Description | Distribution Package Name |
|---|
| CHARON-SSP/4M | 32-bit SPARC V8 virtual machine based on the sun4m architecture. | charon-ssp-4m-1.0.21-x86_64_rpm.tar.gz | | CHARON-SSP/4U | 64-bit SPARC V9 virtual machine based on the sun4u architecture. | charon-ssp-4u-1.0.21-x86_64_rpm.tar.gz |
|
To begin, unpack the distribution archive, like so (the example below shows CHARON-SSP/4M for Linux):
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Unpack CHARON-SSP/4M for Linux Distribution |
|---|
|
# cd /tmp
# tar xzvf /path/to/charon-axpssp-sma4m-21.20.1421-x86_64_rpm.tar.gz
|
|
...
| Note |
|---|
All installation steps are required to be performed from a privileged account as denoted by the '#' prompt. |
Prerequisites
Before installing the Sentinel HASP Runtime software, there are some prerequisite software packages to install. The following sections describe these packages
GNU C Library (i686) Installation
Before installing the Sentinel HASP runtime it is necessary to install the 32-bit compatibility version of the GNU C Library (glibc). To install this software on Red Hat Enterprise Linux (RHEL) based systems use the following commands:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Command to Install glibc.i686 |
|---|
|
|
The command above should generate output very similar to the following:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | i686 glibc Installation Output |
|---|
|
Loaded plugins: langpacks
Resolving Dependencies
--> Running transaction check
---> Package glibc.i686 0:2.17-78.0.1.el7 will be installed
--> Processing Dependency: libfreebl3.so for package: glibc-2.17-78.0.1.el7.i686
--> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.17-78.0.1.el7.i686
--> Running transaction check
---> Package nss-softokn-freebl.i686 0:3.16.2.3-9.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
glibc i686 2.17-78.0.1.el7 ol7_latest 4.2 M
Installing for dependencies:
nss-softokn-freebl i686 3.16.2.3-9.el7 ol7_latest 186 k
Transaction Summary
================================================================================
Install 1 Package (+1 Dependent package)
Total download size: 4.3 M
Installed size: 15 M
Is this ok [y/d/N]: y
Downloading packages:
(1/2): nss-softokn-freebl-3.16.2.3-9.el7.i686.rpm | 186 kB 00:04
(2/2): glibc-2.17-78.0.1.el7.i686.rpm | 4.2 MB 00:14
--------------------------------------------------------------------------------
Total 299 kB/s | 4.3 MB 00:14
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : nss-softokn-freebl-3.16.2.3-9.el7.i686 1/2
Installing : glibc-2.17-78.0.1.el7.i686 2/2
Verifying : glibc-2.17-78.0.1.el7.i686 1/2
Verifying : nss-softokn-freebl-3.16.2.3-9.el7.i686 2/2
Installed:
glibc.i686 0:2.17-78.0.1.el7
Dependency Installed:
nss-softokn-freebl.i686 0:3.16.2.3-9.el7
Complete!
|
|
Installing the Sentinel HASP Runtime
...
Now that the Sentinel HASP software has been installed and it running correctly, it is possible to continue on to Installing the CHARON-SSP Software.
Post-Installation Tasks
The following post installations task are not required. However, for improved security they are highly recommended.
Securing the Sentinel HASP Configuration Files
The configuration file used by the Sentinel HASP software is insecure and open to malicious, unprivileged access and modification unless the following commands are executed:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Commands to Secure Sentinel HASP Configuration File |
|---|
|
# chmod 0700 /etc/hasplm
# chmod 0600 /etc/hasplm/*
|
|
Securing the Sentinel HASP GUI
The web-based GUI interface is also open to malicious access unless secured appropriately. Use the following steps to secure the software:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Instructions for Securing Sentinel HASP GUI |
|---|
|
| Step | Description |
|---|
| 1. | Open a web browser and navigate the http://localhost:1947. | Info |
|---|
For CHARON-SSP Virtual Environment users, double-click the Web Browser icon under the System sections of the System Utilities window. |
| | 2. | Click on the left-hand menu item labelled Configuration. | | 3. | Click the Basic Settings tab. | | 4. | Under the entry labelled Password Protection, click the button labelled Change Password. | | 5. | At the Change Password window: - Leave the field labelled Current Admin Password blank (there is no password set by default).
- Enter the intended password into the field labelled New Admin Password.
- Repeat the intended password in the field labelled Re-enter new Admin Password.
- Click the button labelled Submit.
| | 5. | Back at the Basic Settings tab: - Under the section labelled Password Protection, select the radio button labelled All ACC Pages.
- Click the button labelled Submit to save this change.
| | 6. | To allow remote access to the Sentinel HASP GUI: - Click the Basic Settings tab.
- Select the Allow Remote Access to ACC check box.
- Click the button labelled Submit.
|
|
Removing the Sentinel HASP Software
...
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Sentinel HASP Uninstall Output |
|---|
|
Loaded plugins: langpacks
Resolving Dependencies
--> Running transaction check
---> Package aksusbd.x86_64 0:2.2.1-1 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
aksusbd x86_64 2.2.1-1 @/aksusbd-2.2.1-1.x86_64 4.5 M
Transaction Summary
================================================================================
Remove 1 Package
Installed size: 4.5 M
Is this ok [y/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Stopping aksusbd (via systemctl): [ OK ]
Erasing : aksusbd-2.2.1-1.x86_64 1/1
Verifying : aksusbd-2.2.1-1.x86_64 1/1
Removed:
aksusbd.x86_64 0:2.2.1-1
Complete!
|
|
| Info |
|---|
Removing the Sentinel HASP license software does not remove any site local configuration files located in /etc/hasplm. |