...
The Sentinel HASP runtime is a necessary software component used to license the CHARON-SSP for GNU/ Linux virtual machine software. Without this package it is not possible to run the CHARON-SSP virtual machine software. The RPM package is included as part of the tar, gzip CHARON-SSP distribution.To begin the installation you must first obtain the package archive. This can be downloaded from Stromasys or distributed by read-only media, such as a CD-ROM. If you do not have the software package, then please contact either Stromasys or your Value Added Reseller for further help.
The CHARON-SSP for Linux software comes in two separate install packages. The table below describes these:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | CHARON-SSP for Linux Installation Packages |
|---|
|
| Product Name | Description | Distribution Package Name |
|---|
| CHARON-SSP/4M | 32-bit SPARC V8 virtual machine based on the sun4m architecture. | charon-ssp-4m-1.0.21-x86_64_rpm.tar.gz | | CHARON-SSP/4U | 64-bit SPARC V9 virtual machine based on the sun4u architecture. | charon-ssp-4u-1.0.21-x86_64_rpm.tar.gz |
|
To begin, unpack the distribution archive, like so (the example below shows CHARON-SSP/4M for Linux):
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Unpack CHARON-SSP/4M for Linux Distribution |
|---|
|
# cd /tmp
# tar xzvf /path/to/charon-axpssp-sma4m-21.20.1421-x86_64_rpm.tar.gz
|
|
Once the archive is unpacked, change to the directory /tmp. This is where the remaining installation steps will take place.
| Note |
|---|
All installation steps are required to be performed from a privileged account as denoted by the '#' prompt. |
Prerequisites
Before installing the Sentinel HASP Runtime software, there are some prerequisite software packages to install. The following sections describe these packages
GNU C Library (i686) Installation
Before installing the Sentinel HASP runtime it is necessary to install the 32-bit compatibility version of the GNU C Library (glibc). To install this software on Red Hat Enterprise Linux (RHEL) based systems use the following commands:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Command to Install glibc.i686 |
|---|
|
|
The command above should generate output very similar to the following:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | i686 glibc Installation Output |
|---|
|
Loaded plugins: langpacks
Resolving Dependencies
--> Running transaction check
---> Package glibc.i686 0:2.17-78.0.1.el7 will be installed
--> Processing Dependency: libfreebl3.so for package: glibc-2.17-78.0.1.el7.i686
--> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.17-78.0.1.el7.i686
--> Running transaction check
---> Package nss-softokn-freebl.i686 0:3.16.2.3-9.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
glibc i686 2.17-78.0.1.el7 ol7_latest 4.2 M
Installing for dependencies:
nss-softokn-freebl i686 3.16.2.3-9.el7 ol7_latest 186 k
Transaction Summary
================================================================================
Install 1 Package (+1 Dependent package)
Total download size: 4.3 M
Installed size: 15 M
Is this ok [y/d/N]: y
Downloading packages:
(1/2): nss-softokn-freebl-3.16.2.3-9.el7.i686.rpm | 186 kB 00:04
(2/2): glibc-2.17-78.0.1.el7.i686.rpm | 4.2 MB 00:14
--------------------------------------------------------------------------------
Total 299 kB/s | 4.3 MB 00:14
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : nss-softokn-freebl-3.16.2.3-9.el7.i686 1/2
Installing : glibc-2.17-78.0.1.el7.i686 2/2
Verifying : glibc-2.17-78.0.1.el7.i686 1/2
Verifying : nss-softokn-freebl-3.16.2.3-9.el7.i686 2/2
Installed:
glibc.i686 0:2.17-78.0.1.el7
Dependency Installed:
nss-softokn-freebl.i686 0:3.16.2.3-9.el7
Complete!
|
|
Installing the Sentinel HASP Runtime
...
The following post installations task are not required. However, for improved security they are highly recommended.
Securing the Sentinel HASP
...
Configuration Files
The configuration file used by the Sentinel HASP software is insecure and open to malicious, unprivileged access and modification unless the following commands are executed:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Commands to Secure Sentinel HASP Configuration File |
|---|
|
# chmod 0700 /etc/hasplm
# chmod 0600 /etc/hasplm/*
|
|
Securing the Sentinel HASP GUI
The web-based GUI interface is also open to malicious access unless secured appropriately.... add a note in here about VE and using the firefox browser under 'Settings' Use the following steps to secure the software:
| Panel |
|---|
| bgColor | #ffffff |
|---|
| titleBGColor | #f0f0f0 |
|---|
| title | Instructions for Securing Sentinel HASP GUI |
|---|
|
| Step | Description |
|---|
| 1. | open Open a web browser at and navigate the http://localhost: 19571947. | Info |
|---|
For CHARON-SSP Virtual Environment users, double-click the Web Browser icon under the System sections of the System Utilities window. |
| | 2. | navigate to 'Configuration' (left hand pane) Click on the left-hand menu item labelled Configuration. | | 3. | 'Click the Basic Settings ' tab. | | 4. | Under 'the entry labelled Password Protection' , click ' the button labelled Change Password' button. | | 45. | At the Change password Password window - If previous password was set, enter it
- enter new
- repeat
- click 'Submit'
| | 5. | 'Basic Settings' tab - tick 'Allow Remote Access to ACC'
- 'Password Protection', tick 'All ACC Pages'
- Click 'Submit'
| | 6. | If not allowing remote access: - Click 'Network' tab
- 'Network Visibility' click 'None (Local Access Only)'.
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
|
...
: - Leave the field labelled Current Admin Password blank (there is no password set by default).
- Enter the intended password into the field labelled New Admin Password.
- Repeat the intended password in the field labelled Re-enter new Admin Password.
- Click the button labelled Submit.
| | 5. | Back at the Basic Settings tab: - Under the section labelled Password Protection, select the radio button labelled All ACC Pages.
- Click the button labelled Submit to save this change.
| | 6. | To allow remote access to the Sentinel HASP GUI: - Click the Basic Settings tab.
- Select the Allow Remote Access to ACC check box.
- Click the button labelled Submit.
|
|
Removing the Sentinel HASP Software
...