...

Hardware Requirements

Number of CPU cores

...

The following table lists the minimum and recommended number of CPUs required for each virtual HP Alpha instance (note that each CHARON instance is able to run on 2 CPU cores hosts, but this configuration does not support emulation of all the virtual CPUs):

...

• depends on the amount of HP Alpha memory to be emulated and on the number of CHARON-AXP instances to be executed on one host.

• is calculated according to the following formula:

  The minimum host memory = (2Gb +  the amount of HP Alpha memory emulated) per CHARON-AXP instance.

  
  

Disk storage

The total amount of disk space required for CHARON-AXP can be calculated as a sum of all the disk/tape image sizes plus 50 MB for the CHARON software plus the space required for the host operating system. Temporary disk storage is often needed when setting up a new virtual machine (for source disks backups storage, software installation kits, etc...).

...

...

It is also possible to use virtual network interfaces, but for performance considerations, it is recommended to use physical ones only.

...

Software Requirements

• Red Hat Enterprise Linux 7.x, 64bit
• Red Hat Enterprise Linux 6.5 - 6.10, 64bit
• Linux Centos 7.x, 64bit
• VMware ESXi 5.5 and 6.x up to 6.7 (requires a supported Linux operating system on top of a ESXi virtual machine)
  

...

Host system preparation

If a network-wide license (red dongle or software license) is going to be used, do the following:

• On the server side (where the network license will reside): open port 1947 for both TCP and UDP
• On the client side, if broadcast search for remote licenses is to be used, UDP traffic from port 1947 of the license server to ports 30000-65535 of the client must be permitted
  
• Both on server and client sides: set default gateway

Please consult with your Linux User's Guide on details.

...

Before installation

Login as the superuser ("root") on the host system. Because Sentinel HASP runtime relies on 32-bit compatibility libraries to run on Linux, the 32-bit compatibility libraries must be installed before continuing. If the emulator host has access to a package repository, either local or remote, use the following command:

...

Sometimes it is not possible to use an online repository for the installation of 32-bit glibc package. In this case the procedure described in the appendixes has to be used: glibc.i686 installation without Internet connection

.

Create a directory for the CHARON-AXP distribution, copy the TAR.GZ files there and change to this directory as shown in the following example:

...

.

On RHEL 7.x and CentOS 7.x, the "libev" package is required. If it is reported as missing during CHARON installation on RHEL 7.x check that the repository "extras" is included and enabled, if not, include and enable it. Please refer to your Linux distribution administrator's guide. Example for RHEL 7.x:

...

...

Distribution preparation

Extract the contents of the distribution TAR.GZ files to the current directory:

...

where:

...

...

Description

...

VER

...

Version of CHARON-AXP product, for example 4.10

...

BN

...

Build Number of CHARON-AXP product, for example 20200

...

ZZ

...

CHARON-AXP target operating system identifier.

For CentOS 7.x 'ZZ' value is 'el74', for Red Hat Enterprise Linux 7.x the value is 'el74' and for Red Hat Enterprise Linux 6.5 to 6.10 the value is 'el65'.

Example:

...

As a result, the new directory "charon-axp-<VER>-<BN>.<ZZ>" will be created.
 

Switch to that directory:

...

Example:

...

The distribution directory contains the following RPM files:

...

File name

...

Description

...

aksusbd-7.63-1.i386.rpm

...

HASP Run-time

...

charon-license-VER-BN.ZZ.x86_64.rpm

...

CHARON Libraries

...

charon-utils-VER-BN.ZZ.x86_64.rpm

...

CHARON Utilities

...

Example:

...

# ls
aksusbd-7.63-1.i386.rpm
charon-axp-4.10-20200.el74.x86_64.rpm
charon-license-4.10-20200.el74.x86_64.rpm
charon-utils-4.10-20200.el74.x86_64.rpm
charon-mtd-4.10-20200.el74.x86_64.rpm 

...

Installation

Issue the following command to install all the RPM files present in the directory:

...

Enter "y" to agree to install all the listed packages.

Example:

Dependencies Resolved  

Software Requirements

• Red Hat Enterprise Linux 8.x - 64bit
• Red Hat Enterprise Linux 7.x - 64bit
• Linux Centos 8.x - 64bit
• Linux Centos 7.x - 64bit
• VMware ESXi 5.5 and 6.0 up to 6.7 (requires a supported Linux operating system on top of a ESXi virtual machine)
  

Host system preparation

If a network-wide license (red dongle or software license) is going to be used, do the following:

• On the server side (where the network license will reside): open port 1947 for both TCP and UDP
• On the client side, if broadcast search for remote licenses is to be used, UDP traffic from port 1947 of the license server to ports 30000-65535 of the client must be permitted
  
• Both on server and client sides: set default gateway

Please consult with your Linux User's Guide on details.

Before installation

1. Login as the superuser ("root") on the host system. Because Sentinel HASP runtime relies on 32-bit compatibility libraries to run on Linux, the 32-bit compatibility libraries must be installed before continuing. If the emulator host has access to a package repository, either local or remote, use the following command:

   # yum install glibc.i686

   Sometimes it is not possible to use an online repository for the installation of 32-bit glibc package. In this case the procedure described in the appendixes has to be used: glibc.i686 installation without Internet connection

   .

2. Create a directory for the CHARON-AXP distribution as shown in the following example:

   # mkdir /charon_dist

   .

3. On RHEL/CentOS 7 and 8, the "libev" package is required. If it is reported as missing during CHARON installation on RHEL 7/8, check that the repository "extras" is included and enabled, if not, include and enable it. Please refer to your Linux distribution administrator's guide.
   Example for RHEL 7.x:

   # yum-config-manager --enable rhel-7-server-extras-rpms

   
   

Distribution preparation

Copy the download kit (in /tmp for example) to the folder created in the previous chapter:

where:

Extract the contents of the distribution .tar.gz file to the current directory:

Example:

As a result, the new directory "charon-axp-<VER>-<BN>.<ZZ>" will be created.

Switch to that directory:

Example:

The distribution directory contains the following RPM files:

Example:

Installation

Issue the following command to install all the RPM files present in the directory:

Enter "y" to agree to install all the listed packages.

Example:

Check the installation process has completed successfully.

Example:

Check the installation process has completed successfully.

Example:

...

Re-login (as "root") to apply the PATH settings or execute the following command:

...

# . /etc/profile.d/charon.sh

...

CHARON-AXP home directory

By default CHARON is installed in the "/opt/charon" directory. It has the following subdirectories:

...

Directory

...

Description

...

/bin

...

Contains all the executable files

...

/cfg

...

Contains the configuration files templates

...

/doc

...

Contains the documentation

...

/log

...

Contains the log files

...

/disks

...

Contains the disk containers

...

/drivers

...

Contains the CHARON drivers

...

Re-login (as "root") to apply the PATH settings or execute the following command:

If "putty" terminal emulator is going to be used as an additional option copy the following file to your home directory:

CHARON-AXP home directory

By default CHARON is installed in the "/opt/charon" directory. It has the following subdirectories:

The most important directory at this stage is the "/cfg" directory since it contains template configuration files with examples of typical configuration parameters and comments. We will focus our attention on this subject in the next chapter.

Specific user account creation

Create a specific user account named "charon" for running CHARON:

Any existing user can also be used to run CHARON. In this case issue the following command to include this existing user into these specific groups:

Example:

Re-login to apply changes.

Specific user account creation

Create a specific user account named "charon" for running CHARON:

...

Any existing user can also be used to run CHARON. In this case issue the following command to include this existing user into these specific groups:

...

Example:

...

Re-login to apply changes.

...

License installation

Regular HASP USB dongle

If the CHARON license is located on a regular USB dongle, just connect it to the host USB port.

Network HASP USB dongle

If the CHARON license is a network license (red USB dongle), it is possible either to connect it to the host USB port (to use it locally and provide it to other hosts on the local network at the same time) or to install it on a local network "license server" for remote access from this particular host.

...

License installation

Regular HASP USB dongle

If the CHARON license is located on a regular USB dongle, just connect it to the host USB port.

Network HASP USB dongle

If the CHARON license is a network license (red USB dongle), it is possible either to connect it to the host USB port (to use it locally and provide it to other hosts on the local network at the same time) or to install it on a local network "license server" for remote access from this particular host.

If a remote license server is to be used:

• Copy the aksusbd-7.63-1.i386.rpm and charon-license-4.9-<build>.<OS identifier>.x86_64.rpm files (see above) to the server, for example to "/tmp".
• Login as "root" on the server.
• Switch to that directory.

• Install the copied files using "yum".
  Example:

  # cd # cd /tmp # yum # yum install aksusbd* charon-license-*

  
  

...

...

...

1. Invoke the system default web browser and enter the URL http://localhost:1947 to display the "Sentinel Admin Control Center" (ACC) web interface.
2. Click on "Sentinel Keys" link to open the corresponding page.
3. Make sure that one and only one CHARON HASP or SL license is present.

To facilitate troubleshooting, Stromasys recommends to enable logging from the Sentinel Admin Control Center as described in this article: Enabling logging in Sentinel Admin Control Center.

...

...

...

select action:
1 - Dedicate to CHARON
2 - Release to host
3 - Create Bridge with TAPs
4 - Remove Bridge
5 - Add VLAN
6 - Remove VLAN
7 - Print status
8 - Exit

Enter "8" to return to the console prompt.

Now "eth1" can be used by CHARON-AXP.

...

Manual Configuration

Choosing a network interface

To choose an interface to be used for CHARON networking, do the following:

...

Choose an interface to be used by CHARON, for example "eth1"

Designation of network interface to CHARON

To designate the chosen interface to CHARON open up the file "/etc/sysconfig/network-scripts/ifcfg-ethN" (where N is the number of the interface to be used for CHARON, in this case it is "1") and make sure that all the IP-setup related parameters are removed. The file must look like this:

...

Switching off the offload parameters

Determine what additional parameters are currently set to "on" on the host network adapter to be used by CHARON using the following command:

...

Example:

select action:
1 - Dedicate to CHARON
2 - Release to host
3 - Create Bridge with TAPs
4 - Remove Bridge
5 - Add VLAN
6 - Remove VLAN
7 - Print status
8 - Exit

Enter "8" to return to the console prompt.

Now "eth1" can be used by CHARON-AXP.

Manual Configuration

Choosing a network interface

To choose an interface to be used for CHARON networking, do the following:

Choose an interface to be used by CHARON, for example "eth1"

Designation of network interface to CHARON

To designate the chosen interface to CHARON open up the file "/etc/sysconfig/network-scripts/ifcfg-ethN" (where N is the number of the interface to be used for CHARON, in this case it is "1") and make sure that all the IP-setup related parameters are removed. The file must look like this:

Switching off the offload parameters

Determine what additional parameters are currently set to "on" on the host network adapter to be used by CHARON using the following command:

Example:

Use "ethtool" to switch off all the offload parameters:

Example:

Use "ethtool" to switch off all the offload parameters:

...

Example:

...

For the example above let's create a temporary file containing the commands to be executed at system startup as the offload parameters must be switched off following each reboot:

...

ethtool -K eth1 rx off
ethtool -K eth1 tx off
ethtool -K eth1 sg off
ethtool -K eth1 gso off
ethtool -K eth1 gro off 

Let's suppose the name of the file is "offload_off_eth1.txt". To execute it on system startup, execute the following command (example):

...

Final steps

• Reboot the host system
• Login as user "charon"
• Verify the offload parameters are effective

...

Upgrade to new version

To upgrade an already installed CHARON-AXP kit to a more recent one:

...

Install the license for the new CHARON-AXP as described in the "License installation" section.

...

For the example above let's create a temporary file containing the commands to be executed at system startup as the offload parameters must be switched off following each reboot:

Let's suppose the name of the file is "offload_off_eth1.txt". To execute it on system startup, execute the following command (example):

Final steps

• Reboot the host system
• Login as user "charon"
• Verify the offload parameters are effective

Upgrade from previous version

To upgrade an already installed CHARON-AXP kit to a more recent one:

1. Ensure your license allows you to upgrade to that version. If not, please generate a C2V file and send it to STROMASYS for update. See CHARON-AXP for Linux utilities - 'hasp_srm_view' utility
2. Prepare the new kit RPM files as it is described in "695402677" and "695402677" sections.
3. Stop all running CHARON-AXP instances.
4. Make sure that no template files (i.e. "es40.cfg.template") have been used for your specific configuration otherwise copy those files to a dedicated folder.
5. Login as "root" user.
6. Remove the old CHARON-AXP version as described in the "CHARON-AXP for Linux deinstallation" chapter and reboot the Linux server (recommended).
7. Proceed with the instructions on the new kit installation as described in the "695402677" section.
8. Once installation is completed, it is recommended to reboot the Linux server (possible issues with licenses detection could occur).

9. Install the license for the new CHARON-AXP as described in the "695402677" section.

10. Start all the CHARON-AXP services stopped at step #3.