The Sentinel HASP runtime is a necessary software component used to license the CHARON-SSP for Linux virtual machine software. Without this package it is not possible to run the CHARON-SSP virtual machine software. The RPM package is included as part of the tar, gzip CHARON-SSP distribution.
The CHARON-SSP for Linux software comes in two separate install packages. The table below describes these:
| Product Name | Description | Distribution Package Name |
|---|
| CHARON-SSP/4M | 32-bit SPARC V8 virtual machine based on the sun4m architecture. | charon-ssp-4m-1.0.21-x86_64_rpm.tar.gz |
| CHARON-SSP/4U | 64-bit SPARC V9 virtual machine based on the sun4u architecture. | charon-ssp-4u-1.0.21-x86_64_rpm.tar.gz |
To begin, unpack the distribution archive, like so (the example below shows CHARON-SSP/4M for Linux):
# cd /tmp
# tar xzvf /path/to/charon-ssp-4m-1.0.21-x86_64_rpm.tar.gz
|
Prerequisites
Before installing the Sentinel HASP Runtime software, there are some prerequisite software packages to install. The following sections describe these packages
GNU C Library (i686) Installation
Before installing the Sentinel HASP runtime it is necessary to install the 32-bit compatibility version of the GNU C Library (glibc). To install this software on Red Hat Enterprise Linux (RHEL) based systems use the following commands:
The command above should generate output very similar to the following:
Loaded plugins: langpacks
Resolving Dependencies
--> Running transaction check
---> Package glibc.i686 0:2.17-78.0.1.el7 will be installed
--> Processing Dependency: libfreebl3.so for package: glibc-2.17-78.0.1.el7.i686
--> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.17-78.0.1.el7.i686
--> Running transaction check
---> Package nss-softokn-freebl.i686 0:3.16.2.3-9.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
glibc i686 2.17-78.0.1.el7 ol7_latest 4.2 M
Installing for dependencies:
nss-softokn-freebl i686 3.16.2.3-9.el7 ol7_latest 186 k
Transaction Summary
================================================================================
Install 1 Package (+1 Dependent package)
Total download size: 4.3 M
Installed size: 15 M
Is this ok [y/d/N]: y
Downloading packages:
(1/2): nss-softokn-freebl-3.16.2.3-9.el7.i686.rpm | 186 kB 00:04
(2/2): glibc-2.17-78.0.1.el7.i686.rpm | 4.2 MB 00:14
--------------------------------------------------------------------------------
Total 299 kB/s | 4.3 MB 00:14
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : nss-softokn-freebl-3.16.2.3-9.el7.i686 1/2
Installing : glibc-2.17-78.0.1.el7.i686 2/2
Verifying : glibc-2.17-78.0.1.el7.i686 1/2
Verifying : nss-softokn-freebl-3.16.2.3-9.el7.i686 2/2
Installed:
glibc.i686 0:2.17-78.0.1.el7
Dependency Installed:
nss-softokn-freebl.i686 0:3.16.2.3-9.el7
Complete!
|
Installing the Sentinel HASP Runtime
To install the Sentinal HASP runtime, use the following commands:
# yum localinstall aksusbd-2.2.1-1.x86_64.rpm
|
The installation process should generate output similar to the following:
Loaded plugins: langpacks
Examining aksusbd-2.2.1-1.x86_64.rpm: aksusbd-2.2.1-1.x86_64
Marking aksusbd-2.2.1-1.x86_64.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package aksusbd.x86_64 0:2.2.1-1 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
aksusbd x86_64 2.2.1-1 /aksusbd-2.2.1-1.x86_64 4.5 M
Transaction Summary
================================================================================
Install 1 Package
Total size: 4.5 M
Installed size: 4.5 M
Is this ok [y/d/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : aksusbd-2.2.1-1.x86_64 1/1
Starting aksusbd (via systemctl): [ OK ]
Verifying : aksusbd-2.2.1-1.x86_64 1/1
Installed:
aksusbd.x86_64 0:2.2.1-1
Complete!
|
Now that the Sentinel HASP software has been installed and it running correctly, it is possible to continue on to Installing the CHARON-SSP Software.
Post-Installation Tasks
The following post installations task are not required. However, for improved security they are highly recommended.
Securing the Sentinel HASP Configuration Files
The configuration file used by the Sentinel HASP software is insecure and open to malicious, unprivileged access and modification unless the following commands are executed:
# chmod 0700 /etc/hasplm
# chmod 0600 /etc/hasplm/*
|
Securing the Sentinel HASP GUI
The web-based GUI interface is also open to malicious access unless secured appropriately. Use the following steps to secure the software:
| Step | Description |
|---|
| 1. | Open a web browser and navigate the http://localhost:1947. |
| 2. | Click on the left-hand menu item labelled Configuration. |
| 3. | Click the Basic Settings tab. |
| 4. | Under the entry labelled Password Protection, click the button labelled Change Password. |
| 5. | At the Change Password window: - Leave the field labelled Current Admin Password blank (there is no password set by default).
- Enter the intended password into the field labelled New Admin Password.
- Repeat the intended password in the field labelled Re-enter new Admin Password.
- Click the button labelled Submit.
|
| 5. | Back at the Basic Settings tab: - Under the section labelled Password Protection, select the radio button labelled All ACC Pages.
- Click the button labelled Submit to save this change.
|
| 6. | To allow remote access to the Sentinel HASP GUI: - Click the Basic Settings tab.
- Select the Allow Remote Access to ACC check box.
- Click the button labelled Submit.
|
Removing the Sentinel HASP Software
To remove the Sentinel HASP software, execute the following command:
Executing the command above should generate output similar to the following. When asked "Is this ok?" Check the list of software to ensure it only includes the aksusbd package and answer y(es) to proceed.
Loaded plugins: langpacks
Resolving Dependencies
--> Running transaction check
---> Package aksusbd.x86_64 0:2.2.1-1 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
aksusbd x86_64 2.2.1-1 @/aksusbd-2.2.1-1.x86_64 4.5 M
Transaction Summary
================================================================================
Remove 1 Package
Installed size: 4.5 M
Is this ok [y/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Stopping aksusbd (via systemctl): [ OK ]
Erasing : aksusbd-2.2.1-1.x86_64 1/1
Verifying : aksusbd-2.2.1-1.x86_64 1/1
Removed:
aksusbd.x86_64 0:2.2.1-1
Complete!
|
