Privileged Identity Manager (PIM) install_base sample installation on linux X64

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

This is to demonstrate how to install Privileged Identity Manager (PIM) "install_base" package under SSH session login as username "root" on linux X64.

Environment

Release: ACP1M005900-12.8-Privileged Identity Manager
Component:

Resolution

Here the steps:

1)To download the "install_base"installation package under "tmp" folder on the linux X64 machine: 
   For instance "RO78593 TITLE:  LINUX 64 BIT CM 12.8 SP1 ENDPOINT GA" at our link:
   https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO78593
   and here the result:
   # ls
   RO78593.tar.Z
   #

2)To "gunzip" and "untar" the package as follow:
  # gunzip RO78593.tar.Z
  # ls
  RO78593.tar
  # tar xvf RO78593.tar
  ./
  ./CA ControlMinder_12.8 SP1_README.HTML
  ./install_base
  ./pre.tar
  ./uninstall_AC
  ./_LINUX_X64_128.tar.Z
 
3)To make the file "install_base" executable: 
   # chmod +x install_base
 
4)To install the Privileged Identity Manager (PIM) package:
  # ./install_base
  Please refer to the file /tmp/pre_install/eACLicenseAgreementUNIX_english_cp1252.txt
  for the license agreements governing the use of CA ControlMinder
  and if you agree to the terms and conditions, enter the
  command required to proceed with this installation.
  The command is located within the license file provided
  Command:
  proceed

  Enter the path for installing CA ControlMinder
  [/opt/CA/AccessControl]:
    Target Directory            : /opt/CA/AccessControl
    Source installation file(s) : /tmp/./_LINUX_X64_128.tar.Z
  Group owner of files        : 0
  Interactive setup           : yes
  Saving install messages to  : /opt/CA/AccessControl/AccessControl_install.log

  Installing the following CA ControlMinder package(s):

    - Client package
    - Server package
  For installation options, please use 'install_base -h'.
  Select 'Y' to install, 'N' to exit the script:Y

  ...

  Interactive setup procedure done.
  The license will be installed in /opt/CA/SharedComponents.
  successfully installed CAWIN
  Setting permissions of bin/sepmd bin/sepmdadm lbin/sepmdd lbin/secrepsw bin/selogrcd.
  Setting permissions of /opt/CA/AccessControl/man/man8/ files.
  CA ControlMinder installed new configuration files for seosd.
  The files are located in /opt/CA/AccessControl/etc.
  You will also find in that directory files you had from
  a previous CA ControlMinder installation.
  Verify the new created files
  Installation complete.
  Check seos.ini file for the right configuration.
  The installation process messages are logged in /opt/CA/AccessControl/AccessControl_install.log.
  Setting the owner, group and permissions of CA ControlMinder files.
  Setting the setuid bit on the following binaries:
  selock selockcom selogo segracex sepass sesudo secompas issec

  Legal Notice: CA ControlMinder 128 may use JBoss Application Server v.4.2.3
  and JBoss Native v.2.0.6, which are licensed under the Lesser General Public License (LGPL).
  Copies of JBoss Application Server v.4.2.3, JBoss Native v.2.0.6 and the LGPL are provided
  by a separate installation. Use of JBoss Application Server v.4.2.3 and
  JBoss Native v.2.0.6 is subject to the terms of the LGPL as set forth in such installation.

  Please refer to the log file for more information
  #
     
 
5)To check Privileged Identity Manager (PIM) installed package:
  # /opt/CA/AccessControl/bin/issec
  CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
  VeRsIoN: 12.81-0 (1912) Compiled On:Feb  5 2015 23:21:51  i86PC
  CA ControlMinder kernel extension is not loaded.
  CA ControlMinder daemons are not running.
  CA ControlMinder security daemon is not running.
  CA ControlMinder watchdog daemon is not running.
  CA ControlMinder agent daemon is not running.
  CA ControlMinder serevu daemon is not running.
  CA ControlMinder selogrd daemon is not running.
  CA ControlMinder selogrcd daemon is not running.
  CA ControlMinder eacws daemon is not running.
  CA ControlMinder ReportAgent daemon is not running.
  CA ControlMinder AgentManager daemon is not running.
  CA ControlMinder policyfetcher daemon is not running.
  CA ControlMinder KBLAudMgr daemon is not running.
  CA ControlMinder auxiliary daemon is not running.

6)To start Privileged Identity Manager (PIM):
  # /opt/CA/AccessControl/bin/seload
  CA ControlMinder seload v12.81.0.1912 - Loader Utility
  Copyright (c) 2013 CA. All rights reserved.
  SEOS_load: Executing un/load exit file,  /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -pre
  SEOS_load: Executing un/load exit file,  /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -post
  The token SEOS_syscall.LINUX_SeOS_Syscall_number, now set to '300'.
  07 Jul 2015 16:54:16> WAKE_UP : Server going up
  07 Jul 2015 16:54:16> INFO    : Filter mask: 'WATCHDOG*' is registered
  07 Jul 2015 16:54:16> INFO    : Filter mask: 'INFO    : Setting PV*' is registered
  07 Jul 2015 16:54:16> INFO    : Filter mask: 'INFO    : DB*' is registered
  07 Jul 2015 16:54:16> INFO    : Filter mask: '*seosd.trace*' is registered
  07 Jul 2015 16:54:16> INFO    : Filter mask: '*FILE*secons*(*/log/*)*' is registered
  Starting seosd. PID = 23370.
  Checking database ...
  Starting seagent. PID = 23377
  seagent: Loading database image...
  Starting seoswd. PID = 23384
  seagent: Initialization phase completed