Installation and Registration on Linux

Log on to the host where you will install the CTE Agent as root. You cannot install the CTE Agent without root access.

Copy or mount the installation file to the host system. If necessary, make the file executable with the chmod command.

Install the CTE Agent. A typical installation uses the following syntax:

./vee-fs-<release>-<build>-<system>.bin

For example:

./vee-fs-7.3.0-135-rh8-x86_64.bin

To install the CTE Agent in a custom directory, use the -d <custom-dir> option. For example:

./vee-fs-7.3.0-135-rh8-x86_64.bin -d /home/my-cte-dir/

Note

If possible, Thales recommends that you use the default directory /opt/vormetric.

To view all installer options, use the -h parameter. For example:

./vee-fs-7.3.0-135-rh8-x86_64.bin -h

The Thales License Agreement displays. When prompted, type Y and press Enter to accept.

The install script installs the CTE Agent software in either /opt/vormetric or your custom installation directory and then prompts you about registering the CTE Agent with a key manager.

Agent Type: CipherTrust Transparent Encryption File System Agent
Agent Version: <Release.build-number>

In order to register with a CipherTrust Manager you need a valid registration token from the CM.

Do you want to continue with agent registration? (Y/N) [Y]:

Type N and press Enter to end the installation procedure without registering the CTE Agent with a key manager.

Enter Y to continue with the registration process. The install script prompts you to enter the host name or IP address of the CipherTrust Manager with which you want to register CTE. For example:

Do you want to continue with agent registration? (Y/N) [Y]: Y

Please enter the primary key manager host name: 10.3.200.141

You entered the host name 10.3.200.141

Is this host name correct? (Y/N) [Y]: Y

Do you want to continue with agent registration? (Y/N) [Y]: Y

Enter the primary key manager host name of the service:

You entered the host name us1.ciphertrust.dpondemand.io

Is this host name correct? (Y/N) [Y]: Y

Note

The default communication port is 443. If you want to specify a different communication port, enter it with the primary key manager host name in the format: <hostName>:<port#>

Enter the client host name when prompted.

Please enter the host name of this machine, or select from the following list.

[1] sys31186.qa.com
[2] 10.3.31.186

Enter a number, or type a different host name or IP address in manually:
What is the name of this machine? [1]: 2
You selected "10.3.31.186".

Enter the CipherTrust Manager registration token, profile name, host group and host description. If you omit the profile name, CipherTrust Manager associates the default client profile with this client.

Please enter the registration token: 12345
Please enter the profile name for this host: My-Profile
Please enter the host group name for this host, if any:
Please enter a description for this host: RHEL7 system West Coast Datacenter

Token            : 12345
Profile name     : My-Profile
Host Group       : (none)
Host description : RHEL7 system West Coast Datacenter
Are the above values correct?  (Y/N) [Y]: Y

At the hardware association prompt, select whether you want to enable the hardware association feature to prevent cloning. The default is Y (enabled):

At the LDT prompt, specify that you want this client to use CTE-LDT by typing Y and pressing Enter:

Do you want this host to have LDT support enabled on the server? (Y/N) [N]: Y

If you are planning to create GuardPoints on NFS shares, enter the name of the LDT Communication Group that this node will join.

Enter the LDT Communication Group name: LCG1

Warning

The registration token, profile name, client group name and LDT Communication Group name are case-sensitive. If any of these are entered incorrectly, the client registration will not succeed. If the registration fails, click Back in the installer and verify that the case is correct for all entries on this page.

At the Cloud Object Storage (COS) prompt, specify whether you want this client to use CTE COS.

Do you want to configure this host for Cloud Object Storage? (Y/N) [N]:

CTE finishes the installation and registration process.

Generating key pair for the kernel component...done.
Extracting SECFS key
Generating EC certificate signing request for the vmd...done.
Signing certificate...done.
Enrolling agent with service on 10.3.200.141...done.
Successfully registered the CipherTrust Transparent Encryption CTE Agent with the CipherTrust Manager on 10.3.200.141.

Installation success.

In CipherTrust Manager, change the client password using the manual password creation method. This password allows users to access encrypted data if the client is ever disconnected from the CipherTrust Manager. For details on changing the password, see the CipherTrust Manager documentation.