Installation Prerequisites

This section lists the tasks you must complete, and the information you must obtain, before installing CTE.

Recommendations and Considerations

• Thales recommends that you install CTE in the default location.

• Make the installation root directory /opt a real directory. If /opt is a symlink, you must use the -d option to specify the installation directory, which must be a real directory.

  For example:

  ./vee-fs-7.7.0-87-aix71.bin -d /home/hello/

  Copy

• Ensure read/write permission is granted to other users accessing your shared resource.

• P8 Hardware Encryption is supported, but there is a required fix from IBM. If the required fix is not found, the installation defaults to Software Encryption for P8.

  • AIX 7.1 requires TL level 7100-04-04 or later.

  • AIX 7.2 requires TL level 7200-01-02 or later.

Network Setup Requirements

• The IP addresses, routing configurations, and DNS addresses must allow connectivity of the AIX system on which you plan to install CTE to the CipherTrust Manager. After the AIX system is registered as a client with the CipherTrust Manager, the client must be able to poll the CipherTrust Manager in case there are any changes to the encryption keys, policies, or GuardPoints.

• It must also allow for connectivity of the CipherTrust Manager to all clients where you install CTE.

• If the system is a virtual machine, the VM must be deployed and running.

Communication with CipherTrust Manager

The default port for http communication between CipherTrust Manager and the CTE Agent is 443. If this port is already in use, you can set the port to a different number during the CTE Agent installation.