Hardware and Software Requirements
To ensure a successful installation of the latest version of CCC, please make sure that your system meets the following hardware and software requirements:
Hardware Requirements
| Component | Minimum Requirements |
|---|---|
| RAM | 8 GB |
| Free disk space | 50 GB Database space requirements depend on the number of HSM devices that CCC is monitoring. Each device can accumulate up to 850 MB of data over a three-month period. If you are using the Monitoring feature, you would need an additional 20 MB on each partition over a 90-day period. |
Operating System
| OS | Supported Versions |
|---|---|
| Linux | The compatibility of the CCC application with different Linux distributions is contingent upon the specific containerization mechanism being utilized (Podman, Kubernetes, or Helm). Both Podman and Kubernetes have some specific requirements regarding the version of the Linux kernel and other dependencies. Therefore, it is recommended to consult the official Podman documentation or the official Kubernetes documentation to ensure that all requirements are met and to identify any potential compatibility issues. |
Container Management Tools
| Tool | Supported Versions |
|---|---|
| Podman | 4.1.1 and above |
| Podman-Compose | 1.0.3 and above |
| Kubernetes | 1.26.0 and above |
| Helm | 3.11.1. and above |
Root of Trust HSM
| HSM | Supported Versions |
|---|---|
| Luna Network HSM | Appliance software 6.2.2 with firmware 6.24.9, 6.24.3, or 6.24.7 (recommended for FIPS compliance) |
Managed Devices
| Parameter | Requirements |
|---|---|
| Appliance Software | 6.2.2, 6.3 Devices require REST API. FM-enabled refers to devices that either have HSM policy 50 enabled at present, or had HSM policy 50 enabled in the past. FM-disabled refers to devices that neither have HSM policy 50 enabled at present, nor had HSM policy 50 enabled in the past. |
| REST API for 6.x and 7.0 devices | 7.1.0 - 7.1.0-380 REST API 7.0 is required for PUM and Apply/Support catalog features. |
| REST API for 7.1 and above devices | REST API is pre-installed on 7.1 and above devices and requires configuration |
| Firmware | 6.24.7 or higher for 6.x devices |
| Backup | Cloning or key export |
| Authentication | PED-authenticated or password authenticated. PED-authenticated devices must support remote PED |
Luna HSM Client
Installing Luna HSM client is optional. It is needed only if you want to utilize the CCC client for deploying a service. The recommended version of Luna HSM client is 10.5. Other supported versions include 10.4, 10.3, 10.2, 10.1, 7.4, 7.3, 7.2, and 7.1.
Avoid installing Luna HSM client on the system where CCC is already installed. Installing Luna Client software in the same location or system where CCC is already installed may lead to compatibility issues and system instability. To ensure optimal performance and prevent potential conflicts, it is recommended to install each software on separate systems.
Ports
Below is a list of essential ports for CCC deployment, each serving a specific purpose. It is crucial that these ports are accessible, ideally opened by default, to ensure seamless operation and connectivity within the CCC environment.
| Port | Protocol | Feature | Configurable | Session Initiated |
|---|---|---|---|---|
| 22 | TCP | Secure Shell (SSH) | Yes | Outbound |
| 1792 | TCP | NTLS (Network Trust Link Service) | No | Outbound |
| 5656 | TCP | Secure Trusted Channel (STC) | No | Outbound |
| 8443 | TCP | REST API Webserver | Yes | Outbound |
| 5432 | TCP | Postgres Server | Yes | Inbound |
| 8181 | TCP | CCC Webserver | Yes | Inbound |
Requirements for CCC Features
| Feature | Monitoring License | Minimum SA Version | Minimum SA Firmware | Lunaclient |
|---|---|---|---|---|
| Service Provisioning | No | 6.x | 6.10.9 | 7.x |
| Security Officer Per Partition (PPSO) | No | 6.x | 6.10.9 | 7.x |
| Secure Trusted Channel (STC) | No | 6.2.1 | 6.10.9 | 7.x |
| Device & Service Reports | No | 6.x | - | 7.x |
| Import Services | No | 6.x | - | 7.x |
| Device Monitoring, Dashboard, Notifications | Yes | 6.x | 6.10.9 | 7.x |
| Device Monitoring (Full) | Yes | 7.3 | 7.3.0 | 7.x |
| Device Logs | Yes | 6.x | - | 7.x |
| Key Export | No | 6.x | 6.10.9 | 7.1 and above |
| Active Directory Support | No | - | - | - |
| Apply SW Package | No | 7.3 | - | 7.x |
| Update Firmware | No | 7.3 | - | 7.x |
| Migrate Service | No | 6.2.2 | 6.24.3 | 7.2 or above |
Supported Browsers
CCC supports the following web browsers:
-
Microsoft Edge
-
Google Chrome
-
Mozilla Firefox
