Page 3 - Table Of Contents
EncrypTight Manager Installation Guide 3 Table Of Contents About This Document ...................................................................................................5EncrypTight Manager 3.3 Installation Options ..............................................................7Virtual Machi...
Page 5 - Preface; About This Document
EncrypTight Manager Installation Guide 5 Preface About This Document Purpose The EncrypTight Manager Installation Guide provides detailed information on how to install and configure EncrypTight Manager software. Intended Audience This document is intended for network managers and security administra...
Page 6 - Contacting Customer Support
Preface 6 EncrypTight Manager Installation Guide Black Box Corporation1000 Park DriveLawrence, PA 15055-1018email: [email protected] Contacting Customer Support Technical support services are accessible through the Black Box support center. FREE technical support 24 hours a day, 7 days a week: Call ...
Page 7 - EncrypTight Manager 3.3 Installation Options
EncrypTight Manager 3.3 Installation Options EncrypTight Manager Installation Guide 7 EncrypTight Manager 3.3 Installation Options • Virtual Machines • EncrypTight-Manager-3.3-standalone • EncrypTight-Manager-3.3 • single server • cluster high availability • single server disaster recovery • Hardwar...
Page 8 - Hardware Options; Installation Options
8 EncrypTight Manager Installation Guide EncrypTight-Manager-3.3 • Available in 32 and 64 bit architectures • Expects to be run in an environment where the VM has at least 2GB of RAM and 40GB of disk • This virtual machine is setup so that when it first boots it will initialize the operating system ...
Page 9 - Firewall Information; Installation Examples; Single Server Install
Firewall Information EncrypTight Manager Installation Guide 9 Firewall Information Servers in cluster must have the following ports available: TCP 21TCP 2221TCP 22TCP 80TCP 8080TCP 443TCP 8443TCP 8764TCP 5432TCP 47788TCP 47799UDP 45588UDP 46688UDP 45599UDP 46699 NOTE These ports are made available b...
Page 10 - Configuring Networking Parameters
10 EncrypTight Manager Installation Guide Figure 1 EncrypTight Manager Console view Configuring Networking Parameters Once the machine is running, you can configure networking parameters. This includes assigning a static IP address, netmask, and gateway address. To configure an IP address and netmas...
Page 11 - Running the Installation Script; System Requirements; Virtual Machine Cluster Install
Installation Examples EncrypTight Manager Installation Guide 11 4 Type 1 and press Enter to exit the menu. Note that you can use the same menu to assign a hostname, specify a DNS server, set up a proxy server, or view the current networking configuration. Running the Installation Script Once the vir...
Page 12 - Hardware
12 EncrypTight Manager Installation Guide • Modify the /opt/scripts/policyserver-init.conf and set the following. Emacs, nano, and vi are available on the OS. ############################################################################################# Cluster options########## for a clustered insta...
Page 14 - Disaster Recovery Option; Run the installation scripts:
14 EncrypTight Manager Installation Guide Disaster Recovery Option If this cluster is going to have a disaster recovery site assigned to it then you need to modify the following section of the /opt/scripts/policyserver-init.conf: ######################################################################...
Page 15 - Disaster Recovery Install; Using Single Server For Main Site
Installation Examples EncrypTight Manager Installation Guide 15 Ordering of actions is important. You should install in the following steps: 1 Power on both servers2 Assign IP to server #13 Assign IP to server #24 Make sure that server #1 can see server #2 on the network5 Run /etc/init.d/policyserve...
Page 16 - Testing Disaster Recovery
16 EncrypTight Manager Installation Guide ## comma separated list of hosts to check# heartbeatHosts=################################################################################# Run the installation script on the Main site: /etc/init.d/policyserver-install Disaster Recovery Site • Assign an IP t...
Page 17 - EncrypTight Manager Upgrade of an Existing; Upgrade Non-Cluster Instance of ETM
EncrypTight Manager Upgrade of an Existing ETM Instance EncrypTight Manager Installation Guide 17 > /etc/init.d/policyserver stop Once that is down you can see that the disaster recovery picks up rekeys by viewing the DR logs on the DR Machine: > tail -f /opt/jboss/server/policyserver/log/serv...
Page 21 - Upgrade ETM Cluster Instances
EncrypTight Manager Upgrade of an Existing ETM Instance EncrypTight Manager Installation Guide 21 Upgrading the policyserver-init.confUpgrading the database schema sqlUpgrading the system scripts ####################################################################### Upgrade process complete. Applic...
Page 22 - Node Shut Down; Execute the upgrade on EACH Server in the Cluster in ORDER
22 EncrypTight Manager Installation Guide gpg: Signature made Mon 12 Dec 2011 03:19:38 PM EST using DSA key ID 9B705669 gpg: Good signature from "Black Box (Policy Server) <[email protected]>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indicat...
Page 24 - Start up EACH Server in the Cluster in ORDER
24 EncrypTight Manager Installation Guide scp_host not set, not scp-ing /opt/upgradebackup/db-backup-2012-02-15-18-54-v.sq l.gz backup anywherekeeping backup 1: /opt/upgradebackup/db-backup-2012-02-15-18-54-v.sql.gzFinished db-backup done.Backing up the server dirs: /opt/ftpserverdir /opt/filestore ...
Page 25 - Backing out of an upgrade; Backup and Restore of EncrypTight Manager; General Guidelines
Backup and Restore of EncrypTight Manager EncrypTight Manager Installation Guide 25 [root@PIT-ETM-N1 upgrade]# /etc/init.d/policyserver start Server is starting, check the log files for application status 2 Start the policyserver on EncrypTight Manager Cluster Node 2 YOU MUST wait for the startup to...
Page 26 - Backup components provided by ETM; Drive failures
26 EncrypTight Manager Installation Guide Backup components provided by ETM EncrypTight Manager provides mechanisms for backing up its database, and also for backing up the ETM software. Customers who do not do full server backups regularly can use those tools to ensure that they can recover as clos...
Page 27 - Other hardware component failures; Procedure 1. Backing up the entire filesystem
Backup and Restore of EncrypTight Manager EncrypTight Manager Installation Guide 27 Other hardware component failures If some component other than a drive has failed, that component could be replaced in the field, or the server could be RMA'd back to Black Box. Damage to the ETM software or database...
Page 28 - Procedure 2. Restoring the complete filesystem, including the OS; Procedure 3. Backing up the ETM software and data
28 EncrypTight Manager Installation Guide tar cvpzf backup.tgz --exclude=/proc --exclude=/lost+found --exclude=/backup.tgz --exclude=/mnt --exclude=/sys / Please familiarize yourself with the tar command and its arguments. The man pages are included in the ETM distro.As noted above, the dd operation...
Page 29 - Procedure 4. Restoring the ETM software and data
Backup and Restore of EncrypTight Manager EncrypTight Manager Installation Guide 29 • Backup Server scp User • Backup Server scp Password Also note that the ETM root dir is /opt/jboss/server/policyserver, and that the /opt/scripts directory is a symlink to /opt/jboss/server/policyserver/scripts, so ...
Page 30 - Restoring to factory defaults; VM Server specifics
30 EncrypTight Manager Installation Guide If you changed the database userid or password, you will have to supply those options as well. [root@policyserver log]# /opt/scripts/db-import.sh --helpdb-import.sh --help --dbUser=dbUser --dbPass=dbPassword --dbType=dbType --importFile=importFile --disaster...
Page 31 - Appendices; Hardware Disaster Recovery Cluster Install
Appendices EncrypTight Manager Installation Guide 31 Appendices Hardware Disaster Recovery Cluster Install If you are going to have the disaster recovery cluster on node1 = 192.168.80.3 and node2 = 192.168.80.4 then you would run like this on both installs: • Modify the /opt/scripts/policyserver-ini...
Page 33 - Preparation for DR listening
Appendices EncrypTight Manager Installation Guide 33 UDP 45599UDP 46699 Ordering of actions is important. You should install in the following steps: 1 Power on both servers2 Assign IP to server #13 Assign IP to server #24 Make sure that server #1 can see server #2 on the network5 Run /etc/init.d/pol...
Page 34 - EncrypTight Manager OVA Deployment Using vSphere; Installing the CSM OVA
34 EncrypTight Manager Installation Guide EncrypTight Manager OVA Deployment Using vSphere Client Applications You need to install vSphere Client onto your workstation. The vSphere Client software is only available for Windows platforms. Open up the VMware vSphere Client software. You will see the l...
Page 44 - Setup Networking
44 EncrypTight Manager Installation Guide Figure 12 Main Screen Setup Networking Once you are on the main blue screen of the virtual machine appliance you can click your mouse inside of it. The virtual machine now has control of your mouse. You will have to type "Ctrl+Alt" to release the mou...
Page 48 - About Black Box; BLACK BOX; Tech support the
724-746-5500 | blackbox.com About Black Box Black Box Network Services is your source for an extensive range of networking and infrastructure products. You’ll find everything from cabinets and racks and power and surge protection products to media converters and Ethernet switches all supported by fr...
