Sei sulla pagina 1di 82

VERITAS Infrastructure Core Services 1.2.

3
Installation Guide
UNIX

August 2005

Disclaimer The information contained in this publication is subject to change without notice. VERITAS Software Corporation makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. VERITAS Software Corporation shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual. VERITAS Legal Notice Copyright 2005 VERITAS Software Corporation. All rights reserved. VERITAS, the VERITAS Logo, and all other VERITAS product names and slogans are trademarks or registered trademarks of VERITAS Software Corporation. VERITAS and the VERITAS logo, Reg. U.S. Pat. & Tm. Off. Other product names and/or slogans mentioned herein may be trademarks or registered trademarks of their respective companies. VERITAS Software Corporation 350 Ellis Street Mountain View, CA 94043 USA Phone 6505278000 Fax 6505272908 www.veritas.com Third-Party Copyrights
Certain third-party software may be distributed, embedded, or bundled with this VERITAS product or recommended for use in connection with its installation and use. Such third-party software is separately licensed by its copyright holder. For complete third party licensing information for the product or products represented in this publication, see the Third-Party License Agreement appendix of the Release Notes.

ii

Installation Guide

Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Whats In This Manual? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Getting Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Accessing the VERITAS Support Web Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Subscribing to VERITAS E-mail Notification Service . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Accessing VERITAS Telephone and Fax Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Contacting VERITAS Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Typographical Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Comment on the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Chapter 1. Overview of ICS Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 The VERITAS ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 The ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 ICS Dependencies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 ICS Native Install Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 The ICS Installation CD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Installing ICS on a Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Summary of the Installation Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Chapter 2. Gathering the Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . 11 Security Credentials . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 VxPBX Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 VxAT Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
i

VxSMF Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 VxAZ Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Chapter 3. Installing the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Locating the installics Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Installing ICS with the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Installing the VxPBX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Installing the VxAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Installing the VxSMF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Installing the VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Converting man Page Files on AIX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Chapter 4. Upgrading Existing Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Locating the installics Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Upgrading the VxPBX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Upgrading the VxAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Upgrading the VxSMF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Upgrading the VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Chapter 5. Installing and Removing an ICS Language Pack . . . . . . . . . . . . . . . . . . 39 Installing an ICS Language Pack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Removing an ICS Language Pack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Chapter 6. Uninstalling the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Uninstalling ICS Using the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Preparing to Uninstall ICS Using the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Removing all of the ICS at Once . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Removing the Services Individually . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Removing VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Removing VxSMF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Removing VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

ii

Installation Guide

Removing VxPBX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Uninstalling ICS Using the Native Package Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Appendix A. ICS Configuration Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Appendix B. Using the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Starting the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Using the ICS Installer Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Viewing the ICS Installer Installation Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Appendix C. ICS Native Package Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Appendix D. Starting and Stopping the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Stopping the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Starting the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Appendix E. ICS Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Verifying Your VxPBX Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Verifying Your VxSMF Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Appendix F. Third-Party License Agreements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Glossary of Terms and Acronyms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Contents

iii

iv

Installation Guide

Preface
This guide describes how to install the VERITAS Infrastructure Core Services (ICS) on UNIX platforms using the VERITAS ICS Installer. When you install a VERITAS software product, you may be instructed to install one or more VERITAS ICS first. This guide provides step-by-step instructions for installing these services using the ICS Installer.

Whats In This Manual?


This guide covers the following topics:

Overview of ICS Installation on page 5 Gathering the Configuration Information on page 11 Installing the ICS on page 17 Upgrading Existing Services on page 33 Installing and Removing an ICS Language Pack on page 39 Uninstalling the ICS on page 41

Additional information is provided in the following appendices:


Appendix A, ICS Configuration Worksheet on page 49 Appendix B, Using the ICS Installer on page 53 Appendix C, ICS Native Package Structure on page 57 Appendix D, Starting and Stopping the ICS on page 61 Appendix E, ICS Cluster Configuration on page 63 Appendix F, Third-Party License Agreements on page 67

Getting Help
VERITAS offers you a variety of support options.

Conventions

Accessing the VERITAS Support Web Site


The VERITAS Support Web site allows you to:

Contact the VERITAS Support staff and post questions to them Get the latest patches, upgrades, and utilities Search the knowledge base for answers to technical support questions Receive automatic notice of product updates

The address for the VERITAS Support Web site is:

http://support.veritas.com

Subscribing to VERITAS E-mail Notification Service


Subscribe to the VERITAS E-mail notification service to be informed of software alerts, newly published documentation, Beta programs, and other services. Go to http://support.veritas.com. Select a product and click E-mail Notifications on the right side of the page. Your customer profile ensures you receive the latest VERITAS technical information pertaining to your specific interests.

Accessing VERITAS Telephone and Fax Support


Telephone support for VERITAS ICS is only available with a valid support contract. To contact VERITAS for technical support, dial the appropriate phone number listed on the Support Guide included in the product box and have your product license information ready for quick navigation to the proper support group. The address for the VERITAS telephone support directory is:

http://support.veritas.com

Contacting VERITAS Licensing


For license information call 1-800-634-4747 option 3, fax 1-650-527-0952, or e-mail amercustomercare@veritas.com.

Conventions
The following conventions apply throughout this guide.

Installation Guide

Conventions

Typographical Conventions
Here are the typographical conventions used throughout this guide:
Conventions Convention GUI Font Description Used to depict graphical user interface (GUI) objects, such as fields, listboxes, menu commands, and so on. For example: Enter your password in the Password field. Used for placeholder text, book titles, new terms, or emphasis. Replace placeholder text with your specific text. For example: Replace filename with the name of your file. Do not use file names that contain spaces. Used to show what commands you need to type, to identify pathnames where files are located, and to distinguish system or application text that is displayed to you or that is part of a code example. Used to show that you must hold down the first key while pressing the second key. For example: Ctrl+S means hold down the Ctrl key while you press S.

Italics

Code

Key+Key

You should use the appropriate conventions for your platform. For example, when specifying a path, use backslashes on Microsoft Windows and slashes on UNIX. Significant differences between the platforms are noted in the text. Tips, notes, and cautions are used to emphasize information. The following samples describe when each is used. Tip Used for nice-to-know information, like a shortcut.

Note Used for important information that you should know, but that shouldnt cause any damage to your data or your system if you choose to ignore it. Caution Used for information that will prevent a problem. Ignore a caution at your own risk.

Preface

Comment on the Documentation

Comment on the Documentation


Let us know what you like and dislike about the documentation. Were you able to find the information you needed quickly? Was the information clearly presented? Report errors and omissions, or tell us what you would find useful in future versions of our manuals. Please include the following information with your comment:

The title and product version of the manual you are commenting on The topic (if relevant) you are commenting on Your comment Your name

E-mail your comment to the following address:

sigsecdoc@veritas.com

Please only use this address to comment on product documentation. See Getting Help on page 1 for how to contact Technical Support about our software. We appreciate your feedback.

Installation Guide

Overview of ICS Installation

This section provides an overview of the ICS installation process on UNIX platforms. It lists the services that can be installed, their dependencies, and the order in which the ICS must be installed.

The VERITAS ICS


The VERITAS ICS and the services they provide are shown in the following table.
Infrastructure Core Services Infrastructure Core Service VERITAS Private Branch Exchange (VxPBX) VERITAS Service Management Framework (VxSMF) VERITAS Authentication Service (VxAT) VERITAS Authorization Service (VxAZ) Service Provided Single-port access through a firewall Service management Security authentication Security authorization

These services provide the infrastructure for VERITAS software products. A VERITAS product may require that one or more ICS be installed prior to installing the product. Please refer to your VERITAS product documentation for information on which ICS you need to install.

The ICS Installer


The ICS Installer is a command-line, menu-driven utility that allows you to install and configure the VERITAS ICS. It utilizes standardized installation scripts and packages to achieve consistency across all products on UNIX platforms. By utilizing standardized installation scripts, the ICS Installer helps ensure that the installation of the ICS on all UNIX platforms has the same look and feel as all other VERITAS software products.

ICS Dependencies

The procedures in this guide show you how to use the ICS Installer to install, configure, and remove the VERITAS ICS. You can find additional information on using the ICS Installer in Appendix B, Using the ICS Installer on page 53.

ICS Dependencies
The following table shows the dependencies that exist among the ICS.
ICS Dependencies ICS VxPBX VxAT VxSMF Dependency None None VxPBX VxATa VxAZb VxAT

a. Required only if you enable security. b. Optional.

This means that before you install an infrastructure core service, you must first install the service or services on which it depends. For example, if you need to install the VxSMF with security enabled, you must first install the VxPBX, then install the VxAT. These dependencies are reflected in the instructions provided in this guide.

ICS Native Install Packages


When you use the ICS Installer, it installs one or more native install packages for each infrastructure core service, as shown in the following table.
Native Install Packages Installed by the ICS Installer Infrastructure Core Service VxPBX Native Package Name VRTSicsco VRTSpbx VxAT VRTSat

Installation Guide

The ICS Installation CD Native Install Packages Installed by the ICS Installer Infrastructure Core Service VxSMF VxAZ Native Package Name VRTSsmf VRTSaz

Appendix C, ICS Native Package Structure on page 57, shows the structure of each of these packages.

The ICS Installation CD


The ICS installation CD contains all of the files required to install the VERITAS ICS, including the ICS Installer. When you insert the CD into your CD-ROM drive and mount it to your file system, you will find the files and directories shown in the following table.
ICS Installation CD Directory Structure File/Directorya ReleaseNotes.pdf installics docs/ics/* Description The Release Notes for the ICS Installer. The executable file for the ICS Installer The user documentation for the ICS Installer, which includes this document The user documentation for the VxAT and the VxAZ The native install packages for the VERITAS ICS A logical link to the infrastructure_core_services/pkgs directory A logical link to the infrastructure_core_services/pkgs directory A logical link to the infrastructure_core_services/pkgs directory A logical link to the infrastructure_core_services/pkgs directory The Perl 5.8.0 binaries

docs/vss/*

infrastructure_core_services/pkgs/*

authentication/pkgs

authorization/pkgs

private_branch_exchange/pkgs

service_management_framework/pkgs

perl/*

Chapter 1, Overview of ICS Installation

Installing ICS on a Cluster


a. The paths shown are relative to the top-level directory of your CD-ROM drive.

Other files and directories may exist on the CD that are internal to the ICS Installer.

Installing ICS on a Cluster


The ICS support the following cluster platforms:

VERITAS Cluster Server Microsoft Cluster Server Sun Cluster TruCluster

The ICS Installer automatically detects these cluster environments and configures the ICS for clustering for you. Appendix E, ICS Cluster Configuration on page 63, describes how you can view the ICS cluster configuration after installation.

Summary of the Installation Process


The ICS Installer allows you to install all of the ICS from a common command-line interface. From this interface, you can install, configure, and remove selected ICS or all of the services at once. The general procedure for installing all of the ICS at once is as follows: 1. Gather the information you will need to configure the ICS. 2. Install and configure the VxPBX. 3. If you intend to enable security when you install the VxSMF: a. Install and configure the VxAT. b. Set up your security trust and the Authentication Broker client credentials. 4. Install and configure the VxSMF. 5. Install and configure the VxAZ (optional). Note The VxAT is required only if you enable security in the VxSMF. The VxAZ is optional.

Installation Guide

Summary of the Installation Process

The remainder of this guide describes in detail how to perform these steps.

Chapter 1, Overview of ICS Installation

Summary of the Installation Process

10

Installation Guide

Gathering the Configuration Information


As you install the VERITAS ICS, you will be prompted to provide configuration information. You should gather and record the required information before you begin installation. Appendix A, ICS Configuration Worksheet on page 49, provides a worksheet that you can print and use to record your information.

The following sections describe the configuration information you will need to provide.

Security Credentials
If you want to configure the VxSMF to be secure, create a client user name and password to use with the VxSMF for accessing the Authentication Broker.

VxPBX Configuration Information


For the VxPBX, gather the information shown in the following table.
VxPBX Configuration Information Information System name Description/Value The name of the system or systems on which the VxPBX is being installed. Separate each name with a space. Note On multi-NIC UNIX systems, use the host name returned by the uname -n command. List of authorized users If you need to run the VxPBX in secure mode, a list of the authorized users. Note In the secure mode, only authorized users will be allowed to register services with the VxPBX. If you install the VxPBX on a Sun cluster, you will need to provide the DNS for a shared IP address to use for the parallel VxPBX resources.

Shared Address

11

VxAT Configuration Information

VxAT Configuration Information


For the VxAT, gather the information shown in the following table. Note For details on the VxAT configuration information, refer to the Security Services 4.2 Installation Guide in the docs/vss directory of the ICS installation CD.
VxAT Configuration Information Information System name Description/Value The name of the system or systems on which the VxAT will be installed. Separate each with a space. Note On multi-NIC UNIX systems, use the host name returned by the uname -n command. Broker mode The broker mode, which is one of the following: 1. Root Broker only 2. Authentication Broker only 3. Authentication + Root Broker Select the one you want (1, 2, or 3). Install Authentication Broker Server On Sun and HP-UX platforms only, you will be prompted to install the Authentication Broker Server. Answer Y to install both client and server or N to install the client only. Note If you install only the client (N), you cannot install the Root Broker. Passphrase A passphrase that will be used to protect your configuration information. The passphrase must be a minimum of six characters. The administrator password for the Authentication Broker is set to a default value upon installation. We strongly recommend that you change this password immediately after installation for security reasons. You will need to select a password of at least five characters for this purpose.

Broker Administrator Password

12

Installation Guide

VxSMF Configuration Information

If you intend to install the Authentication Broker only (broker mode 2), you will need the additional information shown in the following table.
Additional Information for Installing the Authentication Broker Only Information Host running the Root Broker Description/Value The host name of the machine on which the Root Broker is installed. Note On multi-NIC UNIX systems, use the host name returned by the uname -n command. The port used to communicate with the Root Broker (default is 2821). A user name that the Authentication Broker will use to contact the Root Broker. The password for the user name the Authentication Broker will use to contact the Root Broker. The domain name of the root broker. Note You can use the following command on the machine on which the Root Broker is installed to get the Root Broker domain name: /opt/VRTSat/bin/vssat listpd --pdrtype root Location of the file containing the Root Brokers hash The path on the Authentication Brokers machine to a copy of the hash file used by the Root Broker. This file can be found in the following location on the Root Brokers machine: /opt/VRTSat/bin/root_hash Note You will be instructed to copy the hash file from the Root Broker machine to the above path on the Authentication Brokers machine during installation.

Broker port Authentication Brokers identity Password

Domain name

VxSMF Configuration Information


For the VxSMF, gather the information shown in the following table.
VxSMF Configuration Information Information System name Description/Value The name of the system or systems on which the VxSMF will be installed. Separate each with a space. Note On multi-NIC UNIX systems, use the host name returned by the uname -n command.

Chapter 2, Gathering the Configuration Information

13

VxSMF Configuration Information VxSMF Configuration Information Information Security Passphrase Description/Value Security mode: enter Y if you want to enable security or N if you do not. A passphrase that will be used to protect your configuration information. The passphrase must be a minimum of six characters.

If you intend to enable security, gather the information shown in the following table.
Optional Security Information Information Broker Host Description/Value Name of the host on which the Authentication Broker is installed, which can be the current local host. The client user name that will be created for the VxSMF to use to contact the Authentication Broker. Choose a credential that has root privileges. The fully qualified domain name of the Authentication Broker when it was installed in the format broker@fullyQualifiedMachineName. Note You can use the following command on the machine on which the Authentication Broker is installed to verify the domain name of the Authentication Broker: /opt/VRTSat/bin/vssat listpd --pdrtype ab Domain type Broker port number The domain type. We recommend that you use vx. The broker port number provided when the Authentication Broker was installed. The default port number is 2821. The password you created for the Authentication Broker client user name.

User name

Domain name

Password

If the VxSMF will be installed on a VCS cluster, you will need the information shown in the following table.
Additional Information for Installation in a VCS Cluster Information RootSMF group name ICS group name Description/Value A name for the group in which the RootSMF resource will be placed

A name for the group in which the ICS resource will be placed

14

Installation Guide

VxAZ Configuration Information Additional Information for Installation in a VCS Cluster Information RootSMF resource name ICS resource name Description/Value A name for the RootSMF resource

A name for the ICS resource

VxAZ Configuration Information


For the VxAZ, all you will need is the name of the system on which it is being installed.

Chapter 2, Gathering the Configuration Information

15

VxAZ Configuration Information

16

Installation Guide

Installing the ICS

The following procedures describe how to install the ICS on a machine for the first time using the ICS Installer. Note If you already have one more ICS installed on a machine and need to install an updated version, please see Upgrading Existing Services on page 33. The procedures in this chapter assume that you are installing ICS for the first time and will not work as expected for an upgrade. When installing the ICS, be sure to respect the component dependencies listed in ICS Dependencies on page 6 by installing the components in the following order: VERITAS Private Branch Exchange (VxPBX) VERITAS Authentication Service (VxAT) (required only if you enable security) VERITAS Service Management Framework (VxSMF) VERITAS Authorization Service (VxAZ) (optional)

Locating the installics Script

To locate the installics script: 1. Locate the ICS installation CD. 2. Go to the machine on which you want to install the ICS and log in as root. 3. Open an xterm window. 4. Insert the ICS installation CD into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS installation CD to the local file system.

17

Installing ICS with the ICS Installer

5. In the xterm window, go to the CD-ROM directory in which the installics script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom: cd /cdrom/cdrom You will use the installics script to install the ICS. Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. You are now ready to begin using the installic script.

Installing ICS with the ICS Installer


The ICS Installer allows you to install the ICS from a common command-line interface. You can install all of the ICS at once or each service individually. Appendix B, Using the ICS Installer on page 53, provides general information on using the ICS Installer. The following sections provide specific instructions for using the ICS Installer to install the ICS. Note Option 1 of the installics script Install menu installs all of the ICS at once. Since no VERITAS products currently require all of the ICS, use options 2 through 5 on the Install menu to install only the ICS you need. Please refer to your VERITAS product documentation to determine which of the ICS you need to install. Note The procedures in this section reflect the typical behavior of the ICS Installer. In some situations, the behavior can be slightly different from what is shown.

Installing the VxPBX


Use the following procedure to install VxPBX. This will install the VRTSicsco and VRTSpbx packages on your system.

18

Installation Guide

Installing ICS with the ICS Installer

To install the VxPBX: 1. Gather the configuration information for the VxPBX as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a product. 5. From the product selection menu, select option 2 to install the VxPBX. 6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxPBX. Separate multiple names with a space. Note Because of a known issue with VxPBX, when installing VxPBX on a cluster, you cannot use the push-install feature of installics to perform a remote install from a single node. You must install VxPBX locally by running installics on each node in the cluster. Note If you are installing VxPBX on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. If you are installing VxPBX on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Private Branch Exchange. If you receive this prompt, enter Y if you want to configure the VxPBX to work with the cluster or N if you do not.

Chapter 3, Installing the ICS

19

Installing ICS with the ICS Installer

Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 9. Press Return to continue as needed. 10. When the installation is complete, you will see the following message: VERITAS Private Branch Exchange n.n.n.n installation completed successfully. Press Return after this message is displayed. 11. The installics script may exit at this point, which means the installation is complete. If the installer exits, skip to step 17. Otherwise, continue to step 12. 12. When you receive the following prompt: Are you ready to configure PBX on HostName? [y, n, q] (y) enter Y to configure the VxPBX. 13. Read the information presented, and then press Return. 14. If you are asked if you want to configure VxPBX to work with the cluster, enter Y, and then answer the prompts for cluster information that follow. Note When configured for clustering, an ICS service group will be created on each node in the cluster. 15. When the VxPBX configuration has completed, you will see the following message: VERITAS Private Branch Exchange configured successfully. Press Return after this message is displayed. 16. The ICS Installer will start the VxPBX service. You will see the following message when the service is started: VERITAS Private Branch Exchange was started successfully. Press Return after this message is displayed. The ICS Installer will exit. 17. If you need to run your VxPBX in secure mode, do step a through step d following: a. Enter the following command to enable the secure mode in the VxPBX /opt/VRTSpbx/bin/pbxcfg --enable --securemode

20

Installation Guide

Installing ICS with the ICS Installer

b. Enter the following command to add the first authorized user for your VxPBX: /opt/VRTSpbx/bin/pbxcfg --add --user AuthorizedUserName Note User root is added by default. You do not need to add the root user. c. If you need to add additional authorized users, repeat step b for each additional user. d. Enter the following commands to make these changes take effect: /opt/VRTSpbx/bin/vxpbx_exchanged stop /opt/VRTSpbx/bin/vxpbx_exchanged start

Installing the VxAT


Use the following procedure to install VxAT. This will install the VRTSat package on your system. Note The following procedure is a summary of the steps required to install the VxAT. For detailed information, refer to the Security Services 4.2 Installation Guide.

To install the VxAT: 1. Gather the configuration information for the VxAT as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a component. 5. From the product selection menu, select option 3 to install the VxAT.

Chapter 3, Installing the ICS

21

Installing ICS with the ICS Installer

6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxAT. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAT on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. When you are prompted to enter a passphrase, enter the passphrase you chose in step 1. Note No characters will be echoed when you type in your passphrase. Type in your passphrase, and then press Return. 9. When you are prompted to install the AT Server, enter Y if you want to install both the client and server files, or N if you only want to install the client files. 10. Press Return to continue as needed. 11. When the installation is complete, you will see the following message: VERITAS Authentication Service n.n.n.n installation completed successfully. Press Return after this message is displayed. 12. If you installed the client only (you answered N in step 9), the installic script will exit at this point, which completes the installation. For this case, do not proceed any further in this procedure. 13. If you installed the AT Server with the client (you answered Y in step 9), you will receive the following prompt: Are you ready to configure AT on HostName? [y, n, q] (y) Enter Y to configure the VxAT. 14. Read the information presented, and then press Return. 15. When you receive the following prompt:

22

Installation Guide

Installing ICS with the ICS Installer

1) 2) 3)

Root Broker Only. Authentication Broker Only. Authentication + Root Broker.

Enter the mode in which you want to install VRTSat [1-3,q] enter 1 to install the Root Broker only, 2 to install the Authentication Broker only, or 3 to install both. 16. If you chose options 1 or 3 in step 15, proceed to step 17. If you chose option 2, do step a through step h following: a. Before proceeding any further with the ICS configuration, go to the machine on which the Root Broker is installed and enter the following command to create the user credential this Authentication Broker will use to contact the Root Broker: /opt/VRTSat/bin/vssat addprpl --pdrtype root --domain root@machineName.company.com --prplname userName --password userPassword b. Go back to the machine on which you are installing the VxAT, open a second xterm, and then copy the /opt/VRTSat/bin/root_hash file from the machine on which the Root Broker is installed to the /opt/VRTSat/bin directory. Close the xterm when you are done. Note If the Root Broker is installed on a Windows machine, you will find the root_hash file in folder: C:\Program Files\VERITAS\Security\Authentication\bin c. In the xterm in which you are running the installics script, proceed with the ICS configuration: when prompted for the host running the root broker, enter the host name of the machine on which the Root Broker is installed. d. When prompted for the broker port, use the default port 2821 (press Enter). e. When prompted for the Authentication Brokers identity, enter the user name you created for the Authentication Broker in step a. f. When prompted for the password, enter the password for the user you created in step a. Note No characters are echoed as you type the password. When you are finished typing, press Return.

Chapter 3, Installing the ICS

23

Installing ICS with the ICS Installer

g. When prompted for the domain name, enter the fully qualified domain name of the Root Broker. Note To get the domain name of the root broker, on the machine on which the Root Broker is installed, if its UNIX, enter: /opt/VRTSat/bin/vssat listpd --pdrtype root If its Windows, enter: "C:\Program Files\VERITAS\Security\Authentication\bin\vssat" listpd --pdrtype root h. When prompted for the location of the Root Brokers hash file, enter the path to the root_hash file on the Authentication Brokers machine: /opt/VRTSat/bin/root_hash 17. If you are installing VxAT on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Authentication Service. If you receive this prompt, enter Y if you want to configure the VxAT to work with the cluster or N if you do not. If you enter Y, answer the cluster information prompts that follow. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 18. When the configuration is complete, you will see the following message: VERITAS Authentication Service configured successfully. Press Return after this message is displayed. 19. The installics script will start the Authentication Service. You will see the following message when it is started: VERITAS Authentication Service was started successfully. Press Return after this message is displayed. The installics script will exit. 20. Change the default Authentication Broker administrator password as follows: Note We strongly recommend that you change the default password for security reasons.

24

Installation Guide

Installing ICS with the ICS Installer

a. Enter the following command to get the fully qualified Authentication Broker name: /opt/VRTSat/bin/vssat listpd --pdrtype ab | grep "Domain Name" | awk '{print $3}' The Authentication Broker name will be in the form broker@machineName.company.com. b. Enter the following command to change the default password: /opt/VRTSat/bin/vssat resetpasswd --pdrtype ab --domain broker@machineName.company.com --prplname admin --newpasswd NewAdminPassword --repeatednewpasswd NewAdminPassword where broker@machineName.company.com is the fully qualified name of the Authentication Broker you obtained in step a, and NewAdminPassword is the new password. Note The new password must be at least five characters.

Installing the VxSMF


Use the following procedures to install VxSMF. This will install the VRTSsmf package on your system. If you need to enable security when you install the VxSMF, use the following procedure to set up your security trust and Authentication Broker client credentials. Otherwise, proceed to To install the VxSMF: on page 26.

To set up your security trust and client credentials: Note The following steps assume that the Authentication Broker is installed on a different machine from the machine on which you are installing the VxSMF. If you installed the Authentication Broker with the ICS on this machine, use this machines name for machineName. 1. On the machine on which you are installing the VxSMF, enter the following command to set up the security trust with the Authentication Broker: /opt/VRTSat/bin/vssat setuptrust --broker machineName:2821 --securitylevel high where machineName is the name of the machine on which the Authentication Broker is installed. When asked if you want to trust the above machine, enter Y.

Chapter 3, Installing the ICS

25

Installing ICS with the ICS Installer

2. On the machine on which the Authentication Broker is installed, enter the following command to create the client user name that the VxSMF will use to contact the Authentication Broker: /opt/VRTSat/bin/vssat addprpl --pdrtype ab --domain broker@machineName.company.com --prplname userName --password userPassword --credexpiry 0 --prpltype service where userName and userPassword are the user credentials, and broker@machineName.company.com is the fully qualified domain name of the Authentication Broker. Note If the authentication broker is clustered, the domain suffix is the fully qualified cluster name instead of machineName.company.com. 3. On the machine on which you are installing the VxSMF, enter the following command to get the security certificate from the Authentication Broker for the client user name you created in step 2: /opt/VRTSat/bin/vssat authenticate --domain vx:broker@machineName.company.com --prplname userName --password userPassword --broker machineName:2821 where broker@machineName.company.com is the fully qualified domain name of the Authentication Broker and machineName is the name of the Authentication Broker host machine.

To install the VxSMF: 1. Gather the configuration information for the VxAT as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a service. 5. From the product selection menu, select option 4 to install the VxSMF.

26

Installation Guide

Installing ICS with the ICS Installer

6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxSMF. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxSMF on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. When you are prompted to enter a passphrase, enter the passphrase you chose in step 1. Note No characters will be echoed when you type in your passphrase. Type in your passphrase, and then press Return. 9. Press Return to continue as needed. 10. When the installation is complete, you will see the following message: VERITAS Service Management Framework n.n.n.n installation completed successfully. Press Return after this message is displayed. 11. When you receive the following prompt: Are you ready to configure SMF on HostName? [y, n, q] (y) Enter Y to begin configuring the VxSMF. 12. Read the information presented, and then press Return. 13. When prompted to enable security, enter Y if you want to enable security or N if you do not. 14. If you did not enabled security in the VxSMF (you entered N in step 13), skip to step 15. Otherwise, do step a through step f following.

Chapter 3, Installing the ICS

27

Installing ICS with the ICS Installer

a. When prompted for the broker host, enter the name of the machine on which the Authentication Broker is installed. b. When prompted for user name, enter the Authentication Broker client user name you created for the VxSMF in step 2 of To set up your security trust and client credentials: on page 25. c. When prompted for domain name, enter the fully qualified domain name of the Authentication Broker, such as broker@machineName.company.com. Note You can use the vssat command on the machine on which the Authentication Broker is installed to get the Authentication Broker domain name. If its a UNIX machine, enter: /opt/VRTSat/bin/vssat listpd --pdrtype ab If its a Windows machine, enter: "C:\Program Files\VERITAS\Security\Authentication\bin\vssat" listpd --pdrtype ab d. When prompted for domain type, enter vx. e. When prompted for the broker port, leave the default port of 2821 (press Return). f. When prompted for the password, enter the password for the user you specified in step b. Note No characters are echoed as you type in the password. When you have finished typing the password, press Return. 15. If you are installing VxSMF on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Service Management Framework. If you receive this prompt, enter Y if you want to configure the VxSMF to work with the cluster or N if you do not. If you enter Y, answer the cluster information prompts that follow. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 16. When the configuration is complete, you will see the following message: VERITAS Service Management Framework configured successfully. Press Return after this message is displayed.
28 Installation Guide

Installing ICS with the ICS Installer

17. The installics script will start the VxSMF service. Note The ICS Installer may indicate that the Service Management Framework failed to start. This is an inaccurate message and can be ignored. Press Return. The installics script will exit. 18. Enter the following command: /opt/VRTSsmf/bin/vxsmfd start

Installing the VxAZ


Use the following procedure to install VxAZ. This will install the VRTSaz package on your system. Note The following procedure is a summary of the steps required to install the VxAZ For detailed information, refer to the Security Services 4.2 Installation Guide.

To install the VxAZ: 1. Gather the configuration information for the VxAZ as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a service. 5. From the product selection menu, select option 5 to install the VxAZ 6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxAZ. Separate multiple names with a space.

Chapter 3, Installing the ICS

29

Installing ICS with the ICS Installer

Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAZ on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. When prompted to install the Authorization Service, enter Y to install both the client and server files, or N to install only the client files. Note On Solaris, a client-only installation is not available for the VxAZ. Both client and server files are installed regardless of how you respond to this prompt. 9. Press Return to continue as needed. 10. When the installation completes, you will see the following message: VERITAS Authorization Service n.n.n.n installation completed successfully. Press Return after this message is displayed. 11. The installics script may exit at this point, which means the installation is complete. If the installics script exits, do not proceed any further in this procedure. Otherwise, continue to step 12. 12. If you installed the Authorization Server with the client or if you are installing the VxAZ client only on Solaris, when you receive the following prompt: Are you ready to configure AZ on HostName? [y, n, q] (y) Enter Y to configure the VxAZ. 13. Read the information presented, and then press Return. 14. If you are installing VxAZ on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Authorization Service. If you receive this prompt, enter Y if you want to configure the VxAZ to work with the cluster or N if you do not. If you enter Y, answer the cluster information prompts that follow. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment.

30

Installation Guide

Converting man Page Files on AIX

15. When the configuration is complete, you will see the following message: VERITAS Authorization Service configured successfully. Press Return after this message is displayed. 16. The installics script will start the Authorization Service. You will see the following message when it is started: VERITAS Authorization Service was started successfully. Press Return after this message is displayed. The installics script will exit.

Converting man Page Files on AIX


The man pages for the VxPBX and the VxSMF are delivered as nroff files, which means the nroff package must be installed on the host machine to view them. On AIX platforms, the nroff package is optional. If the nroff package is not installed on your AIX platform, you must use the catman command to convert the nroff man page files to the cat format after you have installed the ICS. The man page files are installed in directory /usr/share/man/man1 (Section 1). The man page files and the service with which they are installed are as follows:

VxPBX:

vxlogadmin.1 vxlogcfg.1 vxlogview.1 pbxcfg.1

VxSMF:

vxservice.1 vxsmf.1 vxsmfcfg.1

To convert the man pages to the cat format, use the following command: catman -M /usr/share/man 1 Note This command may take several minutes to run.

Chapter 3, Installing the ICS

31

Converting man Page Files on AIX

This command will convert the nroff man pages in the /usr/share/man/man1 directory to the cat format and place them in the /usr/share/man/cat1 directory. After you have converted the files, use the man command to verify that you can view the man pages properly. Refer to the catman man page for more information on using the catman command.

32

Installation Guide

Upgrading Existing Services

If you have an existing VERITAS Private Branch Exchange (VxPBX), VERITAS Authentication Service (VxAT), or VERITAS Authorization Service (VxAZ) installation, you can use the ICS Installer to upgrade these services. However, you cannot upgrade a VERITAS Service Management Framework (VxSMF) installation at this time. For this service, you must remove the old version, then install the new version. The following procedures describe how to upgrade your existing ICS. Caution If you are upgrading all of your installed ICS, you must install the new components individually as instructed in this chapter. Do not install all of the new ICS at once using Install option 1 of installics. Note The procedures in this section reflect the typical behavior of the ICS Installer. In some situations, the behavior may be slightly different from what is shown.

Locating the installics Script

To locate the installics script: 1. Locate the ICS installation CD. 2. Go to the machine on which you want to upgrade the ICS and log in as root. 3. Open an xterm window. 4. Insert the ICS installation CD into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NSF mount. You must mount the ICS installation CD to the local file system. 5. In the xterm window, go to the CD-ROM directory in which the installics script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom:
33

Upgrading the VxPBX

cd /cdrom/cdrom You will use this script to upgrade your ICS. Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, it will fail. You are now ready to begin upgrading your ICS.

Upgrading the VxPBX


Caution The VxPBX will be unavailable temporarily during the upgrade process, which can impact other services.

To upgrade the VxPBX: 1. Go to the directory in which the installics script is located (see Locating the installics Script on page 33). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 2. Run the installics script. 3. Select option I to install a component. 4. From the product selection menu, select option 2 to install the VxPBX. 5. When prompted for the system name, enter the name of the system or systems on which you are upgrading the VxPBX. Separate multiple names with a space. Note Because of a known issue with VxPBX, when installing VxPBX on a cluster, you cannot use the push-install feature of installics to perform a remote install from a single node. You must install VxPBX locally by running installics on each node in the cluster. Note If you are upgrading VxPBX on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only.

34

Installation Guide

Upgrading the VxAT

Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 7. If you are upgrading VxPBX on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Private Branch Exchange. If you receive this prompt, enter Y if you want to configure the VxPBX to work with the cluster or N if you do not. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 8. Press Return to continue as needed. 9. When the new version is installed, you will see the following message: VERITAS Private Branch Exchange n.n.n.n installation completed successfully. Press Return after this message is displayed.The ICS Installer will restore the previous configuration, and then exit. 10. If you are upgrading VxPBX on a cluster, access your cluster administration console and online the VxPBX resource if its not already online.

Upgrading the VxAT


Note This procedure assumes an upgrade from 4.1 to 4.2. For other upgrade scenarios, you may receive additional prompts not shown in this procedure.

To upgrade the VxAT: 1. Go to the directory in which the installics script is located (see Locating the installics Script on page 33). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error.

Chapter 4, Upgrading Existing Services

35

Upgrading the VxSMF

2. Run the installics script. 3. Select option I to install a component. 4. From the product selection menu, select option 3 to install the VxAT. 5. When prompted for the system name, enter the name of the system or systems on which you are upgrading the VxAT. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAT on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 6. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 7. When prompted to install the AT Server, enter Y if you want to install the AT client and server files, or N if you just want to install the client files. 8. Press Return to continue as needed. 9. When the new version is installed, you will see the following message: VERITAS Authentication Service n.n.n.n installation completed successfully. Press Return. The ICS Installer will restore the previous configuration, and then exit.

Upgrading the VxSMF

To upgrade the VxSMF: 1. Remove the existing version of the VxSMF as described in Removing the Services Individually on page 43. 2. Install the new version of the VxSMF as described in Installing the VxSMF on page 25.

36

Installation Guide

Upgrading the VxAZ

Upgrading the VxAZ


Note This procedure assumes an upgrade from 4.1 to 4.2. For other upgrade scenarios, you may receive additional prompts not shown in this procedure.

To upgrade the VxAZ: 1. Go to the directory in which the installics script is located (see Locating the installics Script on page 33). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 2. Run the installics script. 3. Select option I to install a service. 4. From the product selection menu, select option 5 to install the VxAZ. 5. When prompted for the system name, enter the name of the system or systems on which you are installing the VxAZ. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAZ on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 6. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 7. When prompted to install the Authorization Service, enter Y to install both the client and server files or N to install only the client files. Note On Solaris, a client-only installation is not available for the VxAZ. Both client and server files are installed regardless of how you respond to this prompt. 8. Press Return to continue as needed. 9. When the new version is installed, you will see the following message:

Chapter 4, Upgrading Existing Services

37

Upgrading the VxAZ

VERITAS Authorization Service n.n.n.n installation completed successfully. Press Return after this message is displayed. 10. The ICS Installer will restore the previous VxAZ configuration. Press Return. The ICS Installer will exit.

38

Installation Guide

Installing and Removing an ICS Language Pack


This section describes how to install and remove an ICS language pack.

Installing an ICS Language Pack


Use the following procedure to install an ICS language pack.

To install an ICS language pack: 1. Insert the ICS Language Pack CD for the language you need to install into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS Language Pack CD to the local file system. 2. Open an xterm window and go to the CD-ROM directory in which the install_lp script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom: cd /cdrom/cdrom0/SunOS 3. Run the install_lp script: ./install_lp Note You must run the install_lp script from the directory in which it is located. If you run install_lp from another directory using the absolute or a relative path, it will fail. 4. When prompted for the system name, enter the name of the system or systems on which you are installing the ICS language pack. Separate each name with a space. 5. When the initial system check completes, press Return. 6. When the packages to be installed are displayed, press Return.

39

Removing an ICS Language Pack

Note This will install some or all of the following packages: VRTSxxico, VRTSxxpbx, VRTSatxx, VRTSxxsmf, and VRTSazxx, where xx is the language code (ja or zh). The actual packages installed depends on which of the ICS you have installed. 7. When the installation requirements check completes, press Return. 8. When the package check completes, press Return, then allow the installation to complete. 9. When the installation completes, press Return. The install_lp script will exit.

Removing an ICS Language Pack


Use the following procedure to uninstall an ICS language pack.

To remove an ICS language pack: 1. Insert the ICS Language Pack CD for the language you need to remove into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS Language Pack CD to the local file system. 2. Open an xterm window and go to the CD-ROM directory in which the uninstall_lp script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom: cd /cdrom/cdrom/SunOS 3. Run the uninstall_lp script: ./uninstall_lp 4. When prompted for the system name, enter the name of the system or systems on which you are uninstalling the ICS language pack. Separate each name with a space. 5. When the initial system check completes, press Return. 6. When the uninstall requirements check completes, press Return. 7. When prompted to confirm the uninstallation, enter Y, and allow the uninstall to complete. 8. When the uninstall completes, press Return. The uninstall_lp script will exit.

40

Installation Guide

Uninstalling the ICS


You can uninstall the ICS with the ICS Installer or the native installer on your UNIX platform. This section describes how to uninstall the ICS using both methods.

Uninstalling ICS Using the ICS Installer


The ICS Installer provides the option to remove all of the ICS at once or each service individually. If you choose to remove all of the ICS at once, the ICS Installer will remove the ICS in the proper order. If you choose to remove each service individually, you must be sure to remove them in the proper order. Note To perform the procedures in this section, you will need your ICS installation CD. If you no longer have your ICS Installer installation CD, follow the procedures in Uninstalling ICS Using the Native Package Tools on page 48 instead. Note The procedures in this section reflect the typical behavior of the ICS Installer. In some situations, the behavior may be slightly different from what is shown.

Preparing to Uninstall ICS Using the ICS Installer

To prepare to remove the ICS with the ICS Installer: 1. Insert the ICS installation CD into your CD-ROM drive. 2. Mount the CD-ROM drive to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS installation CD to the local file system. 3. Open an xterm and go to the top-level directory of the ICS installation CD. For example, if your CD-ROM drive is mounted as cdrom:

41

Uninstalling ICS Using the ICS Installer

cd /cdrom/cdrom

Removing all of the ICS at Once


You can use the ICS Installer to remove all of the ICS at once. This will remove the following packages from your system:

VRTSaz (if installed) VRTSsmf VRTSat (if installed) VRTSpbx VRTSicsco

Note Due to a limitation of the ICS Installer, on Tru64, do not use Option 1 of the Uninstall menu to remove the ICS. Remove the components individually using options 2 through 5. instead

To remove all of the ICS at once: 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 1 to uninstall the VERITAS Infrastructure Core Services. 5. When prompted for the system name, enter the name of the system or systems from which the ICS will be uninstalled. Separate multiple names with a space. Note If you are uninstalling the ICS from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command.

42

Installation Guide

Uninstalling ICS Using the ICS Installer

6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the ICS, enter Y. 8. When prompted to continue with the uninstallation, enter Y. 9. If prompted to confirm the removal of all files associated with the product, enter Y. 10. When the ICS have been uninstalled, you will receive the following message: VERITAS Infrastructure Core Services n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.

Removing the Services Individually


When you remove the ICS individually, be sure to remove any dependent services first. The dependencies dictate that the ICS be removed in the following order (assuming all of the ICS are installed): 1. VERITAS Authorization Service (VxAZ) 2. VERITAS Service Management Framework (VxSMF) 3. VERITAS Authentication Service (VxAT) 4. VERITAS Private Branch Exchange (VxPBX) For example, to remove the VxAT, you must first remove the VxAZ and then the VxSMF before you remove VxAT. The following procedures describe how to remove the services individually using the ICS Installer.

Removing VxAZ
Use the following procedure to remove the VxAZ. This will remove the VRTSaz package from your system.

Chapter 6, Uninstalling the ICS

43

Uninstalling ICS Using the ICS Installer

To remove the VxAZ 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 5 to uninstall the VxAZ. 5. When prompted for the system name, enter the name of the system or systems from which the VxAZ will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxAZ from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxAZ, enter Y. 8. When prompted to continue with uninstallation, enter Y, and then allow the uninstall to complete. 9. You will receive the following message when the VxAZ is uninstalled: VERITAS Authorization Service n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.

Removing VxSMF
Use the following procedure to remove the VxSMF. This will remove the VRTSsmf package from your system.

44

Installation Guide

Uninstalling ICS Using the ICS Installer

To remove the VxSMF 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 4 to uninstall the VxSMF. 5. When prompted for the system name, enter the name of the system or systems from which the VxSMF will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxSMF from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxSMF, enter Y, then allow the uninstall to complete. 8. You will receive the following message when the VxSMF is uninstalled: VERITAS Service Management Framework n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.

Removing VxAZ
Use the following procedure to remove the VxAZ. This will remove the VRTSaz package from your system.

Chapter 6, Uninstalling the ICS

45

Uninstalling ICS Using the ICS Installer

To remove the VxAT 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 3 to uninstall the VxAT. 5. When prompted for the system name, enter the name of the system or systems from which the VxAT will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxAT from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxAT, enter Y, then allow the uninstall to complete. 8. You will receive the following message when VxAT is uninstalled: VERITAS Authentication Service n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.

Removing VxPBX
Use the following procedure to remove the VxPBX. This will remove the VRTSicsco and VRTSpbx packages from your system.

46

Installation Guide

Uninstalling ICS Using the ICS Installer

To remove the VxPBX 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 2 to uninstall the VxPBX. 5. When prompted for the system name, enter the name of the system or systems from which the VxPBX will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxPBX from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxPBX, enter Y, and then allow the uninstall to complete. 8. You will receive the following message when the VxPBX is uninstalled: VERITAS Private Branch Exchange n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.

Chapter 6, Uninstalling the ICS

47

Uninstalling ICS Using the Native Package Tools

Uninstalling ICS Using the Native Package Tools


You can use the native package tools on your UNIX platform (such as pkgrm on Solaris) to remove the ICS packages. The ICS package names are shown in the following table.
ICS Packages Package Name VRTSicsco Description Common run-time files used by the ICS. This package is installed by the ICS Installer when you install the VxPBX. The VxPBX package. The VxAT package. The VxSMF package. The VxAZ package.

VRTSpbx VRTSat VRTSsmf VRTSaz

When you remove the ICS packages, be sure to remove any dependent packages first. The dependencies dictate that the ICS packages be removed in the following order (assuming all of the ICS are installed): 1. VRTSaz 2. VRTSsmf 3. VRTSat 4. VRTSpbx 5. VRTSicsco For example, to remove VRTSat, you must first remove VRTSaz, then VRTSsmf. Note If you remove package VRTSicsco using the native package tools, you must also remove package VRTSpbx using the native package tools. If you attempt to remove the VxPBX (VRTSpbx) with the ICS Installer after removing VRTSicsco with the native package tools, the ICS Installer will fail. Refer to your UNIX documentation for information on how to use your native installer to remove a package.

48

Installation Guide

ICS Configuration Worksheet


Fill in the values that apply to your installation Service Security credentials VERITAS Private Branch Exchange Information User name Passworda System name or namesb Value

If running in secure mode: List of authorized users

If installing on a Sun cluster: Shared Address VERITAS Authentication Service System name or namesb.

Broker mode (1, 2, or 3) Install Authentication Broker Server? Passphrasea. If installing the Authentication Broker only (mode 2): Host running the Root Broker Broker port

49

Fill in the values that apply to your installation Service VERITAS Authentication Service (cont.) Information Authentication Brokers identity Passworda. Root Brokers domain name Root Brokers hash file location Broker Administrator Password VERITAS Service Management Framework System name or namesb. Value

Enable security? Passphrasea. If security will be enabled: Authentication Broker host User name Authentication Broker domain name Domain type Broker port number Passworda. If installing on a VCS cluster: RootSMF group name ICS group name RootSMF resource name ICS resource name

VERITAS Authorization Service

System name or namesb.

a. We recommend that you record a reminder in this field or leave it blank. If you record the actual password or passphrase, keep this form a a secure location at all times.

50

Installation Guide

b. Use the name returned by uname -n command. If on a cluster, do not include the virtual cluster name.

Appendix , ICS Configuration Worksheet

51

52

Installation Guide

Using the ICS Installer

The ICS Installer is a menu-driven utility that provides a common command-line interface for installing the VERITAS ICS on UNIX platforms. This appendix provides an overview of how to use the ICS Installer utility.

Starting the ICS Installer


The ICS Installer executable is file installics, which is located in the top-level directory of the ICS installation CD. If your CD-ROM drive is mounted as cdrom, for example, to run the ICS Installer, type: cd /cdrom/cdrom ./installics Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error message. The ICS Installer main menu will appear. The following section describes how to use this menu.

Using the ICS Installer Menus


The ICS Installer main menu consists of a product information display, a menu item list, and a command-line prompt. The name of each product is displayed in the VERITAS Product column. If the product is installed, the product version is displayed in the Version Installed column. If the product is not installed, no is displayed in this column for the product. If the product is licensed, yes is displayed in the Licensed column for the product. Otherwise, N/A is displayed in this column.

53

Using the ICS Installer Menus

The menu list contains a list of the available main menu items. Each item, except Q, accesses the submenu for the item when typed at the Enter a Selection prompt. The items are case-insensitive. The following table describes the menu items.
installics Main Menu Items Menu Item Description ? C D I Displays a brief description of the installics menu options. Configures the product after installation. Displays a brief overview of the selected product. Installs packages and patches for an initial installation or upgrade. The product is also configured during installation, but you have the option to install without configuration. Installs or updates the license key for an infrastructure core service. This option can be used to upgrade from an evaluation license or to license a newly installed product. Performs a pre-installation check to determine if systems meet all installation requirements. No products are installed. Exits installics. Removes the selected product's patches, files, and directories from the system, provided they are not used by another VERITAS product.

Q U

When you select a menu item, a submenu of ICS products is displayed. From the submenu, you select a product on which to perform the action. For example, if you type I at the prompt, the Install/Upgrade a Product submenu is displayed. You would then select a product to install. In each of the submenus, the products are displayed in a numeric list followed by the B option. By entering the number of a product from the list, the action (in this case, install) will be performed on that product. The additional option B will take you back to the main menu, and Q will exit installics. As in the main menu, the B and Q options are case insensitive.

54

Installation Guide

Viewing the ICS Installer Installation Log

Viewing the ICS Installer Installation Log


As the ICS Installer runs, it keeps a log of internal events that occur during the installation process. Normally, you do not need to be concerned with this file. However, if you experience a problem with an installation, you may need to retrieve this file for analysis by the VERITAS Technical Support team. When the installics script exits, it outputs a message indicating the location of the log file. For example: The installics log is saved at: /var/tmp/installics223142418/installics.log The path to the log file follows the general form /var/tmp/installicsnnnnnnnnn/installics.log, where nnnnnnnnn is a unique nine-digit number that associates the file with a specific installics execution. If you experience a problem with the ICS Installer, note the execution number (nnnnnnnnn) of the failed installation, then retrieve the log file for that execution before you contact your VERITAS Technical Support representative. For information on contacting VERITAS Technical Support, see Getting Help on page 1.

Appendix , Using the ICS Installer

55

Viewing the ICS Installer Installation Log

56

Installation Guide

ICS Native Package Structure


The following table shows the structure of the ICS installation package directories on UNIX platforms.
ICS Native Install Package Structure on UNIX Platforms Package VRTSicsco Directory /opt/VRTSicsco/bin /opt/VRTSicsco/lib Content VxUL command-line utilities Common library files, including:

ACE libraries TAO libraries (including pluggable protocol libraries) ICU libraries VxUL libraries.

/opt/VRTSicsco/man

The man pages for the ICS command-line utilities VxUL language pack VxPBX and VxUL configuration files: VxPBX.cfg and icsul.conf respectively File containing the VxPBX build version number Command binary files Library files VxUL log files VxPBX language pack man page for the pbxcfg command

/opt/VRTSicsco/resources VRTSpbx /etc/vx/VxICS/*

/opt/VRTSpbx/build_versi on /opt/VRTSpbx/bin/* /opt/VRTSpbx/lib /opt/VRTSpbx/log /opt/VRTSpbx/resources /opt/VRTSpbx/man /usr/share/man/man1

57

ICS Native Install Package Structure on UNIX Platforms Package Directory /etc/rc[12345].d/S65vxpb x_exchangeda VRTSpbx (cont.) VRTSsmf /etc/rc[06].d/K65vxpbx_e xchangeda. /etc/vx/VxSMF/* /opt/VRTSsmf/bin/* Content Run-level startup script

Run-level shutdown script

VxSMF configuration information Library and command binary files

/opt/VRTSsmf/lib /opt/VRTSsmf/log /opt/VRTSsmf/resources /opt/VRTSsmf/man/man1 /usr/share/man/man1 /etc/rc[12345].d/S75vxsm fda. /etc/rc[06].d/K75vxsmfda. VRTSat /etc/rc2.d/K99vxatda. /etc/rc2.d/S70vxatda. /etc/vx/vss/VRTSat.conf /etc/vx/vss/VRTSat.loc /opt/VRTS/man/man1/vssat .1m /opt/VRTSat/Copyright /opt/VRTSat/bin/*

Library files VxUL log files VxSMF language pack man pages for the vxservice, vxsmf, and vxsmfcfg commands Run-level startup script

Run-level shutdown script VxAT shutdown script

VxAT startup script VxAT configuration file VxAT location file


vssat man page

Copyright notice Command binaries

58

Installation Guide

ICS Native Install Package Structure on UNIX Platforms Package Directory /opt/VRTSat/catalog/* VRTSat (cont.) /opt/VRTSat/lib/* Content Localization resources Library and JAR files

/var/VRTSat/* VRTSaz /opt/VRTS/man/man1/vssaz .1m /opt/VRTSaz/Copyright /opt/VRTSaz/README.txt /opt/VRTSaz/bin/* /opt/VRTSaz/catalog/* /opt/VRTSaz/lib/* /etc/rc2.d/K98vxazda. /etc/rc2.d/S71vxazda. /etc/vx/vss/VRTSaz.conf

Private files vssaz man page

Copyright notice VxAZ Readme file Command binaries Localization resources Library and JAR files VxAZ run-time shutdown script VxAZ run-time startup script VxAZ configuration file

/etc/vx/vss/VRTSaz.loc /var/VRTSaz/*

VxAZ location file Private files

a. Path shown is for Solaris. For all other UNIX platforms, see Appendix D, Starting and Stopping the ICS on page 61.

Appendix , ICS Native Package Structure

59

60

Installation Guide

Starting and Stopping the ICS

The VERITAS ICS can be started and stopped using the ICS startup and shutdown scripts. This appendix describes how to use these scripts to start and stop the ICS.

Stopping the ICS


Shutdown scripts are provided with each infrastructure core service to stop the services. Caution Stopping the VERITAS ICS can adversely affect other VERITAS products. Use extreme care when stopping the ICS, especially the VERITAS Private Branch Exchange. The name and location of these scripts are shown in the following table.
Shutdown Scripts for ICS Component VERITAS Private Branch Exchange VERITAS Service Management Framework VERITAS Authentication Service UNIX Platform All Path to the Shutdown Script /opt/VRTSpbx/bin/vxpbx_exchanged stop

All

/opt/VRTSsmf/bin/vxsmfd stop

SunOS Linux HP-UX AIX Tru64

/etc/rc2.d/K99vxatd stop /etc/rc.d/rc2.d/K99vxatd stop /sbin/rc2.d/K991vxatd stop /etc/rc.d/rc2.d/K99vxatd stop /sbin/rc2.d/K99vxatd stop /opt/VRTSaz/bin/vrtsaz -stop

VERITAS Authorization Service

All

61

To stop the service, run the services shutdown script.

Starting the ICS


Startup scripts are provided with each infrastructure core service to start the services. The name and location of these scripts are shown in the following table.
Startup Scripts for ICS Component VERITAS Private Branch Exchange UNIX Platform All Path to the Startup Script /opt/VRTSpbx/bin/vxpbx_exchanged start

VERITAS Service All Management Framework VERITAS Authentication Service SunOS Linux HP-UX AIX Tru64 VERITAS Authorization Service All

/opt/VRTSsmf/bin/vxsmfd start

/etc/rc2.d/S70vxatd start /etc/rc.d/rc2.d/S70vxatd start /sbin/rc2.d/S700vxatd start /etc/rc.d/rc2.d/S70vxatd start /sbin/rc2.d/S70vxatd start /opt/VRTSaz/bin/vrtsaz

To start a service, run the startup script for the service.

62

Installation Guide

ICS Cluster Configuration


ICS supports the following cluster platforms:

VERITAS Cluster Server (VCS) Microsoft Cluster Server (MSCS) Sun Cluster TruCluster

When you install the ICS, the ICS Installer recognizes the cluster environment and automatically configures the ICS for clustering. This appendix describes how to verify the cluster configuration for the VERITAS Private Branch Exchange (VxPBX) and the VERITAS Service Management Framework (VxSMF). For cluster configuration information for the VERITAS Authentication Service and the VERITAS Authorization Service, refer to the Security Services 4.2 Installation Guide located in the docs/vss directory of the ICS installation CD.

Verifying Your VxPBX Cluster Configuration


The following procedures describe how to verify your VxPBX cluster configuration.

To verify the cluster configuration on VCS: 1. Open the VCS Administration GUI and log into the VxPBX cluster. 2. Verify that the group ics has been created. 3. Select the ics group and verify that the PBX resource has been created. 4. Verify that the PBX resource is online.

63

Verifying Your VxSMF Cluster Configuration

To verify the cluster configuration on MSCS: 1. Open the Cluster Administration GUI. 2. Under Groups, verify that the following groups exist: PBX-ClusterGroup-NodeName1 PBX-ClusterGroup-NodeName2 3. Verify that all groups are online.

To verify the cluster configuration on Sun Cluster: 1. Open your Web browser and go to the Sun Cluster Web GUI. The address will be https://NodeName:3000. 2. Log in as root on one of the nodes on the VxPBX cluster. 3. Verify on the GUI that the vrtspbx_resource and the vrtspbx_sa resources are online.

To verify the cluster configuration on TruCluster: 1. Log in as root on one of the nodes on the VxPBX cluster. 2. Run the caa_stat command. 3. In the output of the caa_stat command, verify that the VRTSpbx_HostName applications (one for each node in the cluster) are online.

Verifying Your VxSMF Cluster Configuration


The following procedures describe how to verify your VxSMF cluster configuration.

To verify the cluster configuration on VCS: 1. Open the VCS Administration GUI and log into the VxSMF cluster. 2. Verify that the group you specified during installation for the RootSMF and ICS resources was created. 3. Select the group and verify that the resources you specified during installation for the RootSMF and ICS resources were created.

64

Installation Guide

Verifying Your VxSMF Cluster Configuration

4. Verify that the RootSMF and ICS resources are online.

To verify the cluster configuration on MSCS: 1. Open the Cluster Administration GUI. 2. Under Groups, verify that the following groups exist: RootSMF-ClusterGroup-NodeName ICS-ClusterGroup-NodeName where NodeName is the name of the nodes in the cluster. 3. Under each of the RootSMF groups in step 2, verify that the RootSMF-NodeName resource was created and is online. 4. Under each of the ICS groups in step 2, verify that the ICS-NodeName resource was created and is online.

To verify the cluster configuration on Sun Cluster: 1. Open your Web browser and go to the Sun Cluster Web GUI. The address will be https://NodeName:3000. 2. Log in as root on one of the nodes on the VxSMF cluster. 3. Verify that the vrtsRootSMF_resource and vrtsICS_resource groups were created. 4. Under the vrtsRootSMF_resource group, verify that the VxRootSMF resource was created and is online. 5. Under the vrtsICS_resource group, verify that the VxICS resource was created and is online.

To verify the cluster configuration on TruCluster: 1. Log in as root on one of the nodes on the VxSMF cluster. 2. Run the caa_stat command. 3. In the output of the caa_stat command, verify that the VxRootSMF_HostName and VxICS_HostName applications (one for each node in the cluster) are online.

Appendix , ICS Cluster Configuration

65

Verifying Your VxSMF Cluster Configuration

66

Installation Guide

Third-Party License Agreements

The VERITAS ICS and the ICS Installer contain the binaries for the following third-party software applications:

ACE 5.3a IBM ICU 2.4 OpenSSL 0.9.7d Perl 5.8.0 STLport 4.5 TAO 1.3A

You can find the license agreements and legal notices for these applications in the VERITAS Infrastructure Core Services Release Notes located in the docs directory of the ICS installation CD.

67

68

Installation Guide

Glossary of Terms and Acronyms


ACE Adaptive Communication Environment. A freely available, open-source, object-oriented (OO) framework that implements many core patterns for concurrent communication software. ACE provides a rich set of reusable C++ wrapper facades and framework components that perform common communication software tasks across a range of OS platforms. authentication The process of determining whether someone or something is, in fact, who or what it is declared to be. Authentication is commonly done through the use of log-on passwords. Knowledge of the password is assumed to guarantee that the user is authentic. authorization The process of granting someone permission to do or have something. In multi-user computer systems, a system administrator defines for the system which users are allowed access to the system and what privileges each user has. Privileges determine which files the user can access and sometimes other resources. ICS See Infrastructure Core Services (ICS). ICS installer The Infrastructure Core Services installation mechanism. See Infrastructure Core Services (ICS). ICU International Components for Unicode. A C/ C++ library developed by IBM that provides robust and full-featured Unicode implementation on a wide variety of platforms. Infrastructure Core Services (ICS)

69

A VERITAS software component that deploys the core run-time libraries on a system for other VERITAS software products. installics The command-line executable that starts the ICS Installer. This executable is located in the top-level directory of the ICS installation CD. MSCS Microsoft Cluster Server. A high-availability platform provided by Microsoft. OpenSSL A collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source tool-kit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general-purpose cryptography library. SCM The Windows Service Control Manager. Enables the management of services on a host. STLport A multi-platform ANSI C++ Standard Library implementation. It is free, open-source product, based on the SGI STL implementation. TAO The ACE ORB (TAO), pronounced dau, is a CORBA 2.5 compliant C++ object request broker. The ACE ORB is CORBA middle ware framework. VCS VERITAS Cluster Server. A high-availability platform provided by VERITAS. VERITAS Authentication Service The Infrastructure Core Service that provides authentication services for other VERITAS products. See authentication. VERITAS Authorization Service The Infrastructure Core Service that provides authorization services for other VERITAS products. See authorization.

70

Installation Guide

VERITAS Private Branch Exchange The Infrastructure Core Service that provides single-port access through a firewall. It works with CORBA and non-CORBA communication, and provides secure communication through the firewall. VERITAS Service Management Framework The Infrastructure Core Service that provides a framework for running and managing application services. VxAT See VERITAS Authentication Service. VxAZ See VERITAS Authorization Service. VxPBX See VERITAS Private Branch Exchange. VxSMF See VERITAS Service Management Framework.

Glossary of Terms and Acronyms

71

72

Installation Guide

Index
C cluster ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 63 VERITAS Service Management Framework configuration, 64 commands notational conventions, 2 configuration gathering information, 11 security credentials, 11 VERITAS Authentication Service, 12 VERITAS Authorization Service, 15 VERITAS Private Branch Exchange, 11 VERITAS Service Management Framework, 13 configuration information ICS, 11 configure gathering configuration information, 11 conventions, 2 credentials security, 11 setting up security credentials, 25 D dependencies ICS, 6 documentation user feedback, 4 F feedback documentation, 4 I ICS cluster configuration, 63 configuration information, 11 dependencies, 6 installation CD, 7 installer, 5 installing, 17 installing on a cluster, 8 native install packages, 6 native package structure, 57 preparing to install, 17 preparing to remove with the ICS Installer, 41 preparing to upgrade, 33 security credentials, 11 services, 5 starting, 62 stopping, 61 summary of installation steps, 8 third-party software applications, 67 uninstalling, 41 uninstalling individually, 43 uninstalling with the ICS Installer, 41 uninstalling with the native installer, 48 user support, 1 ICS installation overview, 5 ICS Installer, 5 installing ICS with, 18 installing the VERITAS Authentication Service, 21 installing the VERITAS Authorization Service, 29 installing the VERITAS Private Branch Exchange, 18 installing the VERITAS Service Management Framework, 25 removing all ICS at once, 42 removing ICS with, 41 uninstalling ICS with, 41 73

using, 53 installation ICS, 17 ICS on a cluster VCS

removing ICS with, 48 native packages structure, 57 O overview, ICS installation, 5 P preparing to install ICS, 17 preparing to upgrade ICS, 33 R removing ICS with the ICS Installer, 41 VERITAS Authentication Service ICS Installer

installing ICS on, 8

installing with ICS Installer, 18 preparing to install ICS, 17 summary of steps, 8 user support, 1 VERITAS Authentication Service, 21 VERITAS Authorization Service, 29 VERITAS Private Branch Exchange, 18 VERITAS Service Management Framework, 25 installation CD ICS, 7 installer ICS, 5 native install packages, 6 installics using, 53 installing VERITAS Authentication Service, 21 VERITAS Authorization Service, 29 VERITAS Private Branch Exchange, 18 VERITAS Service Management Framework, 25 installing ICS with the ICS Installer, 18 L license agreements third-party software, 67 M man pages converting to cat on AIX, 31 MSCS ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 64 VERITAS Service Management Framework configuration, 65 N native install packages ICS, 6 native installer 74

uninstalling VERITAS Authentication Service with, 46 uninstalling VERITAS Authorization Service with, 44 uninstalling VERITAS Private Branch Exchange with, 47

VERITAS Authorization Service ICS Installer

VERITAS Private Branch Exchange ICS Installer

VERITAS Service Management Framework ICS Installer

uninstalling VERITAS Service Management Framework with, 45

removing ICS with native installer, 48 S security credentials, 11 setting up trust and credentials, 25 services ICS, 5 starting the ICS, 62 stopping the ICS, 61 Installation Guide

Sun Cluster ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 64 VERITAS Service Management Framework configuration, 65 T third-party software in the ICS, 67 license agreements, 67 TruCluster ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 64 VERITAS Service Management Framework configuration, 65 trust setting up security trust, 25 U uninstalling ICS, 41 ICS individually, 43 ICS with the native installer, 48 VERITAS Authentication Service, 46 VERITAS Authorization Service, 44 VERITAS Private Branch Exchange, 47 VERITAS Service Management Framework, 45 uninstalling ICS preparing to, 41 upgrade preparing to upgrade ICS, 33 upgrading VERITAS Authentication Service, 35 VERITAS Authorization Service, 37 VERITAS Private Branch Exchange, 34 VERITAS Service Management

Framework, 36 user support, 1 V VCS ICS configuration in, 63 VERITAS Private Branch Exchange configuration, 63 VERITAS Service Management Framework configuration, 64 VERITAS Authentication Service configuration information, 12 installing with the ICS Installer, 21 uninstalling, 46 upgrading, 35 VERITAS Authorization Service configuration information, 15 installing with the ICS Installer, 29 uninstalling, 44 upgrading, 37 VERITAS Private Branch Exchange cluster configuration, 63 configuration information, 11 installing with the ICS Installer, 18 MSCS cluster configuration, 64 Sun Cluster cluster configuration, 64 TruCluster cluster configuration, 64 uninstalling, 47 upgrading, 34 VCS cluster configuration, 63 VERITAS Service Management Framework cluster configuration, 64 configuration information, 13 installing with the ICS Installer, 25 MSCS cluster configuration, 65 Sun Cluster cluster configuration, 65 TruCluster cluster configuration, 65 uninstalling, 45 upgrading, 36 VCS cluster configuration, 64

Index

75

76

Installation Guide