›> ›> EXTOL Secure (ESX) - iSeries Install for Secure 5.5

EXTOL Secure (ESX) - iSeries Install for Secure 5.5

27th February 2014

Below are the instructions to install EXTOL Secure 5.5 on an iSeries. The instructions are from EXTOL’s ESX_InstallationRequirements.pdf. I have added additional notes to include some hints/tips
ESX 5.5 Installation is a 4 step process

1. Preinstall: Run pre-req
2. Install A: Create QSYS objects
3. Install B: Create IFS objects
4. Post Install: Odd and ends. ie, client install, copy certificates from ESX 5.3.1
Pre-Install: Pre-Req

Sign On
Sign on to a i session using a user profile with USRCLS(*SECOFR).

Execute the LODRUN command
At a command line, type: LODRUN DEV(*OPT)
Press Enter.

The Restoring readiness suite install library to EBIPRINSTL message appears briefly.

Restore the library
The Select install library name command is prompted.

The Install library parameter defaults to EBIPREREQ. You may override this value, if necessary. You will need to use this value again:

Add library list entry
Ensure that the library to which EXTOL Readiness Suite was installed is in your library list.

Run the prerequisite check
At this time it is suggested you execute the EXTOL Readiness Suite. Although not required executing the check at this step can provide you with an indication as to whether the install/upgrade should succeed when it is executed as part of the ESXINSTALL or ESXUPGRADE command.

If you do not wish to perform this check, you may skip to the either the Client/Server Install or Client/Server Upgrade section of this document.

Otherwise, type: EBIPREREQ and press F4.

On the Readiness Suite test (EBIPREREQ) panel, select the type of check to be performed and press Enter.

Note: This process should be run separately for each option to be installed. Each time the process is run the message queue is overwritten. You may wish to view this message queue after each execution.

Review the results
When the process completes, a message indicates the success/failure of the prerequisite check. To review the message queue containing results for each step for any errors that may have occurred, type DSPMSG ([LIBRARY]/PREREQERR) and press Enter. If no errors were encountered during the prerequisite check this message queue may be empty.

If you are executing a previous version of the prerequisite check and the above message queue cannot be found, try: DSPMSG ([LIBRARY]/EBIPREREQ) and press Enter.

Note: This message queue is also printed to a spool file, which may be faxed to EXTOL if assistance is required.

For additional details on the requirements being verified, please see the EXTOL Readiness Suite.
Install A

Sign on
Sign on to an i session using a user profile with USRCLS(*SECOFR).

Add library list entry
Ensure that the library to which EXTOL Readiness Suite was installed (the Restore the library step of the “Pre-Install and Pre-Upgrade” section of this guide) is in your library list.

Prompt the Load EXTOL Secure 5 objects command
Type LOADESX and press F4 to prompt the Load EXTOL Secure 5 objects command.

Note: To execute this command, you MUST have authority to create user profiles, work with PTF groups, restore libraries, and grant authority to objects.

Specifically, this command creates the user profile, creates a “home” directory for the user, selects the type of installation to be performed, restores the utility library, and then restores the Secure installation objects into the home directory.

Indicate the type of Install
Type a Y in the field for the type of install to be performed.

Type the Secure owners user profile name
At the Secure 5 owners profile name parameter, type a new i user profile name (the default is ESXOWNER). The profile for this new user is created during the load process

Type the ESX utility library name
At the ESX utility library parameter, type the name of the ESX utility library. If the library already exists, then it is renamed to ESXnnnnnnn, where nnnnnnn is a number (for example: ESX0000001). After the original library is renamed, the utility library will be restored using the name you provided.

Indicate authority to IBM commands
At the Grant authority to QSYS cmds parameter, indicate whether you wish to grant authority to IBM commands required to complete the Secure installation. Type *YES or *NO.

Execute the command
Press Enter to perform these tasks:

  • run the EXTOL Readiness Check
  • create the Secure owner’s user profile
  • restore the ESX Utility library
  • if indicated, authority is granted to specific IBM commands (required to complete the install of Secure) used by the new user
  • create a home directory for the new user
  • Secure installation objects (to be used when performing the Secure install) are restored to the Secure owner’s home directory

You should see a message similar to this:

Message … . : To complete the Secure 5 installation; signoff of this session, and logon using the user ESXOWNER, password ESXOWNER. Then, follow the instructions for installing Secure 5.

You will need to sign off and back on using the user and password indicated in this message.

Sign off

Sign off of the session.
Install B

Sign on as the Secure owner
Sign on using the user name provided during the Type the Secure owners user profile name step of this process. The password is the same as the user name.

Add the ESXINSTALL library
At a command line, type: ADDLIBLE ESXINSTALL, and then press Enter.

Prompt the EXTOL ESX Installation command
At a command line, type: ESXINSTALL and press F4 to prompt the EXTOL ESX Installation command.

Type the Secure installation path

At the ESX installation path parameter, type the name of a valid i path for where you want to install Secure. The path specified MUST NOT already exist – the install process will create it. The maximum length is 500 bytes.

Execute the command
Press Enter to submit the command to batch. Values provided for the command’s parameters are written to the Secure install properties file in the user’s home directory.

Here is a sample submission message:

Message … . : The ESX installation has been submitted to batch. After
completion of the ESXINSTALL job, execute command DSPF
STMF(‘/ESX/EXTOL_Secure_InstallLog.log’). If any fatal errors occurred,
then contact Extol Support for assistance. Please have logs
/home/ESXOWNER/ESX_Inststdout.log and
/home/ESXOWNER/ESX_Inststderr.log available when contacting Extol

Verify that the install was successful
An install log is generated in the Secure path (where Secure was installed). To view this log, type:
DSPF STMF(‘/xxx-path-name/ EXTOL_Secure_Exchange_5.5_InstallLog.log’) and press Enter - substitute xxx-path-name with the path provided during the Type the Secure installation path step.
Verify that no WARNINGS or FATAL ERRORS occurred during the installation process.

See page 44 of attachment: ESX_InstallationRequirements.pdf

Post install.

Update: /esx521/resources/config/secure.server.properties

If there are multiple network adapters, update:

  • net.outbound.socket.bind=192.168.XX.XX

If you SMTP server host value needs to be updated:

  • smtp.host=192.168.XX.XX

If multiple installs of ESX exist, update client port

  • remote.server.rmiport=9096

By: on