Installing HSTS

To install HSTS, log in to your computer as an Administrator. If you’re in an Active Directory environment, use a Domain Administrator account.

About this task

Note: If you are upgrading or rolling back, prepare your system by completing the required upgrade tasks to avoid installation errors and preserve your configuration settings. For more information, see Upgrading or rolling back HSTS.

Procedure

  1. Download HSTS from Fix Central.
    To access and download the packages, you must sign in with your IBMid credentials.
  2. Open the installation package and select the setup type.
    Important: You must run the installer as an Administrator. Right-click the installation package and select Run as administrator. You might be asked to enter the administrator's password to allow the installer to make changes to your computer.

    Follow the on-screen instructions. After the license agreement screen, select the wanted setup type. If you are upgrading from a previous version, the installer skips this step.

    Note: If you have consumption-based entitlement (metered license) and not a perpetual license, select the Custom.
    Setup Type Description
    Typical Install the standard HSTS.
    Custom Select the features and the path to install. Features include:
    • ALEE Service - The Aspera service that manages entitlement licenses. Install this service if you have an entitlement rather than a license.
    • Trap Service - The Aspera service that manages transfers with object storage. Install this option if your server is deployed in object storage.
    Complete Install all features.
  3. For a Custom setup, select the features to install.
    • ALEE Service - If you have consumption-based entitlement (also known as a metered license) and not a perpetual license, you must install the Aspera license entitlement engine (ALEE Service). Click the drop-down menu for ALEE Service and select Will be installed on local hard drive. Select this option only if you have an Aspera entitlement.
    • Trap Service - If you are installing HSTS on a virtual machine in object storage, click the drop-down menu for Trap Service and select Will be installed on local hard drive so that your server can transfer content into the object storage. You must also enable the ALEE Service to use this feature. For more information about configuring your server for object storage, see Configuring for the cloud.

    Custom setup type - select features

  4. For a Custom setup, configure the installation path and users.
    Select the destination folder for the installation or use the default file path. Under Install this application for, select Anyone who uses this computer (all users) to allow access for all system users, or Only for me to allow only your user account to use the application.
    Custom setup type - select features

  5. Set up the Asperaservice account.
    The Aspera service account runs services for Aspera products, including:
    • IBM Aspera Central.
    • the Aspera Node Service.
    • the IBM Aspera HTTPD Service.
    • Aspera Sync

    By default, the username is svcAspera. The username is case-sensitive.

    A local account, such as the default svcAspera, is all that is required to run Aspera services if your machine is not joined to a Windows™ domain. If your machine is joined to a domain, if you need to provision Active Directory accounts, or if transfer users store files remotely, refer to the following table for the type of service account to use:

    Requirement Type of service account user
    Provision-local transfer users only. Local account. Domain account with local admin privileges can be used, but is not required.
    Provision Active Directory accounts for transfer users. Users who want to transfer with your server are authenticated through Active Directory. Domain account with local administrator privileges.
    Transfer users store files on a remote file system (not on your server machine), such as an SMB file share. Domain account with local admin privileges. Additional actions might be required. See the IBM Aspera support site base or contact your Aspera account manager for assistance.

    Local accounts: If a local account does not exist, enter new credentials and click Next. If the account exists because it was created for the previous installation, enter the account password and click Next. If the existing user's password you entered is incorrect, or you want to change the Aspera service user, see Managing the Aspera service account.

    Set up the Aspera service account.

    Domain accounts: If the server is configured to accept a domain user login, use a domain account that was added to the local administrator's group to run the services. You must create this domain account in your Domain Controller first. The username for a domain account must be in the form username@fully.qualified.domain.name, as in the following example:

    Set up the Aspera service account.
    Note: If you intend to use this HSTS node with Console, the Aspera service account (svcAspera, by default) must be set up as a transfer user on this node. If you installed these products by upgrading from a previous installation, a transfer user corresponding to the service account is created automatically. However, if you are running a clean install, and not an upgrade from a previous installation, only the service account is created, not the corresponding transfer user. In this case, create the transfer user manually in the HSTS GUI.
  6. If you are using a perpetual license, activate your license.
    1. When the installation is complete, you can select if you want to start the application by keeping the checkbox Launch IBM Aspera High-Speed Transfer Server enabled. Click Finish to start the application.
    2. An Enter License window appears. Either click Import License File and select the license file, or click Paste License Text to copy and paste the license file's content. The license information appears in the window. Verify that it is correct and click OK and Close.
    3. If you want to start the application later, go to Search and type High-Speed Transfer Server. in the application, go to Tools > License.. Either click Import License File and select the license file, or click Paste License Text to copy and paste the license file's content. The license information appears in the window. Verify that it is correct and click OK and Close.
  7. If you are using an entitlement, set it up.
    Open a Command Prompt window as Administrator. Right-click Command Prompt and click Run as administrator. Run the following command: 
    > "C:\Program Files\Aspera\Enterprise Server\bin\alee-admin.exe" register Customer_ID Entitlement_ID
    Note: This requires that you installed ALEE as part of a custom installation.

    The output information includes when the Aspera entitlement server was reached.

    Verify that you can now reach the Aspera entitlement server with the following command: 
    > curl -i https://api.ibmaspera.com/metering/ping
    The output must include HTTP/1.1 200 OK.
  8. Secure your server or update your existing configuration.
    1. Configure your firewall. See Configuring the firewall.
    2. Change and secure the TCP port. See Installing and configuring the SSH Server.
    3. Determine whether you want to use server-side encryption at rest. See Server-Side Encryption-at-Rest (EAR) for instructions on configuring in the GUI or Server-Side Encryption-at-Rest (EAR) for instructions on configuring the encryption from the command line.