Installation guidelines
For a successful installation, ensure that you understand and follow the rules and guidelines to install IBM Security Guardium Key Lifecycle Manager.
- On a Linux® operating system, ensure that Bash shell (bash) is installed.
- On a Linux operating system, ensure that SELinux is disabled and umask is set to 022.
- Installation can take more than an hour.
- Do not install from a network drive or mounted drive.
- Ensure that you select the correct language at prompts during installation. Correcting a locale error requires uninstalling and reinstalling IBM Security Guardium Key Lifecycle Manager and Db2.
- When you install IBM Security Guardium Key Lifecycle Manager, the Db2 password that you specify must comply with the password policy of the underlying operating system.
- If you are using an existing user as Db2 Administrator, ensure that the password is correctly specified.
- When you install IBM Security Guardium Key Lifecycle Manager on Linux, certain Db2 configuration changes made during installation might require that you restart the system. Close other applications before you restart the system. After the system restarts, run the installation program again.
- Ensure that the hostname of the system is set correctly.
- Entries for all fields are restricted to alphabetical characters (A-Z and a-z),
numeric characters (0-9), and the underscore character (_). Also, the password fields allow selected
special characters. For more information, see Supported special characters in passwords.
The restriction also applies to the values in the response file that is used for silent installation.
- Ensure that the installation path does not contain Unicode characters.
- Ensure that there are no non-ASCII characters in the installation path.
- When you install IBM Security Guardium Key Lifecycle Manager, retain the default path for Shared Resources Directory. IBM® Installation Manager uses this location to download artifacts and to store information about the installed packages.
- Do not install IBM Security Guardium Key Lifecycle Manager on systems with
hardened operating system.
In a hardened system, you might have restricted access to the specific directories, or you might not be a part of the administrator group. On Windows, you might not have access to certain directories in the system even if you are part of the administrator group. To install IBM Security Guardium Key Lifecycle Manager, you must have access to all the installation directories with Read, Write, and Execute permissions.
- If you are planning to install IBM Security Guardium Key Lifecycle Manager on a domain-managed Windows system and use the Active Directory user as the Db2 administrator user, see Installing IBM Security Guardium Key Lifecycle Manager as a domain (Active Directory) user on a domain-managed Windows system.
- On a Linux operating system, ensure that the /opt, /home, and /tmp partitions are not mounted with the noexec and nosuid options.