Install or Upgrade the Engine on UNIX or Linux

About this task

Use this procedure to install or upgrade the engine.

If you previously installed version 3.0 or later of the engine, you can upgrade to this version by installing over the existing files. If you upgrade the engine, the passphrases and port definitions are maintained as well as configuration and log files. All adapter definitions created in the previous version can be used in the new installation.

Before performing an upgrade, you must create a backup of the entire installation directory. This ensures you can roll back an upgrade if you encounter any issues during the upgrade process.

To install or upgrade an engine on UNIX or Linux:

Procedure

Navigate to the directory where you downloaded the Secure Proxy installation file.

Refer to the following table to identify the file to install the engine on your operating system:


Hardware	File
IBM System p5 and IBM Power System	SSP.Vxxxx.AIX.tar
HP Integrity system with Intel Itanium processor	SSP.Vxxxx.HP_IA.tar
x64 for Linux (64-bit)	SSP.Vxxxx.Linux.tar
zLinux 64-bit	SSP.Vxxxx.Linux_s390.tar
Sun SPARC system	SSP.Vxxxx.SolarisSPARC.tar
Microsoft Windows server	SSP.Vxxxx.Windows.zip

Note: Log on to the UNIX system with the privileges required to install software.

Type the following command to retrieve the Secure Proxy engine, CM, and perimeter server installation files from the archive:
```
tar xvf SSP installation file
```
Type the name of the engine installation file for your platform and press Enter.
Read the terms of the license agreement. At the end of the agreement, type Y at the prompt.

Note: If you type N you will decline and terminate the installation. In some environments, you might have to terminate the installer by pressing CTRL + C to exit to the command line.
Select the license type for this installation: Production or Non-Production.
For a new installation, perform the following steps:
1. When prompted for the installation location, press Enter to accept the default directory or specify a different directory.
2. Accept the default value 63366 for the engine listen port or specify a different port. Record the engine listen port on the Startup Worksheet, and press Enter.
3. Type a passphrase and press Enter. You need this passphrase in future to start Secure Proxy.
4. Retype the passphrase and press Enter.
For an upgrade, perform the following steps:
1. Specify the directory where the previous version is installed and press Enter. A prompt displays the directory and a message indicating that the Secure Proxy installation already exists.
2. Type C to continue.
Review the pre-installation summary, and press Enter.
Select the Default Key Certificate to be used to secure communication between Engine and CM, and press Enter.
Enter 2 that is, Generate Key Certificate option if you are installing Engine first and supply the following key certificate details:
- Alias
- Store Passphrase
  The private key is encrypted using the store passphrase.
- Export KeyCert location
- Password for KeyCert Export
  Exported Key certificate will be encrypted using this password.
Using the values supplied above the installation:
1. Generates a self-signed certificate, dfltKeyStore.pkcs12 at $installDir/conf/system for Engine and at $installDir/conf/configurator/keyStore for CM.
2. Exports it to an administrator defined location that is, Export Key Cert location
Select option 1 that is, Import Key Cert exported from Secure Proxy Engine option when you install CM first and have an exported keycertificate from CM install and provide the following values:
- Select Key Certificate
- Password used for KeyCert export
  Note: Key Certificate exported from one Secure Proxy engine can be imported into multiple Secure Proxy engines since the same Key Certificate is also be imported into CM.
Press Enter. The command prompt is displayed