3. Deployment Notes

3. Deployment Notes

This section contains information related to installing Red Hat Certificate System 7.2. Prerequisites and hardware or platform requirements are detailed in subsequent subsections.

3.1. Platform Requirements

Red Hat Certificate System 7.2 consists of both clients and servers. This section contains the following information:

3.2. Supported Server Platforms

The Certificate System subsystems are supported on the following platforms:

  • Red Hat Enterprise Linux AS 4 for i386

  • Red Hat Enterprise Linux ES 4 for i386

  • Red Hat Enterprise Linux AS 4 for AMD64 and Intel EM64T

  • Red Hat Enterprise Linux ES 4 for AMD64 and Intel EM64T

  • Sun Solaris SPARC 9 64-bit

3.3. Client Support

The Enterprise Security Client is supported on the following platform:

  • Apple Macintosh OS X 10.4.x (Tiger) (Power PC)

  • Microsoft Windows XP Professional (i386)

  • Red Hat Enterprise Linux AS 4 (i386)

  • Red Hat Enterprise Linux ES 4 (i386)

  • Red Hat Enterprise Linux AS 4 for AMD64 and Intel EM64T

  • Red Hat Enterprise Linux ES 4 for AMD64 and Intel EM64T

3.4. Supported Server Platform Requirements

CPU Intel — 2.0 GHz Pentium 4 or faster
RAM 1 GB (required)
Hard disk storage space

Total is approximately 5 GB

  • Total transient space required during installation: 1 GB

  • Hard disk storage space required for installation:

    • Space required to set up, configure, and run the server: approximately 2 GB

    • Additional space for database growth in pilot deployment: approximately 1 GB

    • Total disk storage space for installation: approximately 1 GB

Table 2. Red Hat Enterprise Linux Platform Server Requirements

3.4.1. Red Hat Enterprise Linux Considerations

Before installing the Certificate System packages, make sure that the proper dependencies are installed on the Red Hat Enterprise Linux system.

The following package groups and packages must be installed on all Red Hat Enterprise Linux systems:

  • dialup (package group)

  • gnome-desktop (package group)

  • compat-arch-support (package group)

  • web-server (package group)

  • kernel-smp (package)

  • e2fsprogs (package)

  • firefox (package)

On 64-bit Red Hat Enterprise Linux platforms, be certain that the 64-bit (x86_64) compat-libstdc++ libraries are installed, and not only the 32-bit (i386) libraries. To confirm this, run the following as root:

rpm -qa --queryformat 'compat-libstdc++-%{VERSION}-%{RELEASE}.%{ARCH}.rpm\n' | grep x86_64

Numerous libraries should be displayed.

3.4.2. Solaris Considerations

The Sun Solaris version of Certificate System was tested on Solaris 9 with patch level 118558-28.

3.5. Other Required Software

  • Red Hat Directory Server 7.1; the source code and binaries for this component are available at https://rhn.redhat.com), through the Red Hat Directory Server 7.1 channel.

  • Web browser software that supports SSL. No binaries included through the Red Hat Network; it is strongly recommended that users such as agents or administrators use Mozilla Firefox. End-entities should use Mozilla Firefox or Microsoft Internet Explorer.

    The only browser which is fully-supported for the HTML-based instance configuration wizard is Mozilla FIrefox.

3.6. Optional Server Hardware

  • Chrysalis-ITS LunaSA Hardware Security Module (HSM)

    • Firmware: 4.5.2

    • Appliance Software: 3.2.4

    • Client Software: 3.2.4

  • nCipher netHSM

    • Firmware: 2.12

    • Software: 9.01

3.7. Optional Client Hardware

  • Axalto Global Platform compatible Cyberflex eGate token