Installing on Linux
Prior to installation it is recommended that you review the Installation components section to determine what components you will require. Installation instructions for each component are provided below.
RPM Console Installation
MFT Gateway Server
Note: Several Linux distributions exhibit slow response as a result of the newly introduced FIPS TLS library. To prevent this issue, please see Installing haveged before installing MFT Gateway
To install using the RPM file perform the following steps as a user with root privileges.
-
Place the
gateway_install.rpm
file in a directory on the destination server.
-
Install. Run the following command from the directory containing the RPM file you placed on your server:
rpm -iv gateway_install.rpm
-
Configure and initialize database. Go to
/opt/MFT_Gateway
and run the following commands:./database -configure
./database -init
-
Add administrative user. Go to the
/opt/MFT_Gateway
directory and run the following command:
./add-administrator -username [username] -password [password] -email [email]
For example:
./add-administrator -username admin -password secret -email admin@redwood.com
This will configure MFT Gateway, where [username]
and [password]
are the administrative credentials you will use when connecting to the service.
-
Startup Administration Service. From the
/opt/MFT_Gateway
./gateway start
or
./start_service.sh
MFT Gateway Agent
-
Place the
gateway_agent_install.rpm
file in a directory on the destination server.
-
Install. Run the following command from the directory containing the RPM file you placed on your server:
rpm -iv gateway_agent_install.rpm
-
Enable control channel for MFT Gateway Server. See Agent service for details.
-
Set agent connection settings. See Adding agents for details. From the
/opt/MFT_Agent
directory run the following command:
-
If you do not have an MFT Gateway failover configured, run the following command:
./configuration -host [ip] -port [port] -user [username] -password [password]
For example:
./configuration -host 10.0.0.1 -port 30025 -user admin -password secret
-
If you do have an MFT Gateway failover configured, run the following command:
./configuration -host [ip] -port [port] -user [username] -password [password] -failover.host[ip] -failover.port [port]
For example:
./configuration -host 10.0.0.1 -port 30025 -user admin -password secret -failover.host 10.0.0.2 -failover.port 30126
Note about failover: The failover host and port provided are used when a connection is severed between the MFT Gateway instance and the MFT Gateway Agent, and a connection cannot be re-established (within 3 attempts). The Agent log will reflect any failover attempts - e.g. Connection to agent service on <host>:<port> failed. Attempting connection to next available host <host>:<port>.
In both cases, this will configure MFT Gateway Agent, where [ip] and [port]are the control channel IP and port for MFT Gateway Server and [username
] and [password
] are administrative credentials you will use when connecting to the control channel.
-
Startup MFT Gateway Agent Service. From the MFT Gateway Agent installation directory run the following command:
./agent start
ZIP Console Installation
MFT Gateway Server
Note: Several Linux distributions exhibit slow response as a result of the newly introduced FIPS TLS library. To prevent this issue, please see Installing havegedbefore installing MFT Gateway.
-
Place the
gateway_install.zip
file in a directory on the destination server.
-
Install. Run the following command from the directory containing the ZIP file you placed on your server:
unzip gateway_install.zip
-
Configure and initialize database. Go to the MFT Gateway installation directory relative to where the unzip command was executed, and run the following commands:
./database -configure
./database -init
-
Add administrative user. Go to the MFT Gateway installation directory relative to where the unzip command was executed, and run the following command:
./add-administrator -username [username] -password [password] -email [email]
For example:
./add-administrator -username admin -password secret -email admin@redwood.com
This will configure MFT Gateway, where [username
] and [password
] are the administrative credentials you will use when connecting to the service.
-
Startup MFT Gateway Service. From the MFT Gateway installation directory run the following command:
./gateway start
or./start_service.sh
MFT Gateway Agent
-
Place the
gateway_agent_install.zip
file in a directory on the destination server.
-
Install. Run the following command from the directory containing the ZIP file you placed on your server:
unzip gateway_agent_install.zip
-
Enable control channel for MFT Gateway Server. See Agent service for details.
-
Set agent connection settings. See Adding agents details. Go to the MFT Gateway Agent installation directory relative to where the unzip command was executed.
If you do not have an MFT Gateway failover configured, run the following command:
./configuration -host [ip] -port [port] -user [username] -password [password]
For example:
./configuration -host 10.0.0.1 -port 30025 -user admin -password secret
If you do have an MFT Gateway failover configured, run the following command:
./configuration -host [ip] -port [port] -user [username] -password [password] -failover.host[ip] -failover.port [port]
For example:
./configuration -host 10.0.0.1 -port 30025 -user admin -password secret -failover.host 10.0.0.2 -failover.port 30126
Note about failover: The failover host and port provided are used when a connection is severed between the MFT Gateway instance and the MFT Gateway Agent, and a connection cannot be re-established (within 3 attempts). The Agent log will reflect any failover attempts - e.g. Connection to agent service on <host>:<port> failed. Attempting connection to next available host <host>:<port>.
In both cases, this will configure MFT Gateway Agent, where [ip
] and [port
]are the control channel IP and port for MFT Gateway Server and [username
] and [password
] are administrative credentials you will use when connecting to the control channel.
-
Startup MFT Gateway Agent Service. From the MFT Gateway Agent installation directory run the following command:
./agent start
See also