CORE Server Installation
Before you begin, make sure that:
- The target meets CORE Server Requirements.
- On the Linux servers - the OS-specific software package manager is prepared to validate the integrity and authenticity of the CORE software distribution. See Validating Debian and RPM Packages.
- If you are reinstalling CORE software on a target that earlier installed or attempted to install the CORE software - start with Clean-up.
Installation
-
RHEL, Centos, AmazonLinux2 use
yum
orrpm
:sudo yum localinstall ekm-<version>.<el7 | el8>.x86_64.rpm
sudo rpm -ivh ekm-<version>.<el7 | elTLS8>.x86_64.rpmNotes:
-
Use
el7
for RH7 and Amazon Linux 2. -
Use
el8
for RH8.
-
Use
-
Ubuntu, Debian:
sudo dpkg -i ekm-<version>.<deb8 | deb9 | deb10>_amd64.deb
Notes:
-
Use
deb8
for Ubuntu16.04
- Use
deb9
for Debian8
-
Use
deb10
for Ubuntu18.04
, Ubuntu20.04
, Debian9
, Debian10
.
-
Use
-
Windows - interactive install:
ekm-<VERSION>.windows.x64.msi
The default installation directory is
C:\Program Files\Dyadic\EKM
. The installation also:Enterprise Key Management - previous name of the product.
- Adds Windows service account user named UnboundTech with the minimal privileges required to run the
Dyadic EKM
service.Enterprise Key Management - previous name of the product.
- Starts the service on behalf of this user.
- Issues the warning:
- Runs the Dyadic EKM
Enterprise Key Management - previous name of the product. service on behalf of the
Local System
.
If the UnboundTech service account user cannot be created, the installer:
Failed to create UnboundTech user account.
Unbound service will be configured with Local System account.
If you wish to use another account, please configure it manually.To further restrict the privileges of this service, assign it to the service account user with the required privileges.
Note
The Windows un-install of the CORE Server software deletes the UnboundTech service account. - Adds Windows service account user named UnboundTech with the minimal privileges required to run the
-
Windows - non-interactive install:
msiexec.exe ekm-<VERSION>.windows.x64.msi /qn
Important
You must run themsiexec.exe
using Elevated Privileges Windows, for example, using the Windows Admin Powershell. Otherwise, the "/qn
" option silences the Windows User Account Control (UAC) prompt. Consequently, the system does not receive your consent and stops the program.
Clean-up
To clean up CORE server software perform the following steps:
- Stop the EKM
Enterprise Key Management - previous name of the product. service.
- Use the platform-specific method to uninstall the CORE server software
- Clean up files and folders created by the CORE server software. For the complete list of files and folders, see CORE Entities. In particular, delete the following:
- Certificates Folder.
- Database Root Folder and Backup Info File.
- The folder that contains the CORE Entities.
- Log Folders.