Install HPE ITOC as a non-root user

This section describes the procedure to install okHPE ITOC as a non-root user.

Configure the install directory

If you are installing HPE ITOC as a non-root user, you must create and configure the installation directory in which HPE ITOC will be installed before the actual installation.

1. Create the installation directory:

   #mkdir -p <itoc_install_directory>

   For example:

   #mkdir -p /opt/hpe/itoc

2. Configure permissions that allow access on the installation directory.

   #chown <username> <itoc_install_directory>

   #chgrp <usergroup> <itoc_install_directory>

   For example:

   #chown itoc /opt/hpe/itoc

   #chgrp itoc /opt/hpe/itoc

Install and configure PostgreSQL

You must install and configure PostgreSQL 9.1.3+ on your server before installing ITOC.

Install PostgreSQL

For general PostgreSQL installation instructions, see:

http://www.postgresql.org/docs/9.3/static/index.html

For installation instructions on a specific platform, see:

https://wiki.postgresql.org/wiki/YUM_Installation

Configure PostgreSQL

After you have installed PostgreSQL, use PostgreSQL documentation or work with a database administrator to configure a database, user, and password. This section provides an example of typical configuration steps.

1. As root user, set up the database.
2. Configure the database as necessary:
1. As required to allow encrypted password access, modify the pg_hba.conf file:

   # TYPE DATABASE USER ADDRESS METHOD
host itoc all 0.0.0.0/0 md5
host idmitoc all 0.0.0.0/0 md5

2. (Optional) Configure /var/lib/pgsql/pgsql_version/data/postgresql.conf with the following recommended parameters, as needed:

   listen_addresses = '*'
maintenance_work_mem = 64MB
wal_buffers = -1
checkpoint_segments = 64
checkpoint_timeout = 10min
effective_cache_size = 4GB
max_locks_per_transaction = 96
log_min_duration_statement = 1000
max_connections = 275
shared_buffers = 4GB
log_rotation_size = 500MB
log_line_prefix = '%t:%r [%p]: [%1] user=%u,db=%d '
log_filename = 'postgresql-%d.log'

3. Restart the PostgreSQL service:

   #service postgresql-<pgsql_version> restart

4. Create the PostgreSQL user role and password.

5. Create two databases using the example script shown below:

   • One database for HPE ITOC application data, named itoc.

   • One database for HPE ITOC organization administration data, named idmitoc.

   #!/bin/sh

set -e

tsfolder="hpitocspace"
tablespace="hpitocdata"

[ $# -lt 1 ] && echo "USAGE: `basename $0` <dbpassword> [username] [port] [dbname] [authdbname]" && exit 1

db_pswd="$1"
dbuser="$2"
port="$3"
dbname="$4"
idmdbname="$5"

[ -z "$dbuser" ] && dbuser="itocadmin"
[ -z "$port" ] && port=5432
[ -z "$dbname" ] && dbname="itoc"
[ -z "$idmdbname" ] && idmdbname="idmitoc"

su_cmd="su - postgres"
c_cmd="sudo -u postgres psql -p $port"

echo "mkdir $tsfolder" | $su_cmd
echo "create user $dbuser WITH CREATEROLE CREATEUSER PASSWORD '$db_pswd';" | $c_cmd
echo "create tablespace $tablespace owner $dbuser location '/var/lib/pgsql/$tsfolder';" | $c_cmd
echo "create database $dbname OWNER $dbuser template template0 encoding 'UTF8' lc_collate 'C' tablespace $tablespace;" | $c_cmd
echo "create database $idmdbname OWNER $dbuser template template0 encoding 'UTF8' lc_collate 'C' tablespace $tablespace;" | $c_cmd

exit $?

Install HPE ITOC

1. As a non-root user, enter the values specified in the install interview, or accept the defaults by pressing Enter:

   Preparing to install...
Extracting the JRE from the installer archive...
Unpacking the JRE...
Extracting the installation resources from the installer archive...
Configuring the installer for this system's environment...
Launching installer...
=================
HP IT Operations Compliance (created with InstallAnywhere)
------------------------
Preparing CONSOLE Mode Installation...
=================
Introduction
------------
This installation wizard will guide you through the installation of HP IT
Operations Compliance 1.20.000.576
It is strongly recommended that you quit all programs before continuing with
this installation.
You may cancel the installation at any point by pressing CTRL+C.
PRESS <ENTER> TO CONTINUE:
==================
License Agreement
-----------------
.
.
.

2. Press Y to accept the terms of the license agreement:

   DO YOU ACCEPT THE TERMS OF THIS LICENSE AGREEMENT? (Y/N): Y

3. Enter and then reenter the installer user password:

   Installation User Password
--------------------------
Password of user performing this installation. It is used by Remote
Execution Engine for Scan/Remediate operations. It will be persisted in a file
encrypted.
Please Enter the Password:
============================
Installation User Password Re-Prompt
------------------------------------
Please Re-Enter the Password:

4. Create your user-defined HPE ITOC admin user password, which is the password for the new itocadmin account within HPE ITOC itself. This password must have 6 or more characters. Then reenter this password when re-prompted:

   ITOC Admin User Password
------------------------
It is a password for seeded admin user. It will also be used to generate
certificates and for other application logic. It will be persisted in a file
encrypted.
Please Enter the Password:
===================
ITOC Admin User Password Re-Prompt
----------------------------
Please Re-Enter the Password:

5. Select 1 to accept the installation defaults (as shown in the example), or select 2 to customize installation values (see Customize installation values):

   Installation Defaults
---------------------
Following configurable defaults will be used to perform HP IT Operations
Compliance installation:
Install Folder : /opt/hpe/itoc
JRE : OpenJRE
Server Hostname : itoc.yoursite.hp.com
Database Hostname : itoc.yoursite.hp.com
Database Port : 5432
Database Name : itoc
Organization Administration Database Name : idmitoc
Database User : itocadmin
->1- Accept
2- Customize
ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS <ENTER> TO ACCEPT THE DEFAULT: 1

6. Enter the database user password you created when you installed the PostgreSQL database, and reenter this password when prompted:

   ITOC Database User Password
---------------------------
It is a password of database user. It will be persisted in a file encrypted.
Enter the database user password:
===================
ITOC Database User Password Re-Prompt
-------------------------------------
RE-Enter the database user password:

7. Review the pre-installation summary, and press Enter to complete installation:

   Pre-Installation Summary
------------------------
Please Review the Following Before Continuing:
Install Folder:
/opt/hpe/itoc

Product Name
HP IT Operations Compliance 1.20.000.576

ITOC Database
PostgreSQL (itocadmin:itoc@itoc21.qa.opsware.com:5432)

ITOC Organization Administration Database
PostgreSQL (itocadmin:idmitoc@itoc.yoursite.hp.com:5432)

Disk Space Information (for Installation Target):
Required: 806.05 MegaBytes
Available: 41,184.39 MegaBytes

PRESS <ENTER> TO CONTINUE:
=======================
Installing...
-------------
Congratulations. HP IT Operations Compliance has been successfully installed to:
/opt/hpe/itoc
PRESS <ENTER> TO EXIT THE INSTALLER:

Start HPE ITOC services as non-root user

HPE ITOC services are started automatically during the HPE ITOC installation. When installing as a non-root user, perform the following additional actions using the sudo or root user to make the installation fail-safe against reboot:

On RHEL 6

cd /etc/init.d
ln –s <install_dir>/scripts/portal portal
ln –s <install_dir>/scripts/itoc itoc
chkconfig portal on
chkconfig itoc on

On RHEL 7

cp <install_dir>/scripts/itoc|portal.service /usr/lib/systemd/system/
systemctl daemon-reload
systemctl enable itoc|portal.service