Installing F-Secure Linux Security 11 and Policy Manager for Linux 12 on the same server - F-Secure Community
<main> <article class="userContent"> <p> </p> Installing F-Secure Linux Security 11 and Policy Manager for Linux 12 on the same server <p>This article provides information on installing the F-Secure Linux Security 11 and Policy Manager for Linux 12 on the same server. </p> <p><strong>Limitations and compatibility issues</strong> </p> <div> <ul><li>By default, firewall in Linux Security (LS) will block ports 8080 and 8081 used by Policy Manager (PM). Allowing the services in LS WebUI works, but also overrides the firewall rules locally from now on. This means that they cannot be set anymore from PM Console but only from LS WebUI. </li> <li>F-Secure Automatic Update Agent (FSAUA) will be installed by both products. This will not affect the functionality per se, but uninstalling the second package by using package manager (rpm/dpkg) will most likely fail due to the files being already deleted. Use "rpm -e --justdb --nodeps --noscript" or similar to clean up the package database. </li> </ul></div> <p><strong>Installation on a new server environment</strong> </p> <ol><li> Install Linux Security 11 in standalone mode by using the <strong>nofirewall</strong> installer option. </li> <li> Stop FSAUA:<pre class="code codeBlock" spellcheck="false"> /etc/init.d/fsaua stop</pre>. </li> <li> Install the <strong>fspmaua</strong> package by using <pre class="code codeBlock" spellcheck="false">rpm/dpkg</pre>. </li> <li> Install the <strong>fspms</strong> package by using <pre class="code codeBlock" spellcheck="false">rpm/dpkg</pre>. </li> <li> Run the following command: <pre class="code codeBlock" spellcheck="false">/opt/f-secure/fspms/bin/fspms-config</pre> and select <strong>no</strong> for using the existing FSAUA configuration as the basis. Other choices can be left to default values. </li> <li> Configure Linux Security to managed mode: <pre class="code codeBlock" spellcheck="false">/opt/f-secure/fsav/fsav-config --auto managed fspms=<a href="http://XX.XX.XX.XX/" rel="nofollow">http://XX.XX.XX.XX/</a> adminkey=/path/to/admin.pub nofirewall</pre> </li> <li> Install the PM Console package on the same server or on a separate machine. </li> </ol><p><strong>Upgrading a product or using existing installations</strong> </p> <p>The product upgrades are not supported when installing on the same server. We recommend a clean installation when upgrading a product. </p> <p><strong>Technical discussion</strong> </p> <p>PM takes over the FSAUA configuration. LS does not fetch updates from PM nor from a public server but picks the updates directly from the FSAUA data directory (<code class="code codeInline" spellcheck="false">/var/opt/f-secure/fsaua/data/content/</code>) by using <strong>fsupdated</strong>. </p> </article> </main>