Loading...

Prerequisites for Installations Using the CommCell Console

Before you perform a remote installation, make sure to review the following prerequisites:

Download the Software

To perform remote installations, the SnapProtect software must be available in the CommServe cache directory.

  • If the CommServe computer has Internet connectivity, no action is required. The SnapProtect software is automatically downloaded to the CommServe cache as part of the installation job.
  • If the CommServe computer has Internet connectivity with restrictions, or if there is no internet connectivity, you can adjust the download settings in the CommCell Console. For more information, see Configure Download Settings in the CommCell Console.
  • If the CommServe computer does not have internet connectivity, and the download settings do not satisfy your requirements, create a new installation package with all the software needed by your organization, and then copy the package to the CommServe cache. For instructions, see the download software procedure for Windows and UNIX computers.

Verify User Permissions

  • To perform remote installations, you must be a CommCell user with the right set of permissions:
    • To install on existing clients, the user must have Install Package/Update permissions on the clients where the software will be installed.
    • To install on new clients, the user must have Install Client permissions at the CommCell level.
    • To install on the CommServe computer, the user must have Administrative Management permissions at the CommCell level. Do not add non-administrators to an administrative user group.

    For information on assigning user permissions, see Associating Entities and Roles to a User.

  • If the Authentication for Agent Installs feature is enabled, users must have Install Client permissions at the CommCell level.
  • For UNIX client computers, SSH must be enabled, and the PermitRootLogins entry in the sshd_config file must be set to yes.

Review Considerations for Client Computers

  • For installations on Windows computers, the Remote Registry service must be enabled and configured to automatically start during the computer startup.
  • For installations on UNIX computers that reside in a PowerBroker environment, you need to configure a few settings. For more information, see Configuring PowerBroker Environments for Installations Using the CommCell Console.
  • For installations on EDC Discovered clients or virtual machines, you must configure the CommCell Browser to display these type of clients by completing the following steps:
    1. From the CommCell Console ribbon, on the Home tab, click Control Panel, and then click User Preferences.
    2. In the User Preferences dialog box, click the Client Computer Filter tab, and select the check boxes corresponding to EDC clients or virtual machines.

Review Firewall and Network Port Requirements

If you are installing the software on existing clients, you do not need to open additional network ports.

For new clients, you must open the following network ports to install the software remotely from the CommCell Console.

Note: All the network ports listed in this section are inbound ports.

  • For UNIX, Linux, and Macintosh computers, you must enable SSH (Secure Shell) and open port 22.

    If you have a Solaris 11 computer, you must also set the cipher as follows:

    1. Run the following command to stop SSH:

      svcadm disable ssh

    2. Open the /etc/ssh/sshd_config file and add the following line at the end of the file:

      Ciphers 3des-cbc

      If you already have other ciphers declared, add 3des-cbc at the end of the list after a comma (,).
    3. Run the following command to start SSH:

      svcadm enable ssh

    If you have a Macintosh computer running Mac OS X v10.11.x, you must also set the cipher as follows:
    1. Run the following command to stop SSH:

      launchctl stop com.openssh.sshd

    2. Open the /etc/ssh/sshd_config file and add the following line at the end of the file:

      Ciphers 3des-cbc

      If you already have other ciphers declared, add 3des-cbc at the end of the list after a comma (',').
    3. Run the following command to start SSH:

      launchctl start com.openssh.sshd

  • For Windows computers, the following ports must be opened temporarily during the remote installation:
    • Port 135 for DCOM (Distributed Component Object Model).
    • Port 139 for NetBIOS Session Service (if you are using legacy Windows computers, such as Windows NT or earlier versions).
    • Port 445 for SMB (Server Message Block) file sharing.
    • Your Windows Management Instrumentation (WMI) port. For instructions on setting up a fixed port for WMI, see Setting Up a Fixed Port for WMI on the Microsoft website.

    Important: If Windows Firewall is enabled on the computer, the following ports must be open in Windows Firewall:

    • Port 135 for DCOM-In (COM + Network Access).
    • Port 445 for SMB.
    • WMI port.

    • If you choose not to open ports 135, 139, 445, and WMI port on your network, you can set up a remote cache in the network where the client computer resides.
    • Important: After you install the software and configure firewall settings on the client, the only port that should remain open is the firewall tunnel port (8403 by default).

Review Space Requirements for Client Computers

During the installation, the disk space used on the client computers might vary depending on the agents that you plan to install.

The following table displays the approximate disk space required to install or upgrade agents on Windows and UNIX client computers.

Important: The space values provided in the table do not include the disk space used by the installation files that are copied to the client. Therefore, make sure to always have additional disk space available on the client.

Package Windows UNIX
File System Core (Laptop package) 500 MB 500 MB
File System Agent 1250 MB 1050 MB
MediaAgent 1350 MB 1250 MB
Other Agents 1550 MB 1550 MB