Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Installing Deep Security Agent on Solaris Sparc Servers in air-gapped environment

    • Updated:
    • 13 Dec 2018
    • Product/Version:
    • Deep Security 10.0
    • Deep Security 11.0
    • Deep Security 9.6
    • Platform:
    • N/A N/A
Summary

When a Solaris 11 server or virtual server cannot reference a remote Solaris repository, it won't be able to resolve that the shell/ksh package is replaced by the shell/ksh93 package. Additionally, other packages on which the Deep Security Agent depends may not be present on the server and the local packaging system is unable to download these packages.

This article provides the instructions to obtain the required packages and use a temporary local repository on the Solaris server to allow the Deep Security Agent to be installed. It also covers the removal of the temporary repository.

Details
Public

To install Deep Security Agent on Solaris server:

  1. Obtain the shell/ksh@20110208,5.11-0.175.1.0.0.21.0:20120723T173801Z p5p package file.
    1. Register with the Oracle Solaris support repository.
    2. Click the Request Access or Show Details button next to Oracle Solaris 11 Support.
    3. Download the key and certificate files (pkg.oracle.com.key.pem and pkg.oracle.com.certificate.pem).
      If you cannot download the key and certificate files, check with your Solaris team to find out how to get the keys or access to an internal IPS repository. Alternatively, contact Oracle to get the keys or the shell/ksh@20110208,5.11-0.175.1.0.0.21.0:20120723T173801Z p5p package file.
    4. On an x86-based Solaris 11 machine with access to Internet (or to an internal IPS repository), upload the key and certificate files and run the command below in the same directory:
      pkgrecv -s https://pkg.oracle.com/solaris/support  -d ./ksh_175_1.p5p -a --key /root/pkg.oracle.com.key.pem --cert /root/pkg.oracle.com.certificate.pem shell/ksh@20110208,5.11-0.175.1.0.0.21.0:20120723T173801Z
  2. On each x86-based Solaris 11 machine where the Deep Security Agent is to be installed, do the following:
    1. Upload the ksh_175_1.p5p file and the Deep Security Agent installer file (Agent-Core-Solaris_5.11-10.0.0-xxxx.x86-64.p5p) to /tmp on the machine.
    2. As root, run the following commands on the server to create a temporary repository and install the Deep Security Agent.
      cp Agent-Core-Solaris_5.11-10.0.0-2687.x86_64.p5p /tmp
      cp ksh_175_1.p5p /tmp
      pkg unset-publisher solaris
      mkdir -p /tmp/repo
      pkgrepo create /tmp/repo
      pkgrecv -s file:///tmp/ksh_175_1.p5p -d /tmp/repo '*'
      pkg set-publisher -g /tmp/repo solaris
      pkg install -g /tmp/Agent-Core-Solaris_5.11-10.0.0-*.x86_64.p5p '*'
      pkg unset-publisher solaris
      rm -rf /tmp/repo
      rm -f /tmp/Agent-Core-Solaris_5.11-10.0.0-*.x86_64.p5p
      rm -f /tmp/ksh_175_1.p5p

The procedure above has been tested and here is how the process worked on our lab machine:

root@timm-seg-sol-11-3-0-vm1:~#  pkg install -g Agent-Core-Solaris_5.11-10.0.0-2687.x86_64.p5p '*'  Creating Plan (Solver setup): -  pkg install: No matching version of security/ds-agent can be installed:    Reject:  pkg://trendmicro/security/ds-agent@10.0.0.2687    Reason:  No version for 'require' dependency on shell/ksh@0.5.11,5.11-0.175.0.0.0.2.1 can be found      root@timm-seg-sol-11-3-0-vm1:~# cp Agent-Core-Solaris_5.11-10.0.0-2687.x86_64.p5p /tmp  root@timm-seg-sol-11-3-0-vm1:~# cp ksh_175_1.p5p /tmp  root@timm-seg-sol-11-3-0-vm1:~# pkg unset-publisher solaris  Updating package cache                           1/1    pkg unset-publisher: Removal failed for 'solaris': Unknown publisher 'solaris'.    root@timm-seg-sol-11-3-0-vm1:~# mkdir -p /tmp/repo  root@timm-seg-sol-11-3-0-vm1:~# pkgrepo create /tmp/repo  root@timm-seg-sol-11-3-0-vm1:~# pkgrecv -s file:///tmp/ksh_175_1.p5p -d /tmp/repo '*'  Processing packages for publisher solaris ...  Retrieving and evaluating 1 package(s)...  PROCESS                                         ITEMS    GET (MB)   SEND (MB)  Completed                                         1/1     0.0/0.0     0.0/0.0    root@timm-seg-sol-11-3-0-vm1:~# pkg set-publisher -g  /tmp/repo  solaris  root@timm-seg-sol-11-3-0-vm1:~# pkg install -g /tmp/Agent-Core-Solaris_5.11-10.0.0-*.x86_64.p5p '*'             Packages to install:  2              Services to change:  4         Create boot environment: No  Create backup boot environment: No    DOWNLOAD                                PKGS         FILES    XFER (MB)   SPEED  Completed                                2/2         40/40      5.9/5.9  116M/s    PHASE                                          ITEMS  Installing new actions                         76/76  Updating package state database                 Done  Updating package cache                           0/0  Updating image state                            Done  Creating fast lookup database                   Done  Updating package cache                           2/2  root@timm-seg-sol-11-3-0-vm1:~# pkg unset-publisher solaris  Updating package cache                           1/1  root@timm-seg-sol-11-3-0-vm1:~# rm -rf /tmp/repo  root@timm-seg-sol-11-3-0-vm1:~# rm -f /tmp/Agent-Core-Solaris_5.11-10.0.0-*.x86_64.p5p  root@timm-seg-sol-11-3-0-vm1:~# rm -f /tmp/ksh_175_1.p5p  root@timm-seg-sol-11-3-0-vm1:~#  
 
If you find that other dependencies are needed on the customers' machines, then just pull them down from the Oracle's repository using the same way and add them to the temporary repository.
Premium
Internal
Rating:
Category:
Install
Solution Id:
1121700
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.