McAfee Change Control and McAfee Application Control 6.1.0

Transcription

1 Installation Guide McAfee Change Control and McAfee Application Control For use in standalone mode

2 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism, McAfee Artemis, McAfee CleanBoot, McAfee DeepSAFE, epolicy Orchestrator, McAfee epo, McAfee EMM, McAfee Enterprise Mobility Management, Foundscore, Foundstone, McAfee NetPrism, McAfee Policy Enforcer, Policy Lab, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, SmartFilter, McAfee Stinger, McAfee Total Protection, TrustedSource, VirusScan, WaveSecure, WormTraq are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. 2 McAfee Change Control and McAfee Application Control Installation Guide

3 Contents Preface 5 About this guide Audience Conventions Find product documentation Install the software 7 Review prerequisites Procure the installer Understand the Linux installation workflow Installation script checks Reuse builds Install in the Interactive mode On the Windows platform On the AIX platform Install in the silent mode On the Windows platform On the Linux platform On the AIX platform Verify the installation On the Windows platform On the Linux and AIX platforms Upgrade the software 21 Before you begin Upgrade in the interactive mode On the Windows platform On the AIX platform Upgrade in the silent mode On the Windows platform On the Linux platform On the AIX platform Verify the upgrade Uninstall the software 29 Uninstall in the interactive mode On the Windows platform On the AIX platform Uninstall in the silent mode On the Windows platform On the Linux platform On the AIX platform A FAQs 33 McAfee Change Control and McAfee Application Control Installation Guide 3

4 Contents Index 37 4 McAfee Change Control and McAfee Application Control Installation Guide

5 Preface Contents About this guide Find product documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized. Audience McAfee documentation is carefully researched and written for the target audience. The information in this guide is intended primarily for: Administrators People who implement and enforce the company's security program. Conventions This guide uses these typographical conventions and icons. Book title, term, emphasis Bold User input, code, message Interface text Hypertext blue Title of a book, chapter, or topic; a new term; emphasis. Text that is strongly emphasized. Commands and other text that the user types; a code sample; a displayed message. Words from the product interface like options, menus, buttons, and dialog boxes. A link to a topic or to an external website. Note: Additional information, like an alternate method of accessing an option. Tip: Suggestions and recommendations. Important/Caution: Valuable advice to protect your computer system, software installation, network, business, or data. Warning: Critical advice to prevent bodily harm when using a hardware product. McAfee Change Control and McAfee Application Control Installation Guide 5

6 Preface Find product documentation Find product documentation McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. Task 1 Go to the McAfee Technical Support ServicePortal at 2 Under Self Service, access the type of information you need: To access... User documentation Do this... 1 Click Product Documentation. 2 Select a product, then select a version. 3 Select a product document. KnowledgeBase Click Search the KnowledgeBase for answers to your product questions. Click Browse the KnowledgeBase for articles listed by product and version. 6 McAfee Change Control and McAfee Application Control Installation Guide

7 1 Install 1 the software This section describes how to install Change Control or Application Control in the standalone mode. You can install the software on Windows, Linux, and AIX platforms. For all supported platforms, the software works well on both physical and virtual machines (VM). You can install the software in one of the following modes. Mode Description Interactive mode During interactive installation, the installer launches an installation wizard that guides you through the several steps required to configure and install the software. Silent mode Contents During silent or non interactive installation, no progress bar or messages are displayed. Silent installation is recommended for medium and large scale deployments. Review prerequisites Procure the installer Understand the Linux installation workflow Install in the Interactive mode Install in the silent mode Verify the installation Review prerequisites Before installing Change Control or Application Control, review the following guidelines and ensure that your environment conforms to these requirements. Verify that the system does not have an existing installation. Installation may fail, if another instance of the software is already installed and is in Enabled mode. If upgrade is supported from the installed version (verify by reviewing release notes and KB76579), refer the Upgrade the software section for upgrade instructions. If upgrade is not supported from the installed version, uninstall the existing version before installing the new version. Download the license key from the McAfee Downloads site. Keep it handy before starting installation. Review the minimum system requirements, supported operating systems, and supported file systems for Change Control and Application Control (see KB76579). Also, note that Change Control or Application Control cannot be installed on a network partition or on a partition having an unsupported file system. Ensure that the platform on which you need to install the software is supported (see KB76459). McAfee Change Control and McAfee Application Control Installation Guide 7

8 1 Install the software Review prerequisites Review the release notes to acquaint yourself with the known issues and identify dependencies you need to consider. Review the following platform specific requirements. Platform Requirements Windows Ensure that the product is not installed in the <SYSTEM_VOLUME>\Solidcore directory or its sub directories. Ensure that the product is not installed on a non system drive. Some Anti virus programs, such as Norton Internet Security 2006 can block the execution of Solidcore client files leading to issues, such as configuration not being set properly. To avoid similar problems, either disable the anti virus programs before installing the Solidcore client or ensure that these programs allow Solidcore client files to run. For all platforms except Windows 2000, if you have other file security programs (antivirus programs or file encryption programs) installed and running on your machine, please create a registry key named DfsIrpStackSize under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mup\Parameters and set its decimal value to 10. If this registry key already exists, please ensure that its decimal value is set to 10. AIX Linux Ensure that the genkex package is installed on the system To ensure successful installation of Change Control or Application Control on the Linux operating system (when a pre compiled build is unavailable), a build environment is required on the endpoint. Before installing the Linux software, ensure all Linux endpoints in your setup conform to these requirements. Note that any non conformance to the listed build environment will result in build and installation failures. Ensure the following build and packaging tools are installed on the endpoint system: gmake (provided by package make) gcc (provided by package gcc) ld (provided by package binutils) ar (provided by package binutils) rpmbuild (provided by package rpm build on Red Hat and package rpm on SUSE) cpio (provided by package cpio) Ensure the Kbuild framework is installed under /lib/modules/<kernelversion>/ build/ (provided by package kernel source on SUSE 10 and package kernel devel on rest of the distributions). Ensure the installed packages match the running kernel. We recommend that you ensure that the installed package versions are the same as the versions that are packaged with the distribution ISO. 8 McAfee Change Control and McAfee Application Control Installation Guide

9 Install the software Procure the installer 1 Procure the installer Use this task to obtain the Solidcore client installer file. Task 1 Download the Solidcore client package from the McAfee Downloads site. The Solidcore client is the software component that provides change monitoring, change prevention, and whitelisting features on the endpoints on which it is installed. The following table lists the available Solidcore client packages. Operating system Windows AIX Linux Package name SOLIDCOR<version> <build>_win.zip SOLIDCOR<version> <build>_lnx.zip SOLIDCOR<version> <build>_aix.zip In the file name, <version> and <build> represent the version and build number associated with the product. For example, the SOLIDCOR _LNX.zip file includes the Solidcore client (version and build number 211) for the Linux platform. 2 Save the package file to an accessible location. 3 Open the package file for the required operating system. The Solidcore client package file includes the installers for the all variants of the operating system. For the Windows operating system, different installers are available based on the target architecture and distribution. Each installer file is named using the following syntax setup win <os> <arch> <rel>.<build>.exe where <arch> is x86 for 32 bit architecture, ia64 for Intel 64 bit architecture, and amd64 for AMD 64 bit architecture. The <os> indicates the operating system to which the installer applies. 4 Extract the required installer. McAfee Change Control and McAfee Application Control Installation Guide 9

10 1 Install the software Understand the Linux installation workflow Understand the Linux installation workflow Provides information on the installation workflow on the Linux operating system. 10 McAfee Change Control and McAfee Application Control Installation Guide

11 Install the software Understand the Linux installation workflow 1 Installation script checks When you run the installation script, it performs multiple checks and tasks. The following checks are performed by the installation script: Task 1 Verifies the architecture and operating system information. 2 Validates the kernel installed on the endpoint. Based on whether a pre compiled binary file is available for the installed kernel or not, the installation script performs one of the following steps: If a pre compiled binary file exists for the kernel, the installation script begins the installation. For detailed information on kernel for which pre compiled binary files are available, see the KB76544 article. If a pre compiled binary file is unavailable for the kernel, the installation script performs the following tasks. a b c d e Verifies if a pre compiled build for the kernel is available in the /opt/solidcore directory. If you are using a specific kernel across multiple endpoints, you can compile the kernel module build on one endpoint and use it across the all other endpoints. Note that the /opt/solidcore directory does not exist by default and needs to be created manually. For detailed information on reusing a build, see the Reuse builds section. If a build is available in the /opt/solidcore directory, begin installation. If a build is unavailable, proceed with step b. Verifies if the required build and packaging tools are installed on the endpoint. For detailed information, see the Review prerequisites section. If the required build and packaging tools are installed, proceed with step c. If not, the installation fails. Recompiles the kernel module source code and creates a build suitable for the installed kernel. If the build is successfully created, proceed with step d. If not, the installation fails. Installs the created build on the endpoint. If the created build is successfully installed, the installation is complete. If not, the installation fails. Runs the sanity suite after the installation is complete to validate the installation. You must review and verify the results of the sanity suite by viewing the contents of the RESULTS file stored in the /usr/local/mcafee/solidcore/sanity directory. If needed, you can view the contents of the LOGS file in the same directory. After the sanity suite runs, the software enters a partially disabled or dormant state. In such a state, any process that tries to run on the system is allowed to execute and the software does not monitor or block any actions. Unlike Disabled mode (with system reboot), in this state the system is not restarted and the Solidcore driver continues to be loaded in memory. When the system is partially disabled, the output for the sadmin status command is marked with an asterisk. McAfee Solidifier: Disabled* McAfee Solidifier on reboot: Disabled McAfee Change Control and McAfee Application Control Installation Guide 11

12 1 Install the software Install in the Interactive mode To exit this mode you can perform one of the following actions: Execute the sadmin enable command to place the system in Enabled mode. Ensure that you add the license before placing the system in Enabled mode. Restart the system to place the system in Disabled mode. Reuse builds If a pre compiled binary file does not exist for a kernel, the installation script compiles the kernel module source code to create a build suitable for the kernel. Once this build is available, you can reuse this build to install the software on all endpoints that use the same kernel. When a build is compiled for a specific kernel, the build name includes the kernel details. The naming convention followed for the builds is solidifier kmod <rel> <build>.<distro>.<kernel>.<arch>.rpm. In the file name, <distro> applies to the available distributions. LEL5 represents Red Hat Enterprise Linux 5, LEL6 represents Red Hat Enterprise Linux 6, LSES10 represents SuSE Enterprise Linux 10, and LSES11 represents SuSE Enterprise Linux 11. <kernel> indicates the kernel for which the build was compiled. <arch> is i386 for 32 bit architecture and x86_64 for AMD 64 bit architecture. Here is an example of a build created for the Red Hat Enterprise Linux 6 version, solidifier kmod LEL el6.i686.i386.rpm. The build is created and stored in the <install directory>/dks directory. To reuse the build on an alternate endpoint, place the build file in the /opt/solidcore directory of the target endpoint. Install in the Interactive mode In the interactive mode, the installer launches an installation wizard that guides you through the installation. Using the interactive mode you can install the software on the Windows and AIX platforms. Note that the interactive mode is unavailable for the Linux platform. On the Windows platform Use this task to install the software in interactive mode on a Windows system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Perform one of the following tasks. On the Windows Vista, Windows 2008, Windows 2008 R2, and Windows 7 (with UAC enabled) platforms, right click on the installer file in Windows Explorer and select Run as Administrator. On other Windows platforms, double click the installer file in the Windows Explorer to begin the installation. The Welcome page is displayed. 12 McAfee Change Control and McAfee Application Control Installation Guide

13 Install the software Install in the Interactive mode 1 4 Click Next The License Agreement page is displayed. 5 Accept the terms of the license agreement and click Next. The Customer Information page is displayed. 6 Enter the user and company information. 7 Perform one of the following steps and click Next. Enter the license key in the Serial Number field. Select the Install without license key option to specify the license key after installation by using the license command. The Destination Folder page is displayed. 8 Specify the installation folder. 1 Perform one of the following steps. Accept the default installation location. By default, the software files are placed in the <system drive>:\program Files\McAfee\Solidcore folder. Modify the installation folder by clicking Change. In the dialog box, specify a folder path name (up to 240 characters). 2 Optionally, perform one or all of the following steps if you are using any Windows platform. By default, a desktop shortcut for McAfee Solidifier Command Line is created. Deselect the Create Desktop Shortcut option if you do not want to create the shortcut. To perform post installation configuration, you can run a batch file (containing commands) or an executable file. The specified file is launched automatically after the software is installed on the system. Click Browse to specify the file to run. 3 Click Next. The Ready to Install the Program page is displayed. 9 Click Install to begin the installation. 10 Click Finish to exit the installation wizard. On the AIX platform Use this task to install the software in interactive mode on an AIX system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Execute the following command to run the installer. #./solidifier <rel> <build> aix <arch>.bin A message indicating the start of the installation is displayed Welcome to the McAfee Solidifier Setup Wizard Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation. Press [Enter] to continue : McAfee Change Control and McAfee Application Control Installation Guide 13

14 1 Install the software Install in the Interactive mode 4 Press Enter. The McAfee End User License Agreement is displayed. 5 Press Enter until you view all pages of the agreement. A message prompting you to accept the agreement is displayed. Do you accept this license? [y/n]: 6 Read the agreement carefully and type Y or y to accept the agreement. Alternatively, type N or n to exit the installation process. A message prompting you to specify the installation path is displayed. Install Path Please enter the path where you wish to install McAfee Solidifier. Install path for McAfee Solidifier [/usr/local]: 7 Perform one of the following tasks. Press Enter to accept the default installation path (/usr/local/mcafee/solidcore). Specify the installation path A message prompting you to specify the license key is displayed. Product license key: Please enter the product license key: License key for the product (Press ENTER to skip this step and add license key after installation) [ ] 8 Perform one of the following tasks. Enter the license key then press Enter. Press Enter to specify the license key after installation by using the sadmin license add command. The following message is displayed. Setup is now ready to begin installing McAfee Solidifier on your computer Do you want to continue? [Y/N]: 9 Type Y or y or press Enter to proceed with the installation. Alternatively, type N or n to abort installation. The installation begins. The following message is displayed after successful installation of the product. Setup has finished installing McAfee Solidifier on your computer. 14 McAfee Change Control and McAfee Application Control Installation Guide

15 Install the software Install in the silent mode 1 Install in the silent mode To perform a silent installation, use the provided command line options to suppress all interaction and provide parameters for all options. When you perform a silent installation, no messages are displayed. Instead, a log file captures the installation information, including whether the installation was successful. You can review the log file and determine the results of installation. Using the silent mode you can install the software on the Windows, AIX, and Linux platforms. On the Windows platform Use this task to install the software in silent mode on a Windows system. Task 1 Log on to the system with administrative privileges. 2 Ensure that the required installer is available. McAfee Change Control and McAfee Application Control Installation Guide 15

16 1 Install the software Install in the silent mode 3 Open a command window. 4 Execute one of the following commands <installer file> /s /v" /qn SERIALNUMBER=xxxx xxxx xxxx xxxx xxxx" Or <installer file> /s /v" /qn UNLICVER=1" Notice the double quotes (") after /v and space between /s and /v. There is no space between /v and double quotes ("). Here is description of all possible arguments for the command. In addition to the SERIALNUMBER or UNLICVER arguments, you can optionally specify one or more of the following arguments with the command. Argument Description SERIALNUMBER Allows you to specify the license key for the installation. Here is an example. <installer file> /s /v" /qn SERIALNUMBER=xxxx xxxx xxxx xxxx xxxx" UNLICVER SHORTCUT POSTINSTALL INSTALLDIR /l+*v Allows you to install the software without specifying the license key. You can enter the license key by using the license command after installation. Possible values for the argument UNLICVER are 0 and 1. A value of 1 indicates that you are installing the software without using the license key. Here is an example. <installer file> /s /v" /qn UNLICVER=1" Allows you to create a desktop shortcut to access the command line tool. To skip the creation of the shortcut, assign 0 to the SHORTCUT argument. To create the shortcut, either do not provide the SHORTCUT argument or assign it the value 1. Here is an example: <installer file> /s /v" /qn UNLICVER=1 SHORTCUT=1" Allows you to specify a file to perform post installation configuration. The specified file is used for configuration after the software is installed on the system. To specify file paths that contain spaces, enclose the paths in double quotes ("). Here is an example. <installer file> /s /v" /qn UNLICVER=1 POSTINSTALL=\"C:\\My Dir\ \batch.exe\"" Allows you to install the software at a user specified location. With the INSTALLDIR argument, you can specify a folder path name of up to 240 characters only (total string length including special characters). Here is an example. <installer file> /s /v" /qn SERIALNUMBER=xxxx xxxx xxxx xxxx xxxx INSTALLDIR=\"C:\\My Dir\\McAfee\\Solidcore\"" Allows you to change the default location of the S3Setup.log file. By default, the S3Setup.log file is placed in the SYSTEMROOT directory. Alter the location of this file by using the /l+*v argument. Here is an example. <installer file> /s /v" /qn UNLICVER=1 /l+*v \"C:\\S3Setup.log\"" On the Linux platform Use this task to install the software in silent mode on a Linux system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Extract the contents of the Solidcore client package file. 16 McAfee Change Control and McAfee Application Control Installation Guide

17 Install the software Install in the silent mode 1 4 Optionally, reuse a pre compiled build to install the software by placing the build in the /opt/ solidcore directory of the target endpoint. For more information on how to reuse builds, see the Understand the Linux installation workflow section. 5 Run the mapkg_install script file../mapkg_install.sh The installation script performs installation related tasks. By default, the software is installed in the /usr/local/mcafee/solidcore directory. 6 Review the log file. If the installation succeeds, the solidcores3_install.log file is created in the /var/log/ mcafee/solidcore directory. If the installation fails, the solidcores3_install.log file is present in the /tmp directory. To further investigate installation failures, contact McAfee Support ( mysupport.mcafee.com/ or +1(408) ) with the log file. On the AIX platform Use this task to install the software in silent mode on an AIX system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Execute the following command to run the installer../solidifier <rel> <build> aix <arch>.bin mode unattended You can specify the following optional parameters while running the installer. Parameter Description licensekey Allows you to specify the license key during installation. Here is an example. #./solidifier aix ppc32.bin mode unattended licensekey If you install the product without specifying the license key, you can enter the license key later by using the sadmin license add command. prefix optionfile Allows you to install the product at a user specified location. Here is an example. #./solidifier aix ppc64.bin mode unattended prefix /usr/ john/myapps Allows you to use an ASCII file to specify all installation options. Here is an example. #./solidifier <rel> <build> aix <arch>.bin optionfile /usr/john/ myopfile The ASCII file must include the installer options in the following syntax: mode=unattended [ licensekey=<licensekey> ] [ prefix=<pathname> ] Here is an example of an options file. mode=unattended licensekey= prefix=/usr/john/ myapps McAfee Change Control and McAfee Application Control Installation Guide 17

18 1 Install the software Verify the installation Verify the installation After you complete installation, verify that the Change Control or Application Control software was installed successfully. On the Windows platform Use this task to verify that the software was installed successfully on a Windows system. After successful completion of the installation process: An entry for McAfee Solidifier is added to the Programs menu. The swin.sys file is added to the %SystemRoot%\System32\Drivers location. The McAfee Solidifier Service is added under Windows services. Product specific registry settings are created: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swin HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\scsrvc Additional files are placed in the install directory. These files are internal to the product and should not be modified. S3Setup.log file is created under %SYSTEMROOT%. You can view the log file contents to verify if any errors occurred during the installation process. On the Linux and AIX platforms Use this task to verify that the software was installed successfully on a Linux or AIX system. Task 1 Run the command to verify that the Solidcore product is reported in the package database of the system. Operating system Linux AIX Command # rpm q solidcores3 solidcores3 kmod The following messages are displayed. solidcores3 <rel> <build> solidcores3 kmod <rel> <build> # lslpp l solidcores3 The following messages are displayed. Fileset Level State Description Path: /usr/lib/objrepos solidcores3 <rel>.<build> COMMITTED McAfee Solidifier for AIX, <rel>.<build>. 2 Run the command to verify that the solidcore.conf file is created in /etc directory during installation. # ls ls /etc/mcafee/solidcore/solidcore.conf 18 McAfee Change Control and McAfee Application Control Installation Guide

19 Install the software Verify the installation 1 3 Execute the command to ensure that the software service (scsrvc) is added to the system. Operating system Linux AIX Command # ls ls /etc/init.d/scsrvc # ls ls /etc/scsrvc 4 Execute the following command to verify that the software service (scsrvc) is running. # ps ef grep scsrvc The output of this command should show at least two scsrvc processes running from the installation location. 5 Ensure the product files are placed in the installation directory. # ls ls <install dir> McAfee Change Control and McAfee Application Control Installation Guide 19

20 1 Install the software Verify the installation 20 McAfee Change Control and McAfee Application Control Installation Guide

21 2 Upgrade 2 the software This section describes how to upgrade Change Control or Application Control in the standalone mode. You can upgrade the software in one of these modes. Mode Description Interactive mode In the interactive mode, the installer launches an installation wizard that guides you through the upgrade process. Silent mode Contents During silent or non interactive upgrade, no progress bar or messages are displayed. Instead, a log file captures Silent mode information, including whether the upgrade was successful. You can then review the log file and determine the results of upgrade. Silent upgrade is recommended for medium and large scale deployments. Before you begin Upgrade in the interactive mode Upgrade in the silent mode Verify the upgrade Before you begin Before upgrading Change Control or Application Control, review the following guidelines and ensure that your environment conforms to these requirements. Upgrade is possible only at the existing installation location. Note that upgrading to an alternate path is not supported. Upgrade is supported in the Update and Disabled mode. However, it is recommended that you perform the upgrade in Update mode. If for some reason, you upgrade in Disabled mode, ensure you recreate the whitelist for the endpoint when using the Application Control software. Also, on the Windows platform, restart the system after you upgrade the software. Application Control also supports the Observe mode. However, this mode is unavailable in the standalone configuration and is available only when the system is managed by McAfee epo. Note that the default rule list (as available in a fresh installation) is not imported on upgrade. All existing monitoring, filter, read protect, and write protect rules applied before upgrade remain intact. Review the release notes to acquaint yourself with the known issues and identify dependencies you need to consider. Ensure the following build and packaging tools are present on your Linux systems. For successful installation of Change Control or Application Control on the Linux operating system (when a pre compiled build is unavailable), a build environment is required on the endpoint. Before McAfee Change Control and McAfee Application Control Installation Guide 21

22 2 Upgrade the software Upgrade in the interactive mode installing the software, ensure all Linux systems in your setup conform to these requirements. Note that any non conformance to the listed build environment will result in build and installation failures. Ensure the following build and packaging tools are installed on the endpoint system: gmake (provided by package make) gcc (provided by package gcc) ld (provided by package binutils) ar (provided by package binutils) rpmbuild (provided by package rpm build on Red Hat and package rpm on SUSE) cpio (provided by package cpio) Ensure the Kbuild framework is installed under /lib/modules/<kernelversion>/build/ (provided by package kernel source on SUSE 10 and package kernel devel on rest of the distributions). Ensure the installed packages match the running kernel. We recommend that you ensure that the installed package versions are the same as the versions that are packaged with the distribution ISO. Upgrade in the interactive mode Using the interactive mode you can upgrade the software on the Windows and AIX platforms. On the Windows platform Use this task to upgrade the software in the interactive mode on a Windows system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Switch to the Update mode. > sadmin begin update If your system is currently in Disabled mode, you can choose to upgrade in the current mode. 4 Perform one of the following tasks. On the Windows Vista, Windows 2008, Windows 2008 R2, or Windows 7 (with UAC enabled) platforms, right click on the installer file in Windows Explorer and select Run as Administrator. On other Windows platforms, double click the installer file in Windows Explorer to begin the installation. A message box prompts you to confirm if you want to upgrade the software. Click Yes to proceed. The Resuming Installation for McAfee Solidifier page is displayed. 5 Click Next. The upgrade process begins. When the upgrade is complete, the Update Complete page is displayed. 22 McAfee Change Control and McAfee Application Control Installation Guide

23 Upgrade the software Upgrade in the interactive mode 2 6 Click Finish. The McAfee Solidifier Installer Information message box prompts you to restart the system. 7 Click Yes. The system is restarted. 8 Exit the Update mode. > sadmin end update This places the system in Enabled mode. On the AIX platform Use this task to upgrade the software in the interactive mode on an AIX system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Switch to the Update mode. # sadmin begin update If your system is currently in Disabled mode, you can choose to upgrade in the current mode. 4 Execute the installer by using the following command. #./solidifier <rel> <build> aix <arch>.bin The following message is displayed. McAfee Solidifier is in update mode. Press [Enter] to continue: 5 Press Enter. The McAfee End User License Agreement is displayed. 6 Press Enter until you view all pages of the agreement. A message prompting you to accept the agreement is displayed. Do you accept this license? [y/n]: 7 Read the agreement carefully and type Y or y to accept the agreement. Alternatively, type N or n to exit the upgrade process. A message prompting you to choose the next action is displayed Solidifier is already installed. Please select the option: [1] Exit [2] Upgrade Please choose an option [1] McAfee Change Control and McAfee Application Control Installation Guide 23

24 2 Upgrade the software Upgrade in the silent mode 8 Type 2 to proceed with the upgrade process. Be careful after this step. Canceling or interrupting the upgrade process (by pressing [Ctrl] + [C]) may leave the existing installation in an inconsistent state. The following message is displayed. Reboot Required Please reboot your system after the upgrade for changes to take effect. Press [Enter] to continue: 9 Press Enter. The following message is displayed on the screen. Setup is now ready to begin installing McAfee Solidifier on your computer. Do you want to continue? [Y/N]: 10 Type Y or y or press Enter to proceed with the upgrade process. On successful upgrade of the product, the following message is displayed. Setup has finished installing McAfee Solidifier on your computer. 11 Exit the Update mode. # sadmin end update 12 Restart the endpoint to complete the upgrade process. Upgrade in the silent mode To perform a silent upgrade, use the command line options provided to suppress interaction and provide parameters for all options. Using the silent mode you can upgrade the software on the Windows, AIX, and Linux platforms. On the Windows platform Use this task to upgrade the software in silent mode on a Windows system. Task 1 Ensure that the required installer is available. 2 Switch to the Update mode. > sadmin begin update If your system is currently in Disabled mode, you can choose to upgrade in the current mode. 3 Open a command window. 24 McAfee Change Control and McAfee Application Control Installation Guide

25 Upgrade the software Upgrade in the silent mode 2 4 Execute one of the following commands. Note the double quotes (") after /v and space between /s and /v. There is no space between /v and double quotes ("). <installer file> /s /v" /qn SERIALNUMBER=xxxx xxxx xxxx xxxx xxxx" Or <installer file> /s /v" /qn UNLICVER=1" Here is description of all possible arguments for the command. In addition to the SERIALNUMBER or UNLICVER arguments, you can optionally specify one or more of the following arguments with the command. Parameter Description SERIALNUMBER Allows you to specify the license key for the software. Here is an example. <installer file> /s /v" /qn SERIALNUMBER=xxxx xxxx xxxx xxxx xxxx" UNLICVER SHORTCUT POSTINSTALL INSTALLDIR /l+*v Allows you to install the software without specifying the license key. You can enter the license key by using UNLICVER the license command after installation. Possible values for the argument are 0 and 1. A value of 1 indicates that you are installing the software without using the license key. Here is an example. <installer file> /s /v" /qn UNLICVER=1" Allows you to create a desktop shortcut to access the command line tool. To skip the creation of the SHORTCUT shortcut, assign 0 to the SHORTCUT argument. To create the shortcut, either do not provide the SHORTCUT argument or assign it the value 1. Here is an example. <installer file> /s /v" /qn UNLICVER=1 SHORTCUT=1" Allows you to specify a file to perform post installation configuration. The specified file is used for POSTINSTALL configuration after the software is installed on the system. To specify file paths that contain spaces, enclose the paths in double quotes ("). Here is an example. <installer file> /s /v" /qn UNLICVER=1 POSTINSTALL=\"C:\\My Dir\ \batch.exe\"". Allows you to install the software at a user specified location. With the INSTALLDIR argument, you can INSTALLDIR specify a folder path name of up to 240 characters only (total string length including special characters). Here is an example. SERIALNUMBER=xxxx xxxx xxxx xxxx xxxx INSTALLDIR=\"C:\\My Dir\\McAfee\\Solidcore\"" Allows you to change the default location of the S3Setup.log file. By default, the S3Setup.log file is /l+*v placed in the SYSTEMROOT directory. Alter the location of this file by using the /l+*v argument. Here is an example. <installer file> /s /v" /qn UNLICVER=1 /l+*v \"C:\\S3Setup.log\"" 5 Restart the endpoint to complete the upgrade process. 6 Exit the Update mode. > sadmin end update This places the system in Enabled mode. McAfee Change Control and McAfee Application Control Installation Guide 25

26 2 Upgrade the software Upgrade in the silent mode On the Linux platform Use this task to upgrade the software in silent mode on a Linux system. Task 1 Log on to the system with administrative privileges 2 Navigate to the directory containing the installer file. 3 Switch to the Update mode. # sadmin begin update If your system is currently in Disabled mode, you can choose to upgrade in the current mode. 4 Run the mapkg_install script file../mapkg_install.sh The script file performs all upgrade related tasks. The upgrade workflow is similar to the installation workflow. For detailed information on the workflow, see the Understand the Linux installation workflow section. 5 Review the log file. If the upgrade succeeds, the solidcores3_install.log file is created in the /var/log/mcafee /solidcore directory. If the upgrade fails, the solidcores3_install.log file is present in the /tmp directory. To further investigate installation failures, contact McAfee Support ( mysupport.mcafee.com/ or +1(408) ) with the log file and gatherinfo logs. 6 Restart the endpoint to complete the upgrade process. 7 Exit the Update mode. # sadmin end update This places the system in Enabled mode. On the AIX platform Use this task to upgrade the software in silent mode on an AIX system. Task 1 Log on to the system with administrative privileges. 2 Navigate to the directory containing the installer file. 3 Switch to the Update mode. # sadmin begin update If your system is currently in Disabled mode, you can choose to upgrade in the current mode. 26 McAfee Change Control and McAfee Application Control Installation Guide

27 Upgrade the software Verify the upgrade 2 4 Execute the following command to run the installer../solidifier <rel> <build> aix <arch>.bin mode unattended You can specify the following optional parameters while running the installer. Parameter Description licensekey Allows you to specify the license key during installation. Here is an example. #./solidifier aix ppc32.bin mode unattended licensekey If you install the product without specifying the license key, you can enter the license key later by using the sadmin license add command. optionfile Allows you to use an ASCII file to specify all installation options. Here is an example. #./solidifier <rel> <build> aix <arch>.bin optionfile /usr/john/ myopfile The ASCII file must include the installer options in the following syntax: mode=unattended [ licensekey=<licensekey> ] [ prefix=<pathname> ] Here is an example of an options file. mode=unattended licensekey= prefix=/usr/john/ myapps 5 Restart the endpoint to complete the upgrade process. 6 Exit the Update mode. # sadmin end update This places the system in Enabled mode. Verify the upgrade Use this task to verify that the Change Control or Application Control software was upgraded successfully on the system. On the Windows platform Run the sadmin version command to verify that the correct version the software is listed. On the Linux platform Run the command to verify that the solidcore product is reported in the package database of the system. # rpm q solidcores3 solidcores3 kmod The following messages are displayed. solidcores3 <rel> <build> solidcores3 kmod <rel> <build> On the AIX platform Run the command to verify that the solidcore product is reported in the package database of the system. McAfee Change Control and McAfee Application Control Installation Guide 27

28 2 Upgrade the software Verify the upgrade # lslpp l solidcores3 The following message is displayed. Fileset Level State Description Path: /usr/lib/objrepos solidcores3 <rel>.<build> COMMITTED SolidcoreS3 McAfee Solidifier for AIX, <rel>.<build> 28 McAfee Change Control and McAfee Application Control Installation Guide

29 3 Uninstall 3 the software This section describes how to uninstall Change Control or Application Control. Contents Uninstall in the interactive mode Uninstall in the silent mode Uninstall in the interactive mode In the interactive mode, the installer launches an installation wizard that guides you through the uninstallation. Using the interactive mode you can uninstall the software on the Windows and AIX platforms. On the Windows platform Use this task to remove the software from a Windows system using the interactive mode. Task 1 Log on to the system with administrative privileges. 2 Switch to the Disabled mode. > sadmin disable Disabling the software requires a system reboot. 3 Perform one of the following steps: a On Windows Vista and Windows 7 platforms, navigate to and open the Programs and Features window. b On other Windows platforms, navigate to and open the Add or Remove Programs window. 4 Select McAfee Solidifier from the list of programs and click Remove. A message box prompts you to confirm if you want to remove the software. 5 Click Yes to proceed. The software is removed from the system. During uninstallation all software related files are removed from the system, except the following: Empty Solidcore folder in the installation directory (typically, C:\Program Files\McAfee) Certificate folder if it contains any public certificate If needed, you can manually delete the afore mentioned components. McAfee Change Control and McAfee Application Control Installation Guide 29

30 3 Uninstall the software Uninstall in the silent mode On the AIX platform Use this task to remove the software from an AIX system using the interactive mode. Task 1 Log on to the system with administrative privileges. 2 Switch to the Disabled mode. # sadmin disable Disabling the software requires a system reboot. 3 Navigate to the installation directory. 4 Execute the command to uninstall the software. #./uninstall The following message appears on the screen. Do you want to uninstall McAfee Solidifier and all of its modules? [Y/n]: 5 Type Y or y or press Enter to proceed with the uninstall process The uninstallation begins. The following message is displayed after the product is uninstalled. Info: Uninstallation completed Press [Enter] to continue: 6 Press Enter. Uninstall in the silent mode To perform a silent uninstall, use the command line options provided to suppress interaction and provide parameters for all options. Using the silent mode you can uninstall the software on the Windows, AIX, and Linux platforms. On the Windows platform Use this task to remove the software from a Windows system using the silent mode. Task 1 Log on to the system with administrative privileges. 2 Switch to the Disabled mode. > sadmin disable Disabling the software requires a system reboot. 3 Open a command window. 4 Enter the following command. %SYSTEMROOT%\system32\msiexec.exe /X{432DB9E F 9ADB 61E8782F4593} /qn 30 McAfee Change Control and McAfee Application Control Installation Guide

31 Uninstall the software Uninstall in the silent mode 3 On the Linux platform Use this task to remove the software from a Linux system using the silent mode. Task 1 Log on to the system with administrative privileges. 2 Switch to the Disabled mode. # sadmin disable Disabling the software requires a system reboot. 3 Navigate to the installation directory. By default, the software is installed in the /usr/local/mcafee/solidcore directory. 4 Execute the command to uninstall the software. #./uninstall On the AIX platform Use this task to remove the software from an AIX system using the silent mode. Task 1 Log on to the system with administrative privileges. 2 Switch to the Disabled mode. # sadmin disable Disabling the software requires a system reboot. 3 Navigate to the installation directory. 4 Execute the command to uninstall the software. #./uninstall mode unattended McAfee Change Control and McAfee Application Control Installation Guide 31

32 3 Uninstall the software Uninstall in the silent mode 32 McAfee Change Control and McAfee Application Control Installation Guide

33 A FAQs Here are answers to frequently asked questions. Can the same Solidcore client be used for Change Control and Application Control? The license key determines the features available for use; any or all features can be used at a time. At any time, you can add and enable a new stock keeping unit (SKU) on an endpoint on which the Solidcore client is enabled. For example, if you are currently using Change Control and wish to add and use Application Control, complete these steps. Disable the Solidcore client on the endpoint. Enter the license. Enable the Solidcore client on the endpoint. Can the Solidcore client be deployed on a Virtual Machine? The Solidcore client works on a Virtual Machine if the operating system installed on the Virtual Machine is supported by the Solidcore client. For a list of the supported platforms, see KB I installed the software in standalone mode (without specifying the license key during installation). Can I now use McAfee epo to manage the endpoint? Yes. For detailed information, refer to the KB69408 (for Windows) or KB74077 (for Linux or AIX) article. How can I manually remove the Solidcore client in case of an unclean uninstallation on a Windows system? Perform the following the steps to clean the Windows system: 1 Switch to the Disabled mode. > sadmin disable Disabling the software requires a system reboot. 2 Disable McAfee VSE Access Protection, if installed. 3 Open a command window. 4 Execute the following commands: sc stop scsrvc sc delete scsrvc sc delete swin 5 If the system is managed by McAfee epo perform the following steps. a Open the Registry Editor. b Delete the HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\SOLIDCOR5000_WIN key McAfee Change Control and McAfee Application Control Installation Guide 33