Access Control System ACCO NET Installation Manual

Transcription

1 Access Control System ACCO NET Installation Manual system version 1.5 acco_net_i_en 11/18 SATEL sp. z o.o. ul. Budowlanych Gdańsk POLAND tel

2 SATEL aims to continually improve the quality of its products, which may result in changes in their technical specifications and software. Current information about the changes being introduced is available on our website. Please visit us at: The following symbols may be used in this manual: - note, - caution.

3 CONTENTS 1. General Software components System architecture Network requirements Suggested hardware requirements Installation of the ACCO NET system software Installing the Debian operating system Installing the server environment and ACCO NET system Installing the ACCO NET system with remote database Preparing the database for remote connection Installing a remote database Installing the ACCO-NT Conf / ACCO Soft / Map Editor programs Configuring the settings ACCO NET system components (without ACCO-WEB) ACCO-WEB application Useful commands Starting help for the installation script Updating the ACCO NET system software to version Checking the currently installed system version System update procedure Transferring the ACCO NET system to a new device System transfer procedure Deleting databases Exporting databases Copying databases from the old system to a new one Importing databases ACCO NET system update after importing databases... 66

4 2 ACCO NET SATEL 1. General The ACCO NET access control system is designed for protection of buildings against access by unauthorized persons. The ACCO NET system is made up of software and SATEL's devices (access control panels, access control modules, expansion modules, keypads, proximity card readers, etc.). This manual covers installation of the software which enables configuration and then management of the system (in version 1.5). It also describes the ACCO NET update procedure as well as the method of transferring the databases to the updated system. The system may include many objects with any number of access control panels. Communication with the control panels takes place via the Ethernet network. 2. Software components For the ACCO NET (version 1.5) system to operate, the Debian operating system is required. Installation of the Debian 8 ( jessie ) system for the 64-bit PC (amd64) architecture is described further in this manual, but if it has already been installed, you may skip this section. The software necessary for proper operation of the system is offered as an installation package which includes: 1. server environment software. It is not developed by the SATEL company (addresses of websites on which licenses for each of the programs are available are given in parentheses as at September 2018): Apache ( PHP ( MySQL and JDBC MySQL ( Java and JAVA SE ( ModSecurity ( Fail2Ban ( MariaDB ( Wildfly ( Please remember to legalize the server environment required by the system. If you have already installed these programs, you may skip installation thereof. 2. ACCO NET access control system firmware: ACCO Server program enabling data exchange between the access control panels, database, and the ACCO Soft and ACCO-WEB programs, ACCO DB database to which all system related data are saved, including configuration and events, ACCO-EE JavaEE component providing map data, ACCO-WEB application for remote management and operation of the system, ACCO-NT Conf installation file for the network settings configuration program (for more information on the program and how it should be used, refer to the ACCO-NT control panel installation manual), ACCO Soft installation file for the system configuration program, Map Editor installation file for the object map creating program. The system owner / administrator is obliged to carry out the diagnosis of errors, ongoing supervision and backup of the program and database with the frequency

5 SATEL ACCO NET 3 consistent with generally accepted practices (daily, weekly and monthly backups). This will ensure proper and reliable operation of the program, in particular the possibility of full and immediate recovery of all data from backups without incurring excessive costs. Considering this obligation of the system owner / administrator, SATEL is not responsible for the loss of data or costs resulting from the recovery of distorted or lost data by the owner / administrator of the system. 3. System architecture Fig. 1. An example of the ACCO NET system, in which the ACCO Server and database have been installed on one computer (the settings are shown just for illustration). The ACCO NET system can be installed on one device. Alternatively, it can be shared by multiple devices, in which case distributed architecture will be used. The ACCO Soft application for system configuration can be installed on several devices. All you need to use the ACCO-WEB application for remote management of the system is the web browser

6 4 ACCO NET SATEL running on your computer, smartphone or tablet. An example of the ACCO NET system is shown in Fig Network requirements Internet protocol version 4 (TCP/IPv4). IP address for each connected ACCO-NT control panel. If the ACCO-WEB application is to be accessible from another subnet, the web port (https; default: 443), on which communication between ACCO Server and ACCO-WEB application is to take place, should be redirected. If the ACCO Soft program is to be accessible from another subnet, the following ports should be redirected: RMI port (default: 2500), on which communication between ACCO Server and ACCO Soft program is to take place, DB port (default: 3306), on which communication between ACCO Server and database is to take place. Despite the standard encryption techniques (SSL) being used by Satel, if the ACCO NET system is connected to a public network, additional security measures must be used, including e.g. a firewall, intrusion detection and prevention systems (IDS / IPS). 5. Suggested hardware requirements Hardware requirements for the device on which the ACCO NET access control system will be installed depends on the system size: exemplary system 1 (1 ACCO-NT control panel, 30 access control modules, 30 users) RAID (redundant array of inexpensive disks) level 1 (requires at least two hard drives), 4 GB of RAM memory, processor: Intel Core i3 or AMD A4, network card, Fast Ethernet standard, Debian 8 ( jessie ) operating system for the 64-bit PC (amd64) architecture. exemplary system 2 (3 ACCO-NT control panels, 100 access control modules, 300 users) RAID (redundant array of inexpensive disks) level 5 (requires at least three hard drives), 8 GB of RAM memory, processor: Intel Xeon or AMD Opteron, network card, Fast Ethernet standard, Debian 8 ( jessie ) operating system for the 64-bit PC (amd64) architecture. Components of the device on which the access control system will be installed must meet the requirements of the Debian 8 operating system ( jessie ) for the 64-bit PC architecture (amd64). One of the installed disks must have at least 7 GB of free space for installation of the ACCO NET system. The size of the remaining disks to be installed must be selected taking into account the following: number of events generated in the system (2 to 5 millions events will occupy 1 GB),

7 SATEL ACCO NET 5 number of users simultaneously running the ACCO Soft program or ACCO-WEB application, size of graphic files assigned to the maps, size of user photographs, length of defined names of objects, control panels, controllers, expanders, partitions and users. 6. Installation of the ACCO NET system software 6.1 Installing the Debian operating system It is recommended that the Debian operating system be installed on a computer / virtual machine, where no other operating system is installed. The computer(s) / virtual machine(s) on which the ACCO NET system and database are to be installed must have access to the Internet. The Debian 8 ( jessie ) system for 64-bit PC (amd64) architecture is required. Below, we present an example installation of the Debian operating system version On the website, select the appropriate image amd64 from among the CD netinst images and save it to the hard disk. Having downloaded the ISO image, burn it to a CD or another carrier, e.g. a pendrive. 2. Insert the burned CD into the computer optical disk drive or the pendrive into the computer USB port. The splash screen of Debian system installer will be displayed. 3. Select the Install command and press ENTER.

8 6 ACCO NET SATEL 4. Select the language to be used for the installation process and press ENTER. 5. Select the location and press ENTER.

9 SATEL ACCO NET 7 6. Select the keyboard layout language and press ENTER. 7. Windows indicating the installation progress will be displayed successively. 8. Enter the host name to configure the network and press ENTER.

10 8 ACCO NET SATEL 9. Enter the domain name and press ENTER. 10. Define the password for the administrator (login: root) and press ENTER.

11 SATEL ACCO NET Repeat the password and press ENTER. 12. Give a name to the user (your additional account) and press ENTER. The satel user name shown on the screenshot is just an example.

12 10 ACCO NET SATEL 13. Enter the name for the new account (e.g. satel ) and press ENTER. 14. Enter the new user password and press ENTER.

13 SATEL ACCO NET Re-enter the password and press ENTER. 16. At the disk partitioning stage, select the Guided use entire disk and press ENTER.

14 12 ACCO NET SATEL 17. When a command prompt to specify the disk to be partitioned is displayed, press ENTER. 18. Select the All files in one partition (recommended for new users) partitioning method and press ENTER.

15 SATEL ACCO NET Select the Finish partitioning and write changes to disk option and press ENTER. 20. When a prompt appears asking whether you wish to save the changes, select Yes and press ENTER.

16 14 ACCO NET SATEL 21. Then a window will be displayed to show the progress of system installation. 22. Select the country for the http proxy server and press ENTER. 23. Select the archive name for http proxy server and press ENTER.

17 SATEL ACCO NET Do not enter any http proxy related data, but select Next and press ENTER. 25. Next windows indicating the installation progress will be displayed. 26. When the Configuration of popularity-contest package window is displayed, select one of the available options and press ENTER.

18 16 ACCO NET SATEL 27. Press repeatedly the space key to select software you want to install: SSH server and Standard system utilities (leave the other fields unselected). Then, press ENTER. 28. Windows indicating the progress of installation will be displayed successively.

19 SATEL ACCO NET When a prompt appears asking whether you wish to install the GRUB boot loader, select Yes and press ENTER. 30. Highlight the name of the master boot record of the first hard disk on which the GRUB boot loader will be installed and press ENTER.

20 18 ACCO NET SATEL 31. When information on installation completion is displayed, press ENTER. Restart of the system will follow. 6.2 Installing the server environment and ACCO NET system The server environment and the ACCO NET system can be installed using: a console running from the command line on a computer / virtual machine where the ACCO NET system is to be installed, SSH using, for example, the PuTTY program, if you connect remotely to a computer / virtual machine where the ACCO NET system is to be installed. If you connect remotely via SSH using the PuTTY program to the computer / virtual machine where the ACCO NET system is to be installed, change the PuTTY program settings before starting the installation procedure. In the main window, select in turn Connection, Data. In the Terminal-type string field, enter putty to change the terminal type. Then select in turn Window, Translation. In the Remote character set field, make sure UTF-8 is selected as the code page. Select Session and click on the Save button to confirm the changes. Below we present installation of the ACCO NET system from the command line. In the console window that will be displayed after the system restart, you can start installation of the ACCO NET system.

21 SATEL ACCO NET Enter the administrator login (root) and press ENTER. If you are logged in to the console as other user, enter the su command and press ENTER. 2. Enter the administrator password and press ENTER. 3. To download the installation package of ACCO NET system, enter the command: wget and press ENTER.

22 20 ACCO NET SATEL 4. Give permissions to run the installation package by entering the command: chmod 755 acco-installer-online.sh and press ENTER. 5. Run the installation package by entering the command:./acco-installer-online.sh i and press ENTER. Before starting the installation package, enter the acco-installer-online.sh h to open help for the installation script: (see section Starting help for the installation script ).

23 SATEL ACCO NET The dialog package is required for ACCO NET installation. Enter Y or y to install it. 7. Use the arrow keys to select the installation language. Then select Yes or press Y first, then ENTER. The screenshot below and the following windows show colorfully highlighted letters. Some consoles (e.g. Linux), after simultaneously pressing the highlighted letter and the ALT key, will allow you to execute the command to which the letter is assigned.

24 22 ACCO NET SATEL 8. The unzip package is required for ACCO NET installation. Select Yes and press ENTER to install it. 9. The next window will display additional information about the keys you can use during the system installation process: TAB key to move between the fields; SPACE key to select an element; ENTER key to activate the selected element; / keys to move left / right and between fields; / keys to move up / down and between fields; PageUp / PageDown keys to scroll through the lists and to move up / down. Select OK and press ENTER.

25 SATEL ACCO NET Information about progress of the installation will be displayed ([»] in progress; [ ] finished). At the screen header, in square brackets, the installation progress bar is displayed by means of asterisks [ _]. Such screens will be displayed several times during different stages of installation. Not all of them are mentioned. 11. Read the terms and conditions of the License Agreement for the ACCO Server program. To scroll through the text, use the PageDown / PageUp keys. 12. Select Yes and press ENTER if you accept the terms of the ACCO license agreement and want to proceed with the installation.

26 24 ACCO NET SATEL 13. Read the terms of the License Agreement for the ACCO-WEB application. To scroll through the text, use the PageDown / PageUp keys. 14. Select Yes and press ENTER if you accept the terms of the ACCO-WEB license agreement and want to proceed with the installation. 15. Select Yes and press ENTER to update the operating system packages.

27 SATEL ACCO NET Decide whether or not to install the system packages required for ACCO NET installation. If yes, select Continue and press ENTER. If no, highlight Interrupt and press ENTER, and then make the system ready for the ACCO NET installation manually. 17. Define whether database is to be installed locally or not. If it is to be installed locally, select Local database and press ENTER. If the database is to be installed on another device, select Remote database and press ENTER. 18. If the database is to be installed remotely, go to the Installing the ACCO NET system with remote database section.

28 26 ACCO NET SATEL 19. When the list of ACCO NET system components to be downloaded and installed at this stage of installation is displayed, select OK and press ENTER. 20. Configure the port settings for communication: Port ACCO-NT between ACCO Server and ACCO-NT control panels; Port ACCO Soft between ACCO Server and ACCO Soft program (RMI port); Port ACCO-WEB between ACCO Server ACCO-WEB application. Select Confirm and press ENTER.

29 SATEL ACCO NET Select the IP address of the device on which the ACCO Server program is installed. Select Confirm and press ENTER. 22. Information about the database configuration will be displayed. Check OK and press ENTER.

30 28 ACCO NET SATEL 23. Select the IP address of the device through which ACCO Server will connect to the databases. Select Confirm and press ENTER. 24. Select the IP address of the device through which ACCO Soft will connect to the databases. Select Confirm and press ENTER. 25. Configure the SSL certificate settings for connecting to the web server: Country code two-character country code; Province; City; Organization company name; Organization unit name of the company department; Host name name of the device on which the ACCO Server will be installed;

31 SATEL ACCO NET 29 address. Select Confirm and press ENTER. 26. Decide whether to download and install the ACCO-EE third party software required for ACCO NET installation or not. If so, select Yes and press ENTER. If you select No and then press ENTER, you will have to install these programs yourself.

32 30 ACCO NET SATEL 27. Addresses of websites where you can find the terms and conditions of third-party software licenses are given in the Software components section. Read them carefully and if you agree with them, select I accept / Continue installation and press ENTER. If you do not accept these conditions, select I don t accept / Exit installation and press ENTER. This will be tantamount to aborting the installation. 28. Information about the installation progress will be displayed.

33 SATEL ACCO NET Information about the ACCO Server status as well as version numbers of this program and the ACCO WEB application will be displayed. Select OK and press ENTER. 30. A summary of the installation process and the status of the installed ACCO NET system will be displayed. Select OK and press ENTER.

34 32 ACCO NET SATEL 31. The last screen will inform you that the installation process has been completed. 6.3 Installing the ACCO NET system with remote database For security reasons, you can not log into the system remotely as the root administrator. If you connect remotely to the system and you want to have root administrator's privileges, you must first log in as the user whose account you created, e.g. during installation of the system. Enter the su command and press ENTER. Then enter the administrator password and press ENTER.

35 SATEL ACCO NET Preparing the database for remote connection If you have decided to use a remote database in the ACCO NET system, then, before configuring its settings during installation, you need to perform the steps described below on the device on which the remote database will be installed. In this case, it is a device with the Debian operating system. Fig. 2. Example of the ACCO NET system in which ACCO Server is installed on one computer, and the database on the other (the settings are for illustration purpose only). 1. Update the list of packages in the APT repositories by entering the command: apt-get update if you are already logged in as an administrator; sudo apt-get update if you are logged in as another type of user and pressing ENTER. APT is a package management system used by the Debian operating system. 2. Upgrade the list of APT system packages by entering the command: apt-get upgrade if you are already logged in as an administrator;

36 34 ACCO NET SATEL sudo apt-get upgrade if you are logged in as another type of user and pressing ENTER. 3. Install the MySQL program by entering the command: apt-get install mysql-server if you are already logged in as an administrator; sudo apt-get install mysql-server if you are logged in as another type of user and pressing ENTER. 4. When the screen appears, create a password for the root administrator of the MySQL database. 5. Log in to the database by entering the command: mysql u root -p and pressing ENTER. 6. Enter the password for the user with root administrator privileges. 7. Grant the privileges to connect to the device on which ACCO Server is installed to the root administrator of the MySQL database by entering the command: GRANT ALL PRIVILEGES ON *. * TO IDENTIFIED BY password ; and pressing ENTER. Instead of password, enter the password created for the root administrator. 8. Grant the privileges to manage other users to the root administrator of the MySQL database by entering the command: GRANT USAGE ON *. * TO WITH GRANT OPTION; and pressing ENTER. 9. Refresh the settings of edited privileges by entering the command: FLUSH PRIVILEGES; and pressing ENTER. 10. Exit the database by entering the command: EXIT and pressing ENTER. 11. Allow remote access to the database by entering the command: nano /etc/mysql/my.cnf and pressing ENTER. 12. Change the part of the code bind-address = to a comment by typing # before it: # bind-address = Save your changes by pressing the Ctrl and O keys at the same time. Then press ENTER. 13. Exit the file by pressing the Ctrl and X keys at the same time. 14. Restart the MySQL program to enter new settings by entering the command: service mysql restart and pressing ENTER.

37 SATEL ACCO NET Installing a remote database If you have decided to use a remote database in the ACCO NET system, please follow the instructions below when installing the system: 1. Information about continuation of installation in the remote database mode will be displayed. 2. Configure the settings necessary for remote connection to the database: Host IP address of the device on which the remote database will be installed; Port number of the port for communication between ACCO Server and database (DB port); Login login of the (root) administrator of the MySQL database; Password password of the MySQL database administrator. Select Confirm and press ENTER.

38 36 ACCO NET SATEL 3. Confirm the addition of the accodb, accodb_temporary and essential databases. Select Yes and press ENTER.

39 SATEL ACCO NET When the list of ACCO NET system components to be downloaded and installed at this stage of installation is displayed, select OK and press ENTER. 5. Information about progress of the installation will be displayed ([»] in progress; [ ] finished). At the screen header, in square brackets, the installation progress bar is displayed by means of asterisks [ ]. Such screens will be displayed several times during different stages of installation. Not all of them are mentioned. 6. Configure the port settings for communication: Port ACCO-NT between ACCO Server and ACCO-NT control panels; Port ACCO Soft between ACCO Server and ACCO Soft program (RMI port); Port ACCO-WEB between ACCO Server and ACCO-WEB application.

40 38 ACCO NET SATEL Select Confirm and press ENTER. 7. Select the IP address of the device on which the ACCO Server program is installed. Select Confirm and press ENTER.

41 SATEL ACCO NET Information about the database configuration will be displayed. Select OK and press ENTER. 9. Select the IP address of the device (in this case other ) through which ACCO Server will connect to the databases. Select Confirm and press ENTER.

42 40 ACCO NET SATEL 10. Enter the IP address of the device through which ACCO Server will connect to the databases. Select Confirm and press ENTER. 11. Information about the progress of the installation will be displayed.

43 SATEL ACCO NET Select the IP address of the device (in this case other ) through which ACCO Soft will connect to the databases. Select Confirm and press ENTER. 13. Enter the IP address of the device through which ACCO Soft will connect to the databases. Select Confirm and press ENTER.

44 42 ACCO NET SATEL 14. When the screen for configuring the SSL certificate settings for the connection to the web server is displayed, proceed to step 25 in the Installing the server environment and ACCO NET system section and follow the system installation procedure as described in the next sections. 6.4 Installing the ACCO-NT Conf / ACCO Soft / Map Editor programs 1. Start the web browser. Enter the address: of the device on which the ACCO Server is installed] and log into the ACCO-WEB application as the Administrator (default login: admin ; default password: admin ). 2. Click on the Programs command in the menu on the left side of the screen. Links to the installation files of ACCO-NT Conf, ACCO Soft and Map Editor programs will be displayed. 3. Click on the selected link to download, and then install the required program. 7. Configuring the settings In the console window, you can configure the settings of the ACCO NET system components. 7.1 ACCO NET system components (without ACCO-WEB) If you wish to display the contents of configuration file of the ACCO NET system components (without the ACCO-WEB application), enter in the console window the following command: cat /etc/acco/server.conf and press ENTER. If you wish to edit the contents of that configuration file, enter the command: nano /etc/acco/server.conf and press ENTER. Presented below is the contents of the ACCO NET system components (without the ACCO-WEB application configuration file, based on the ACCO NET system shown in Fig. 1. In the square brackets, the meanings of individual lines are given. dbhost= dbename=essential dbname=accodb dbuser=accoweb dbpassword= 1db4e9f4e7d6ea6366b64e3becb6314d dbport=3306 serverport=8999 rmipublichost= [IP address / name of device on which the database is installed with privileges to connect to the ACCO Server program] [name of essential database] [name of accodb database] [name of user having access to the database] [password of user having access to the database] [number of network port (DB port) on which communication between ACCO Server and database will take place] [number of network port on which communication between ACCO Server and ACCO-NT control panel will take place] [public IP address / name of the device on which ACCO Server is installed]

45 SATEL ACCO NET 43 rmiport=2500 rmiport_www=inet:2501 dbhostsoft= [number of network port (RMI port) on which communication between ACCO Server and ACCO Soft program will take place] [number of network port on which communication between ACCO Server and ACCO-WEB application will take place] [IP address / name of device on which the database is installed with privileges to connect to the ACCO Soft program] 7.2 ACCO-WEB application If you wish to display the contents of configuration file of ACCO-WEB application, enter in the console window the command: cat /var/www/html/satel/protected/config/servers.php and press ENTER. If you want to edit the contents of that configuration file, enter the command: nano /var/www/html/satel/protected/config/servers.php and press ENTER. Presented below is the contents of ACCO WEB application configuration file, based on the ACCO NET system shown in Fig. 1. In the square brackets, the meanings of individual lines are given. const DATABASE_NAME = accodb const ESSENTIAL_DATABASE_NAME = essential const DATABASE_IP = const DATABASE_USER = accoweb const DATABASE_PASSWORD = 1db4e9f4e7d6ea6366b64e3becb6314d const RMI_IP = const RMI_PORT = 2501 [name of accodb database] [name of essential database] [IP address / name of device on which the database is installed] [name of user having access to the database] [password of user having access to the database] [IP address / name of device on which ACCO Server is installed] [number of network port on which communication between ACCO Server and ACCO-WEB application will take place] 7.3 Useful commands Commands entered in the console window may facilitate management of the ACCO NET system (having entered a command, press ENTER): to check the ACCO Server program status: service acco-server status to stop the ACCO Server program: service acco-server stop to start the ACCO Server program: service acco-server start

46 44 ACCO NET SATEL to restart the ACCO Server program: service acco-server restart to check the currently installed version of the operating system: cat /etc/debian_version to start help for the installation script:./acco-installer-online.sh h Starting help for the installation script After entering the./acco-installer-online.sh h command, a list of parameters for running particular functions will be displayed. If you want to run a function, enter a command in the console that consists of the name of the script in this case./acco-installer-online.sh, then a space and the parameter name e.g. v (i.e.:./acco-installer-online.sh v). The function will display on the screen the version numbers of the: installation script, ACCO NET system, ACCO Server program, ACCO-WEB application, available for download at the web page, to which the installation script connects automatically during the procedure of ACCO NET system installation or update. Description of the parameters you can see on the screenshot below.

47 SATEL ACCO NET Updating the ACCO NET system software to version 1.5 The ACCO NET version 1.5 works only with the Debian 8 ( jessie ) operating system for the 64-bit PC architecture (amd64). The ACCO NET system update can be carried out on a computer / virtual machine where the Debian operating system is installed in the above-mentioned version. Otherwise, it will be necessary to transfer the system to a new device. For security reasons, you can not log on to the operating system remotely as a root administrator. If you want to connect remotely to the system and have the root administrator privileges, you must first log in as the user whose account you created, e.g. during installation of the system. Enter the su command and press ENTER. Then enter the administrator password and press ENTER. 8.1 Checking the currently installed system version In the console window, on a computer or a virtual machine with the Debian operating system installed: 1. Log in as a user (e.g. satel ). 2. Check which version of the operating system is currently installed by entering the command: cat /etc/debian_version and pressing ENTER. 3. The system version number will be displayed. It can be, for example: Check on what architecture the current version of the operating system is based by entering the command: uname a and pressing ENTER. 5. The system architecture version will be displayed. The possible answer may look like this: Linux xxxx amd64 #1 SMP Debian yyyy GNU/Linux xxxx host name for the system that was configured during the installation of the Debian operating system; yyyy version of the architecture on which the Debian operating system is based. It can be 64 bit x86_64 or 32 bit i System update procedure The ACCO NET system update can be carried out on a computer / virtual machine with the Debian 8 ( jessie ) operating system for the 64-bit PC architecture (amd64). 1. Log in as the administrator in the console window (login: root). If you are logged in to the console as other user, enter the su command and press ENTER. Then enter the password for the root administrator and press ENTER.

48 46 ACCO NET SATEL 2. Enter the sequence of commands: wget ; chmod 755 acco-installer-online.sh ;./acco-installer-online.sh u and press ENTER. 3. The dialog package is required for updating ACCO NET. Enter Y or y to install it. 4. When the first screen of the script is displayed, use the arrow keys to select the update language. Then select Yes or press Y first, then ENTER. The screenshot below and the following windows show letters highlighted in different colors. Some consoles (e.g. Linux), after you simultaneously press the highlighted letter and the ALT key, will allow you to execute the command to which the letter is assigned.

49 SATEL ACCO NET The unzip package is required to update ACCO NET. Select Yes and press ENTER to install it. 6. The next window will display additional information about the keys you can use during the system update process: TAB key to move between the fields; SPACE key to select an element; ENTER key to activate the selected element; / keys to move left / right and between the fields; / keys to move up / down and between the fields; PageUp / PageDown keys to scroll through the lists and to move up / down. Select OK and press ENTER.

50 48 ACCO NET SATEL 7. Information about progress of the installation will be displayed ([»] in progress; [ ] finished). At the screen header, in square brackets, the installation progress bar is displayed by means of asterisks [ _]. Such screens will be displayed several times during different stages of installation. Not all of them are mentioned.

51 SATEL ACCO NET Make databases copies before you start update. If you want to do it now, select Interrupt and press ENTER. If you have already made the copies, select "Continue" and press ENTER. 9. A comparison between the installed versions of ACCO NET system, ACCO-WEB application and ACCO Server program and the versions of these products currently available for the update will be displayed. If you want to update the ACCO NET system, ACCO-WEB application and ACCO Server program, select Yes and press ENTER.

52 50 ACCO NET SATEL 10. Read the terms and conditions of the License Agreement for the ACCO Server program. To scroll through the text, use the PageDown / PageUp keys. 11. Select Yes and press ENTER if you accept the terms of the ACCO Server license agreement and want to proceed with the installation. 12. Read the terms and conditions of the ACCO-WEB License Agreement. To scroll through the text, use the PageDown / PageUp keys. 13. Select Yes and press ENTER if you accept the terms of the ACCO WEB license agreement and want to proceed with the installation.

53 SATEL ACCO NET Information about the database configuration will be displayed. Select OK and press ENTER. 15. Select the IP address of the device ( other ) through which ACCO Server will connect to the databases. Select Confirm and press ENTER. 16. Enter the IP address of the device through which ACCO Server will connect to the databases. Select Confirm and press ENTER. If the databases have been installed: locally and the root administrator: has no privilege to connect remotely, enter the IP address: ;

54 52 ACCO NET SATEL has privilege to connect remotely, enter the IP address of the device on which the databases have been installed. remotely, enter the IP address of the device on which the databases have been installed. 17. Select the IP address of the device ( other ) through which ACCO Soft will connect to the databases. Select Confirm and press ENTER.

55 SATEL ACCO NET Enter the IP address of the device through which ACCO Soft will connect to the databases. Select Confirm and press ENTER. 19. Information about the progress of the system update will be displayed.

56 54 ACCO NET SATEL 20. Select Yes and press ENTER to update the operating system packages. 21. If you want to create a copy of the ACCO NET system software during the update, select Yes and press ENTER. Otherwise, select No and press ENTER. The system owner / administrator is obliged to back up the program at a frequency consistent with the generally accepted practices (daily, weekly and monthly backups). This will ensure proper and reliable operation of the program, in particular the possibility of full and immediate recovery of all data from backups without incurring excessive costs.

57 SATEL ACCO NET The next step in updating the system is creating the essential database. 23. A comparison of the installed version of the ACCO-WEB application with its version currently available for the update will be displayed. Select OK and press ENTER to let the application be updated.

58 56 ACCO NET SATEL 24. Information about updating the ACCO-WEB application will be displayed. Select OK and press ENTER. 25. The next stage of the system update is the setting of security policies in the system (SELinux rules).

59 SATEL ACCO NET A comparison of the installed version of ACCO Server with the version currently available for the update will be displayed. Select OK and press ENTER to update the program. 27. Information about updating the ACCO Server program will be displayed. 28. When the list of ACCO NET system components to be installed at this stage of the update is displayed, select OK and press ENTER.

60 58 ACCO NET SATEL 29. Decide whether to download and install the third party ACCO-EE software required for ACCO NET installation or not. If so, select Yes and press ENTER. If you select No and press ENTER, you will have to install these programs yourself. 30. Addresses of the websites on which the terms of third party software licenses can be found are given in the Software components section. Read them carefully and if you agree with them, select I accept / Continue installation and press ENTER. If you do not accept these conditions, select I don t accept/exit installation and press ENTER. This will be tantamount to aborting the installation.

61 SATEL ACCO NET When the JAVA version information is displayed, select OK and press ENTER to install the recommended software version. 32. Information about installing the JDBC library and the JAVA runtime environment will be displayed.

62 60 ACCO NET SATEL 33. Select the version of the JAVA software that will be installed. The recommended version is marked with the ) symbol. Select OK and press ENTER. 34. Information about the progress of the system update will be displayed.

63 SATEL ACCO NET Information about the status of ACCO Server and the version numbers of this program and the ACCO-WEB application will be displayed. Select OK and press ENTER. 36. A summary of the update process and information on the status of the installed ACCO NET system will be displayed. Select OK and press ENTER.

64 62 ACCO NET SATEL 37. The last screen will inform you that the update process has been completed. 38. Having updated the ACCO NET system, update the ACCO-NT Conf and ACCO Soft programs, and also install the Map Editor program. To do this, start the web browser. 39. Enter the address: address of device on which ACCO Server is installed]. 40. Log into the ACCO-WEB application as the Administrator (default login: admin ; default password: admin ). 41. Click on the Programs command in the menu on the left side of the screen. Links to the installation files will be displayed. 42. Download the updated installation files and install new program versions. 43. Update the firmware of the devices in the system, including ACCO-NT control panel and all access control modules. 8.3 Transferring the ACCO NET system to a new device If the version of the Debian operating system is incorrect, the software should be installed and then updated on a computer / virtual machine where no system is currently installed. Both computers / both virtual machines one with the existing version of the system and the other without any operating system should have access to the Internet. In addition, they must be in the same network so that they can be accessed remotely via SSH using the PuTTY program. Random usernames: asmith in the current system and rjones in the new system, are used in this section System transfer procedure 1. Install the Debian operating system on the new device (see Installing the Debian operating system ). During the system installation procedure, add a user (e.g. rjones ) and create a password for it to log into the system.

65 SATEL ACCO NET In the console window that will be displayed after system restart, start the installation of ACCO NET version 1.5 (see Installing the server environment and ACCO NET system ). 3. Having installed the new versions of the Debian and ACCO NET systems, delete the new databases created during the installation (see: Deleting databases ). 4. On the device where the ACCO NET system was installed, export the previously used databases to SQL files (see Exporting databases ). 5. Copy the exported databases to the new system (see: Copying databases from the old system to a new one ). 6. Import the databases copied from the existing system to the new system (see Importing databases ). 7. Update the ACCO NET system to version 1.5 (see ACCO NET system update after importing databases ) Deleting databases During installation of the ACCO NET system, databases are created. In the case of the system transfer procedure, it is necessary to delete them so that they can be replaced by the databases previously exported to SQL files i.e. the essential accodb and the temporary accodb_temporary. In the console window, on a computer or virtual machine with new versions of Debian and ACCO NET installed: 1. Log in as the root administrator. 2. Stop the ACCO Server program by entering the command: service acco-server stop and pressing ENTER. 3. Stop the WildFly program by entering the command: service wildfly stop and pressing ENTER. 4. Log in to the database by entering the command: mysql if the root administrator of the MySQL database has no a password assigned and pressing ENTER; mysql u root p if the root administrator of the MySQL database has a password created and pressing ENTER, and then entering the password and pressing ENTER again 5. Delete the newly created essential database by entering the command: DROP DATABASE accodb; and pressing ENTER. 6. Delete the newly created temporary database by entering the command: DROP DATABASE accodb_temporary; and pressing ENTER. 7. Exit the database by entering the command: EXIT and pressing ENTER Exporting databases When performing the procedure of transferring the ACCO NET system, the current essential accodb and the temporary accodb_temporary databases must be exported to SQL files in order to copy them and then import them to the system at a later date.

66 64 ACCO NET SATEL In the console window, on the computer or virtual machine where the databases are located: 1. Log in as the root administrator. 2. Stop the ACCO Server program by entering the command: service acco-server stop and pressing ENTER. 3. Go to the directory to which you want to export the SQL files by entering the command: cd /home/asmith and pressing ENTER. The following random names are used in the command: asmith name of user of the existing system; /home/asmith name of the asmith user's home directory. This directory is created during the procedure of adding a user to the system. 4. Export the essential database named accodb to the SQL file by entering the command: mysqldump --databases accodb --routines > accodb.sql if the root administrator of the MySQL database has no password assigned and pressing ENTER; mysqldump u root -p --databases accodb --routines > accodb.sql if the root administrator of the MySQL database has a password created and pressing ENTER, and then entering the password and pressing ENTER again. 5. Export the temporary database named accodb_temporary to the SQL file by entering the command: mysqldump --databases accodb_temporary --routines > accodb_temporary.sql if the root administrator of the MySQL database has no password assigned and pressing ENTER; mysqldump u root -p --databases accodb_temporary --routines > accodb_temporary.sql if the root administrator of the MySQL database has a password created and pressing ENTER, and then entering the password and pressing ENTER again. 6. Check whether the database files have been exported to the required directory, whether the export date and the size of the exported files are correct by entering the command: ls lh /home/asmith/*.sql and pressing ENTER. Two files will be saved in the /home/asmith directory: accodb.sql essential database file exported; accodb_temporary.sql temporary database file exported Copying databases from the old system to a new one In the console window, on a computer or a virtual machine with the existing versions of the Debian and ACCO NET systems installed: 1. Log in as the root administrator. 2. Go to the directory to which the SQL files have been exported by entering the command: cd /home/asmith and pressing ENTER.

67 SATEL ACCO NET Copy the essential database file to the new system by entering the command: scp accodb.sql and pressing ENTER. The following random data are used in the command: rjones name of the new system user; IP address of the device on which the new system is installed; /home/rjones name of the rjones user's home directory. This directory is created during the procedure of adding a user to the system. The exported database files will be copied to this directory. 4. Enter the rjones user's password valid in the new system and press ENTER. 5. Copy the temporary database file to the new system by entering the command: scp accodb_temporary.sql rjones@ :/home/rjones/accodb_temporary.sql and pressing ENTER. 6. Enter the rjones user's password valid in the new system and press ENTER Importing databases In the console window, on a computer or virtual machine with new versions of the Debian and ACCO NET systems installed: 1. Log in as the root administrator. 2. Check whether the database files have been copied to the required directory, and whether the date of the copy and the size of the copied files are correct by entering the command: ls lh /home/rjones/*.sql and pressing ENTER. 3. Go to the directory to which the database files from the old system have been copied by entering the command: cd /home/rjones and pressing ENTER. 4. Log in to the database by entering the command: mysql if the root administrator of the MySQL database has no password assigned and pressing ENTER; mysql u root p if the root administrator of the MySQL database has a password created and pressing ENTER, and then entering the password and pressing ENTER again. 5. Import the copied essential database file to the new system by entering the command: SOURCE accodb.sql and pressing ENTER. 6. Import the copied temporary database file to the new system by entering the command: SOURCE accodb_temporary.sql and pressing ENTER. 7. Grant the accoweb user privileges on the accodb database by entering the command: GRANT ALL ON accodb.* TO 'accoweb'@'%'; and pressing ENTER.

68 66 ACCO NET SATEL 8. Grant the accoweb user privileges on the accodb_temporary database by entering the command: GRANT ALL ON accodb_temporary.* TO and pressing ENTER. 9. If a remote database is used in the system, grant the root administrator privileges to: connect remotely to the device on which the new system is installed by entering the command: GRANT ALL PRIVILEGES ON *. * TO IDENTIFIED BY password ; and pressing ENTER. Instead of password enter the password created for the root administrator. manage other users by entering the command: GRANT USAGE ON *. * TO WITH GRANT OPTION; and pressing ENTER. 10. Refresh the settings of edited privileges by entering the command: FLUSH PRIVILEGES; and pressing ENTER. 11. Exit the database by entering the command: EXIT and pressing ENTER. 12. Run the WildFly program by entering the command: service wildfly start and pressing ENTER. 13. Run the ACCO Server program by entering the command: service acco-server start and pressing ENTER ACCO NET system update after importing databases Once the databases have been correctly imported and the privileges have been granted, update the ACCO NET system: 1. In the console window, log in as the administrator (login: root). If you are logged in to the console as other user, enter the su command and press ENTER. Then enter the password for the root administrator and press ENTER. 2. Enter the sequence of commands: rm acco-installer-online.sh ; wget ; chmod 755 acco-installer-online.sh ;./acco-installer-online.sh u and press ENTER. 3. Go to step 3 in the System update procedure section and proceed as described in the system update procedure in the subsequent sections.