The system layer is a low-level software that provides the required operational environment for the Avaya Aura® Web Gateway application.
During installation, the system downloads the required packages from the remote repository. The package installation might take up to 10 minutes depending on your network bandwidth.
Before you begin
Install RHEL 8.4 or RHEL 8.10 on virtual machines.
Create disk partitioning for the virtual machine.
Enable the YUM package management on RHEL. For more information, see Red Hat documentation on the https://www.redhat.com website.
Download the csa-swonly-<AAWG_VERSION>.tgz software-only installation package from PLDS.
Obtain the FQDN of the IP address of a Network Time Protocol (NTP) server.
The system will be in Permissive mode by default. When you install SELinux in the system, Enforcing mode is enabled in RHEL. You must change SELinux to enforcing mode to update the system layer.
Verify if SELinux is enforcing.
# getenforce
Open the file /etc/selinux/config in a text editor of your choice.
For example:# vi /etc/selinux/config
Configure the SELINUX=enforcing option:
# This file controls the state of SELinux on the system.
# SELINUX= accepts one of the following values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these two values:
# targeted - Targeted processes are protected
# mls - Multi Level Security protection
SELINUXTYPE=targeted
Save the change, and restart the system:
# reboot
Note:
Avaya recommends using the NTP servers of your organization instead of public NTP servers.
If you are planning to use FIPS, enable it as described in Enabling FIPS for software-only systems. You cannot enable FIPS mode during or after Avaya Aura® Web Gateway installation.
Procedure
Upload the software-only installation package on the virtual machine to the /root directory.
Use a file transfer program of your choice, such as SFTP, SCP or WinSCP.
Log in to the virtual machine as the root user.
To extract the content of the installation package, run the following command:
tar -xzf csa-swonly-<AAWG_VERSION>.tgz
For example: tar -xzf csa-swonly-3.9.0.0.x.tgz
The /root/csa-swonly-AAWG_RELEASE/ directory contains the following files:
The system layer package in TGZ archive ucapp-swonly-system-<VERSION>.tgz.
The Avaya Aura® Web Gateway application binary csa-<AAWG_RELEASE>.bin.
Go to the directory with the extracted installation package:
cd csa-swonly-<AAWG_VERSION>
To extract the content of the archive with the system layer installation files, run the following command:
tar -xzf ucapp-swonly-system-<SYSTEM_LAYER_VERSION>.tgz
For example: tar - xzf ucapp-swonly-system-1.0.0.0.1.tgz
Go to the directory with the extracted system layer package:
cd ucapp-swonly-system-<SYSTEM_LAYER_VERSION>
Run the following command to install the system layer:
./swOnlyUpdate.sh --install
When the system prompts you to enable the Enhanced Access Security Gateway (EASG) functionality, do one of the following:
Enter yes to enable EASG.
The EASG functionality enables Avaya support personnel to access your Avaya Aura® Web Gateway system and resolve product issues in real time. Avaya recommends that you enable EASG during installation.
Enter no if you do not want to enable the EASG functionality.
If you select no, you can enable it later if required.
When the system prompts you, provide the IP address or FQDN of the NTP server.
After the system reboots, run one of the following commands to ensure that system layer is installed:
