Issue:
- How to setup the silent installation for Policy Manager Proxy
- User is creating a policy-based upgrade and needs to export installer msi for rollout via group policies
Resolution:
Note: These instructions are not valid for version 16 and later.
Clean installations:
For Windows
- Open Policy Manager Console and create temporary user with full access permissions for the root domain
- Download Policy Manager Proxy installer: fspmp-15.30.96312.exe as an example
- Extract Policy Manager Proxy setup executable content. For 14.00 and older - via any archive manager, for 14.10 start the executable and grab all the content from temporary directory at root level of system drive
- Transfer admin.pub from Policy Manager to the extracted content
- Edit prodsett.ini in the same directory: uncomment and specify values for all properties in the section "F-Secure PM Proxy"
- Use user credentials created at first step for UpstreamPmUserName and UpstreamPmUserPwd properties
- Run "setup.exe /silent" at target host for 14.00 and older, starting from 14.10 executable is called like fspmp-15.30.96312.exe, so have to run "fspmp-15.30.96312.exe /silent"
- Remove user created at first step
For Linux
- Open Policy Manager Console and create temporary user with full access permissions for the root domain
- Download installer: fspmp-15.30.96312-1.x86_64.rpm as an example
- Put admin.pub from PM to the dir with installer
- Create shell script with name like pmp.sh and following content:
yum -y update libstdc++
yum -y install libstdc++.i686
rpm -i fspmp-15.30.96312-1.x86_64.rpm
/opt/f-secure/fspms/bin/fspms-config << PMPCONFIG PM address PM port (usually 443) ./admin.pub PMP http port to be used (usually 80) PMP https port to be used (usually 443) PM admin username (created at first step) PM admin password (created at first step) PMPCONFIG
- Run the script: “./pmp.sh”.
- Remove user created at first step.
Same things with Debian/Ubuntu, but use apt and dpkg instead, so sh script will look like:
apt -y upgrade libstdc++6:
apt -y install libstdc++6:i386
dpkg -i fspmp_15.30.96312_amd64.deb
/opt/f-secure/fspms/bin/fspms-config << PMPCONFIG PM address PM port (usually 443) ./admin.pub PMP http port to be used (usually 80) PMP httpS port to be used (usually 443) PM admin username (created at first step) PM admin password (created at first step) PMPCONFIG
After the script run, if everything is ok, PMP host should appear in PMC.
Policy Manager Proxy upgrades:
For upgrades, as there is not need to configure PMP and generate certificates enough to just upgrade the build.
For Windows:
- Extract PMP executable content via any archive manager
- Run "setup.exe /silent"
For Linux:
- rpm -U fspmp-15.30.96312-1.x86_64.rpm
- dpkg -i fspmp_15.30.96312_amd64.deb
Article no: 000016979