The following table provides a list of supported platforms for Safeguard clients.
NOTE: Beginning with version 7.2 , Safeguard for Sudo supports only Linux-based systems for Safeguard policy servers.
Table 3: Linux supported platforms — server and plugin
|
Amazon Linux |
AMI, 2 |
x86_64 |
|
CentOS Linux |
6, 7, 8 |
Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64 |
|
Debian |
Current supported releases |
x86_64, x86, AARCH64 |
|
Fedora Linux |
Current supported releases |
x86_64, x86, AARCH64 |
|
OpenSuSE |
Current supported releases |
x86_64, x86, AARCH64 |
|
Oracle Enterprise Linux (OEL) |
6, 7, 8 |
Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64 |
|
Red Hat Enterprise Linux (RHEL) |
6, 7, 8 |
Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64 |
|
SuSE Linux Enterprise Server (SLES)/Workstation |
11 SP4, 12, 15 |
Current Linux architectures: s390x, PPC64, PPC64le, x86, x86_64, AARCH64 |
|
Ubuntu |
Current supported releases |
x86_64, x86, AARCH64 |
Table 4: Unix and Mac supported platforms — plugin
|
Apple MacOS |
10.15 or later |
x86_64, ARM64 |
|
FreeBSD |
12.x, 13.x |
x32, x64 |
|
HP-UX |
11.31 |
PA, IA-64 |
|
IBM AIX |
6.1 TL9, 7.1 TL3, 7.2 |
Power 4+ |
|
Oracle Solaris |
10 8/11 (Update 10), 11.x |
SPARC, x64 |
Before installing Safeguard 7.2 , ensure that your system meets the following minimum hardware and software requirements.
NOTE: Beginning with version 7.2 , Safeguard for Sudo supports only Linux-based systems for Safeguard policy servers.
Table 5: Hardware and software requirements
| Operating systems |
See Supported platforms to review a list of platforms that support Safeguard clients. |
| Disk space |
80 MB of disk space for program binaries and manuals for each architecture.
Considerations:
- At a minimum, you must have 80 MB of free disk space. The directories in which the binaries are installed must have sufficient disk space available on a local disk drive rather than a network drive. Before you install Safeguard, ensure that the partitions that will contain /opt/quest have sufficient space available.
-
Sufficient space for the keystroke logs, application logs, and event logs. The size of this space depends on the number of servers, the number of commands, and the number of policies configured.
-
The space can be on a network disk drive rather than a local drive.
- The server hosting Safeguard must be a separate machine dedicated to running the pmmasterd daemon.
|
| SSH software |
You must install and configure SSH client and server software on all policy server hosts.
You must also install SSH client software on all hosts that will use the Sudo Plugin.
You must enable access to SSH as the root user on the policy server hosts during configuration of the policy servers. Both OpenSSH 4.3 (and later) and Tectia SSH 6.4 (and later) are supported. |
| Processor |
Policy Servers: 4 cores |
|
RAM |
Policy Servers: 8GB |
Table 6: Primary policy server and host system installation requirements
| Primary Policy Server |
- Supported Unix or Linux operating system
- SSH (ssh-keyscan binary)
|
|
Host System |
- Supported Unix, Linux, or macOS platform
- SSH (ssh-keyscan binary)
- Sudo 1.8.1 (or later)
|
Upgrade and compatibility
Safeguard for Sudo supports a direct upgrade installation from versions 2.0 and higher. The Safeguard software in this release is provided using platform-specific installation packages. For more information on upgrading, see the One Identity Safeguard for Sudo Administration Guide.
One Identity recommends that:
- You upgrade your policy server (Master) systems before Sudo plugins, and that a policy server is run at the same or higher level than Sudo plugins.
- All policy server systems and Sudo plugins are upgraded to the latest version to take advantage of all new features.
The upgrade process will create symbolic links to ensure that your existing paths function correctly.
Although licenses are allocated on a per-agent basis, you install licenses on Safeguard policy servers.
No special commands are required to register or license the clients with policy servers. Hosts using the Safeguard agents are automatically granted a license once a request is received on the Safeguard policy server by means of the sudo client program.
To install a license file
- Copy the .dlv license file to the policy server.
- To install the license, run:
# /opt/quest/sbin/pmlicense -l <license_file>
This command displays your currently installed license and the details of the new license to be installed.
- When it asks, "Would you like to install the new license (Y/N) [Y]?", press Enter, or type: Y
- If there are other policy servers configured in your policy server group, it forwards the license configuration to the other servers.
See the One Identity Safeguard for Sudo Administration Guide for more information about the syntax and usage of the pmlicense command.
NOTE: Due to a change in the communication protocol, using 7.1 or later clients and servers with 7.0 clients and servers is not supported. One Identity recommends you upgrade all of your 7.0 installations to 7.1 or later versions. Installations of release 6.x are not affected and can still be used with 7.1.
