Installing SSL on the SGM Server

Table Of Contents

Installing SSL on the SGM Server

Installing SGM SSL for Solaris or Linux (Server Only)

Uninstalling SGM SSL for Solaris or Linux

Installing SSL on the SGM Server

---

SGM Secure Sockets Layer (SSL) allows you to have secure communication between the SGM server and client.

This chapter contains the following section:

•Installing SGM SSL for Solaris or Linux (Server Only)

•Uninstalling SGM SSL for Solaris or Linux

---

Note For information on implementing SGM SSL support, see the "Configuring SGM Security" chapter in the Cisco Signaling Gateway Manager User Guide.

---

Installing SGM SSL for Solaris or Linux (Server Only)

---

Note Linux clients are unsupported. Installing SGM SSL on a Linux server implies that you will point a Windows or Solaris client to the server.

---

You can access the SGM SSL installation software from Cisco.com. Once you have downloaded the SGM SSL installation software to your system, you must install the software on your local system by entering the setup.sh command.

The following procedure explains how to unzip and install the SGM SSL software on a Solaris or Linux system:

---

Step 1 Create a temporary directory in a disk partition that contains at least 2 MB of space on the system where you want to install the SGM SSL software, then move to that directory:

# mkdir tmp

# cd tmp

Step 2 From the Solaris/Linux command line, change to the directory where you downloaded the installation software and unzip the files using the following command:

# unzip sgm41-ssl-sol-k9.zip

Step 3 Change to the CDImage directory using the following command:

# cd sgm41-ssl-sol-k9

Step 4 Run the SGM SSL software installation program by entering the following command:

# ./setup.sh

The SGM SSL installation program displays the installation menu:

1) Review README File First (Recommended)

2) Upgrade All Installed SGM Components

3) Exit Setup

Please choose an option -> 

Choose one of the following installation options:

•To read the latest information about SGM SSL in the README file, type 1 and press Return.

•To install SGM SSL components on the SGM server (and client, if installed), type 2 and press Return.

Step 5 The following warning appears:

Installing SSL component will Stop SGM Client and Server processes.

Do you want to continue install? [y] ->

Press Return to continue.

All SGM servers, clients, and processes are stopped. The SGM server SSL component files are installed and existing SGM server files are saved. The database is updated and SGM client web download images are created.

Step 6 The SGM SSL installation program displays the following start menu:

1) Start SGM Server and Client

2) Start SGM Server Only

3) Exit Setup

Please choose an option -> 

It is not recommended to start SGM at this time, since the commands you still need to run to enable SGM SSL will shut down the SGM server. To exit setup without starting, type option 3 and press Return. To start SGM at a later time, see the "Starting SGM" section.

---

Note Launching the client on Solaris requires the variable DISPLAY to be set to your display in your unix shell environment. If you used telnet to get to the server, you will not have access to your display and will not have the DISPLAY variable set automatically for you.

---

Step 7 After verifying that the SGM SSL software installed successfully, remove the following directory and zip file in the temporary directory using the following command:

# rm -rf tmp/sgm41-ssl-sol-k9

# rm -rf tmp/sgm41-ssl-sol-k9.zip

Where tmp/sgm41-ssl-sol-k9 is the directory containing the downloaded files.

Step 8 Now, you'll need to enable SGM SSL support and download the SGM SSL certificate. For details, see the "Configuring SGM Security" chapter in the Cisco Signaling Gateway Manager User Guide.

---

Uninstalling SGM SSL for Solaris or Linux

To uninstall SGM SSL, run the sgm uninstallssl command (for details, see the "SGM Command Reference" appendix in the Cisco Signaling Gateway Manager User Guide.)