Installing Tanium v6.1

Installing Tanium is actually really easy and I’m going to make it even easier by walking you through the express installation of the product.

In the following article I’ll provide you with the various screen shots for the express installation of Tanium v6.1.314.2342 and I’ll call out screens that may need additional explainations. Let’s get started!
I assume you’ve already acquired the installation executable from your Technical Account Manager or Sales person…
tanium01
Double click it to launch the installer. If you’re installing onto a Windows 2008r2 server, like I am here, you may need to click yes to the UAC request dialog:
tanium02
tanium03
tanium04
This virtual computer I’m installing our server onto, does not have an MSSQL server installed, so we’ll choose to install the MSSQL Express Edition.
tanium05
tanium06
tanium08
We’ll have to agree to Microsoft’s EULA…
tanium09
I’ve chosen to download and install updates to MSSQL here.
tanium10
I’m also using the default options…
tanium13
Leave the named instance settings as is.
tanium14
As well as the service configuration settings…
tanium15
We only support Windows authentication so choosing between only Windows Auth or both is up to you.
tanium16
tanium19
Now… back to the Tanium installation… choose the Express Install.
tanium20
Provide your windows credentials for the initial user. If your server is linked to a domain, it can be a domain login (does not need to be an admin or anything). If your server is NOT on a domain, simply provide one of the local accounts username/passwords to continue.
tanium22
All done!
tanium23

The express installation of our product creates a self signed certificate for the console, so you’ll need to agree to continue.
tanium24
Log in with the username/password you specified earler…
tanium25
When you have successfully logged in, an initial content load will occur. This means your server is downloading a “starter” pack of content (sensors, packages, dashboards, etc) which will get you started with the product immediately. This process does take several minutes, so please be patient.
tanium26
Once the content load is complete, you’ll get to play around with the product!
tanium27

Currently you do not have any endpoints to work with. I’ll release another article very soon which explains a few ways of getting agent installed onto your computers.

Installing DB2 Enterprise v10.1

Extract installer file…

 

Run Prechecks…

SNAGHTMLf817c13

I already solved the first one… See below on how to disable SELinux on your RHEL system.

 

Below that, I’ll show you how to solve the missing packages so we can continue with DB2 installation

 

 

 

 

 


Fully Disabling SELinux

Fully disabling SELinux goes one step further than just switching into permissive mode. Disabling will completely disable all SELinux functions including file and process labeling.

In Fedora Core and RedHat Enterprise, edit /etc/selinux/config and change the SELINUX line to SELINUX=disabled:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted

… and then reboot the system.

(thanks… http://www.crypt.gen.nz/selinux/disable_selinux.html)


Installing dapl…

On my ISO are the various RPM packages I’ll need.  Attempting to install dapl resulted in additional dependencies…

image

…installing libibverbs…

image

…installing librdmacm…

image

and finally… it works

image


Installing sg3_utils…

This seems to be a recurring theme any time I play with *nix boxes.. dependencies upon dependencies…

image

…installing libsgutils2 which refers to sg3_utils-libs…

image

and finally… it works

image


I was unable to find an sg_persist package… so I re-ran the db2prereqcheck script… and looks like it is included in one of the packages that were installed… and v10.1.0.0 is ready for installation!

Back to the installation:

image

After answering some basic questions like where to install, etc…  it finished!

 

To validate it is running… try this:

ps –eaf | grep –i db2sysc

image

 

To automatically start DB2 instance…

/opt/ibm/db2/V10.1/bin/db2iauto –on db2inst1

image

Installing Windows Server 2012

Recently I’ve had a need to setup a Windows Server 2012 and wanted to document the process for future attempts.

I won’t document every single screen, only those that include decisions to be made and considerations to be considered.

 

Windows_Server_2012_Install_01

Windows_Server_2012_Install_02

Windows_Server_2012_Install_03

Windows_Server_2012_Install_04

Windows_Server_2012_Install_05

I’ll be using this server as a root server for my new IBM Endpoint Manager v9, so a GUI would be very handy during install and general maintenance of that application.

Windows_Server_2012_Install_06

Windows_Server_2012_Install_07

At first I wanted to go with a regular install… not Custom… so I chose the top option.

Windows_Server_2012_Install_08

Turns out this is for upgrading an existing OS installation.  Since this is a brand new hard drive with no pre-existing OS, I should have chosen the “Custom” option.  After hitting Close, I was sent back to the very beginning of the installation.

Windows_Server_2012_Install_09

Windows_Server_2012_Install_10

Windows_Server_2012_Install_11

Windows_Server_2012_Install_12

Windows_Server_2012_Install_13

Once I arrived at the start up screen… it hung there for nearly 30 minutes.  Turns out since I was setting this up on a VMWare ESXi v5.0 server it doesn’t support Windows Server 2012.  So after some research I came across this article: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2006859 

I learned that I had to upgrade my VMWare ESXi server to a patch or v5.1… I opted for v5.1 and was able to get past this sticky part.

Windows_Server_2012_Install_14

Windows_Server_2012_Install_15

Windows_Server_2012_Install_16

Windows_Server_2012_Install_17

Windows_Server_2012_Install_18

Windows_Server_2012_Install_19

Windows_Server_2012_Install_20

The server manager has been redesigned for the new GUI.  Interesting choices…

Windows_Server_2012_Install_21

Windows_Server_2012_Install_22

Windows_Server_2012_Install_23

I don’t want this application to come up every time I log in… so choosing the Manager –> Server Manager Properties, I was able to check the “Do not start Server Manager automatically at logon”.

Windows_Server_2012_Install_24

Now I need to add my new server to my LDAP domain.  Choosing “Local Server” from the left menu…

Windows_Server_2012_Install_25

Click on “WORKGROUP” and the familiar computer properties dialog opens where you can change these settings.

Windows_Server_2012_Install_26

Windows_Server_2012_Install_27

Windows_Server_2012_Install_28

Windows_Server_2012_Install_29

Windows_Server_2012_Install_30

Windows_Server_2012_Install_31

Windows_Server_2012_Install_32

One restart later I was able to log in and I’m done.

Installing Microsoft SQL 2012

Like many of my step-by-step articles, it’s mostly for corporate level documentation purposes.

I won’t describe every screen, only those that include important decision points that affect my particular use case.

 

MSSQL_2012_Install_01

MSSQL_2012_Install_02

MSSQL_2012_Install_03

MSSQL_2012_Install_04

MSSQL_2012_Install_05

MSSQL_2012_Install_06

MSSQL_2012_Install_07

MSSQL_2012_Install_08

MSSQL_2012_Install_09

MSSQL_2012_Install_10

MSSQL_2012_Install_11

MSSQL_2012_Install_12

The above dialog is warning me that the firewall does not allow remote database connectivity.  The below command line can be used to open up the SQL port.  The cmd prompt must be opened with administrative permissions for this to work.
netsh advfirewall firewall add rule name = SQLPort dir = inprotocol = tcp action – allow localport = 1433 remoteip = localsubnet profile = DOMAIN

MSSQL_2012_Install_13

MSSQL_2012_Install_14

This is one of those major decision points.  My purpose for this database is to house the newest IBM Endpoint Manager v9 database… nothing else.  So I only require a few items to accomplish this simple task.  The following items are needed for my particular use case:

  • Database Engine Services
    • Full-Text and Semantic Extractions for Search
  • Management Tools – Basic
    • Management Tools – Complete

MSSQL_2012_Install_15MSSQL_2012_Install_16

MSSQL_2012_Install_17

MSSQL_2012_Install_18

MSSQL_2012_Install_19

MSSQL_2012_Install_20

MSSQL_2012_Install_21

In order to get IEM installed properly… an SA account is required. So I’ll configure the database authentication in “Mixed Mode” and specify a password for the SA account.

MSSQL_2012_Install_22

MSSQL_2012_Install_23

MSSQL_2012_Install_24

MSSQL_2012_Install_25

MSSQL_2012_Install_26

MSSQL_2012_Install_27

MSSQL_2012_Install_28

That’s all there is to it.  Installations are almost always straight forward… but some corporations require complete step-by-step documentation, I hope this fits the bill.

Installing BigFix.me MDM onto your iOS devices.

The following step-by-step process demonstrates how to install/configure MDM on your iOS devices… iPhones, iPods, and iPads.

1. Visit https://bigfix.me using your mobile device. Step 1 of 13
2. Click "Continue to this website (not recommended)" if prompted. Step 2 of 13
3. Click the "SSL certificate" link towards the bottom. Step 3 of 13
4. Click the "Install" button on the "Install Profile" screen. Step 4 of 13
5. Click the "Install" button on the "Warning" screen. Step 5 of 13
6. If you have a password set, you will need to enter it now and hit "Done". Step 6 of 13
7. Click the "Done" button on the "Profile Installed" screen, you will be returned to Sarfari. Step 7 of 13
8. Enter your email address, choose Device Ownership value and click the "Enroll" button. Step 8 of 13
9. Click the "Install" button on the "Install Profile" screen. Step 9 of 13
10. Click the "Install Now" button within the popup box. Step 10 of 13
11. If you have a password set, you will need to enter it now. Step 11 of 13
12. Click the "Install" button one more time for the "Warning" screen and your done. Step 12 of 13
13. Click "Done" and your all finished. Step 13 of 13

How to use the BigFix Software Distribution Wizard

BigFix is of course now called Tivoli Endpoint Manager a product of IBM.  I’m getting a bit lazy and calling it BigFix for short from now on.

Anyways… This article will provide helpful direction when you want to distribute software within your organization.

I have recently wrote a c# application and want to have it automatically installed across my infrastructure.  When new systems come on-line, I want my application to automatically be installed once it is properly linked into my BigFix infrastructure.  One note to be made when writing your own applications… be sure to properly register your application so you can easily detect that software on your endpoints.  I wrote an article which will show you how to properly register your app when creating your Visual Studio Setup application.

The following screen shots might help you with accomplishing this.

First we’ll need to launch the wizard itself, then specify the application name.

Distribute Windows Software 1

Here we’ll need to specify our MSI installer.  Visual studio creates both a setup.exe and a setup.msi.  the exe is a stand-alone file which creates an environment with which to launch the msi.  IE:  you can distribute the msi all by itself, but if you want to use the exe, you must distribute both the exe and msi files.

BigFix can handle, so if your application has a simple stand-alone exe, then point the wizard to it.  Or the folder or URL of the file in question.  It even has the capability of handling ZIP files.  (if you’d like more info on this, ask me in the comments section below).

Distribute Windows Software 2

Now we’ll need to specify the operating systems that our application will work on.  In my case I want to limit it to newer computers which will have my requirement of .NET to be installed.  Note:  With Windows 8 coming out soon, you may need to modify the relevance of the resulting task in order to install this application onto those endpoints.  As of v8.2 of Tivoli Endpoint Manager, we do not recognize Windows 8.  It appears in the console as “WinUnknown 6.2.8250” for the Consumer Preview Release.

Distribute Windows Software 3

Our next step is to help the wizard “craft” our relevance that will be used for this software distribution task.  Since my application follows proper registration techniques, it is as easy as specifying my executable within the Registered Application box.

Distribute Windows Software 5

Step 5 of our wizard asks us to properly craft the command line that will be used to silently install our application.  Since I’m using an msi installer file that follows Microsoft standards, the defaults are fine.  Otherwise you can change the command line parameters here.  Remember that the end user will NOT see the installer GUI.  So if the installer hangs at a certain step, it will never be noticed and you will have to manually kill the installer before the task will respond with a status.

Distribute Windows Software 6

Complete the wizard by validating the parameters and hitting Finish.

Distribute Windows Software 7

Here we have our newly generated task.  I like to fully customize my tasks, especially when I create something that will become customer facing. 

Thus I’ll work on each tab in order… First we’ll modify the description so the admin launching the task will know what this task is/does and what to expect.

Also remember to modify which site to “save” the task into and which domain it belongs to.  For more on domains, read one of my other articles covering that domains.

I also like to follow naming standards by the BigFix home office, thus on software, I’ll name it as such:  [application name] v[version number] Available

Distribute Windows Software 8

Next I like to include a URL link to the application so if the admin wants additional information or support links it’s as easy as clicking one of the actions.

Distribute Windows Software 9

The Software Distribution Wizard does a great job of creating the basic relevance that will be used.  I, however, like to separate out my relevance for easy reading.  Here I’m separating the OS relevance from my RegApp relevance.  Remember that you can only separate if they are connected by an AND, so be careful!

Distribute Windows Software 10

A final piece of “ribbon” for this task is to specify the various properties.  View my other article on BigFix Task Properties.

Distribute Windows Software 11

And there we have it… If you look under the site you specified and “Fixlets and Tasks” you will see your task.  It is unlikely that any of your endpoints have responded to your new task… therefore you may need to click the “Show Non-Relevant Content” button.

Distribute Windows Software 12

Now that you have the software distribution task created you can Activate it by following this guide.

For your convenience, here is a zip file containing the content covered in this article: http://dl.dropbox.com/u/41985632/Content/ScreenResolutionRuler.zip

If you have any questions or comments, please leave them below.

Installing Tivoli Endpoint Manager (BigFix) Console 8.2.1093

My latest installation of the TEM v8.2.1093 server comes with it the installation of the Console.  This new console is extremely cool and has features like LDAP authentication, HTTP communications channel, and more.  Here is the basic step-by-step installation procedure to get the client installed on your workstation.

image_thumb[44]_thumb

image_thumb[45]_thumb

image_thumb[46]_thumb

image_thumb[47]_thumb

image_thumb[48]_thumb

 

If you have any questions, let me know!

Installing Tivoli Endpoint Manager (BigFix) v8.2.1093

imageInstalling this newest version of TEM is relative straight forward and easy to do.  Drawing from my previous articles, a SQL server Installation (and SP1), and the Installing of Pre-requisites, I give you the full installation of v8.2.1093.  I also have downloaded the latest v8.2.1093 version from the TEM website.

I have already attached my new virtual server to my internal Windows Domain so authentication is easily accomplished within my existing network.

image

image

image

I’m going to remove WebReports from this particular installation, favoring to install it onto a different server for simplicity.

image

image

I will be using a remote database to a different installed instance of SQL server as noted at the top of this article.

image

image

image

image

image

image

image

image

image

I plan on integrating this newest version of TEM with my Domain.  Thus a generic admin account is exactly what I need here.

image

image

image

Everything looking good according to the TEM Server Diagnostics tool.  The only error it showed was the resolution of the DNS name used for my new infrastructure.  Now I’ll add a quick little entry in my DNS server for this domain name.

image

There we go… that’s better…

image

 

If you have any questions, please them below…

Free Onscreen Ruler

image

On occasion I’ve needed the ability to keep track of my location on the screen.  Since I have multiple screens, that typically involved me putting my finger on one screen while clicking or typing on another screen. 

Along time ago I had a small utility which puts a ruler on the screen which I could move around with my mouse.  This was a fantastic utility and very useful.  Today I went looking and found someone wrote a different program which does what I wanted even better.  A Ruler for Windows was written by Rob Latour and available at http://www.arulerforwindows.com/

Here’s my step-by-step installation guide for this utility:

SNAGHTML269434

SNAGHTML26cf11

SNAGHTML271dbd

SNAGHTML273e86

SNAGHTML27648c

SNAGHTML2784c9

The installation was so fast, I wasn’t able to get a progress screen… LOL

SNAGHTML2806e3

Once finished, I’ve launched the application and see this. Now I can have my bank website up on one screen and my Quicken money software up on the other screen… and quickly/easily reconcile my accounts.  Thanks Rob!

image

If you have any questions or comments, leave them below!