Preparing the Environment on

Extracting the Installation Package

Mon, 01 Jan 0001 00:00:00 +0000

Log in to the DB2 database server with an account having the required privileges.
Save the DB2 database protector installation package, DatabaseProtector_Linux-ALL-64_x86-64_DB2-ALL-64_<DBP_version>.tgz, made available by Protegrity, in any sample directory. For example, /opt/protegrity/.
Navigate to the /opt/protegrity/ directory.

To extract the contents, run the following command:

tar -xvf DatabaseProtector_Linux-ALL-64_x86-64_DB2-ALL-64_<DBP_version>.tgz

Press ENTER.
The command extracts the package and the signature files.

DatabaseProtector_Linux-ALL-64_x86-64_DB2-ALL-64_<DBP_version>.tgz
signatures/
signatures/DatabaseProtector_Linux-ALL-64_x86-64_DB2-ALL-64_<DBP_version>.tgz_10.0.sig

To extract the contents of the installation package, run the following command:
```
tar -xvf DatabaseProtector_Linux-ALL-64_x86-64_DB2-ALL-64_<DBP_version>.tgz
```

Press ENTER.
The command extracts the files from the package.

LogforwarderSetup_Linux_x64_<DBP_version>.sh
RPAgentSetup_Linux_x64_<DBP_version>.sh
PepDB2Setup_Linux_x64_<DBP_version>.sh
U.S.Patent.No.6,321,201.Legend.txt

Installing the Log Forwarder

Mon, 01 Jan 0001 00:00:00 +0000

Log in to the database server as the user that has the permissions to install the Log Forwarder. Usually, this tends to be the instance owner.
Navigate to the directory where the installation files are extracted.
To install the Log Forwarder, run the following command:
```
./LogforwarderSetup_Linux_x64_<DBP_version>.sh
```

Press ENTER.
The prompt to enter the audit store endpoint appears.

Enter the audit store endpoint (host), alternative (host:port) to use another port than the default port 9200 :

Enter the IP address of the audit store.

Press ENTER.
The prompt to enter additional endpoint appears.

Audit store endpoints: <Audit_store_IP_address>:9200
Do you want to add another audit store endpoint? [y/n]:

To skip adding additional endpoints, type n.

Press ENTER.
The prompt to continue the installation appears.

These audit store endpoints will be added:
<Audit_store_IP_address>:9200

Type 'y' to accept or 'n' to abort installation:

To continue the installation, type y.

Press ENTER.
The script extracts the files and installs the Log Forwarder.

Unpacking...
Extracting files...
Protegrity Log Forwarder installed in /opt/protegrity/logforwarder.

Navigate to the /opt/protegrity/logforwarder/bin directory.
To start the Log Forwarder, run the following command:
```
./logforwarderctrl start
```

Installing the RPAgent

Mon, 01 Jan 0001 00:00:00 +0000

Before you begin

Before proceeding with the RPA installation in secure mode, ensure that the required CA certificate is available and trusted on the system.

For ESA

Download the certificate from ESA.

For more information about downloading certificates from ESA, refer to Manage Certificates.

After obtaining the certificate, configure the system environment variable:

Variable	Value
SSL_CERT_FILE	Full path to the certificate file. For example, `/<certificate_location>/CA.pem`

Ensure the ESA hostname or IP is present in the ESA TLS certificate (SAN or CN), and it is resolvable from the RPAgent host.