Installing the Resilient Package Agent

This section provides instructions to manually install the RPAgent on the Teradata database server.

Note: To automate the installation process, use the master installation script provided in the build: Install_TeradataProtector_Linux_x64_<DBP_version>.sh
For more information, refer to the following sections:

• Installing the Protector on Single Node
• Installing the Protector on Multi Node

The Resilient Package (RP) Agent downloads the certificates. These certificates are further used to authenticate the login credentials, public or private keys, and certify the code reliability.

Prerequsites: The core libraries integrated with the build uses the secure mode to validate and download the certificates from ESA. To enable the secure mode:

1. Before proceeding with the RPA installation in secure mode, ensure that the required CA certificate is available and trusted on the system.
2. Download the certificate from ESA.

   Note: For more information about downloading certificates from ESA, refer to Manage Certificates.

3. After obtaining the certificate, configure the environment variable

   Variable	Value
   SSL_CERT_FILE	Is the full path to the certificate file.

4. Ensure to include ESA hostname or IP address in ESA TLS certificate (CN or SAN).
5. Ensure the ESA hostname or IP addres is resolvable from the RPAgent host.

To install the RPAgent:

1. Log in to the server as the user with the required permissions.

2. Navigate to the directory where the installation files are extracted. For example, /opt/protegrity/.

3. To install the RP Agent, run the following command:

   ./RPAgentSetup_Linux_x64_<DBP_version>.sh
   

4. Press ENTER.
   The prompt to enter the host name or the IP address of the ESA appears.

   Please enter upstream host name or IP address[]:
   

5. Enter the hostname for ESA.

   Note: Failure to specify the hostname will use the insecure mode to validate the certificates. Protegrity does not recommend using the insecure mode to validate and download the certificates from ESA.

6. Press ENTER.
   The prompt to enter the username for downloading the certificate appears.

   Please enter the user name for downloading certificates[]:
   

7. Enter the username to download the certificates.

8. Press ENTER.
   The prompt to enter the password for downloading the certificate appears.

   Please enter the password for downloading certificates []:
   

9. Enter the password to download the certificates.

10. Press ENTER.
    The installer extracts the files and downloads the certificates.

    Unpacking...
    Extracting files...
    Certificate validation successful.
    Obtaining token from <ESA_Hostname>:25400...
    Downloading certificates from <ESA_Hostname>:25400...
    % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
                                    Dload  Upload  Total   Spent   Left   Speed
    100  11264 100  11264   0      0  51225      0                              0
    
    Extracting certificates...
    Certificates successfully downloaded and stored in /opt/protegrity/rpagent/data
    
    Protegrity RPAgent installed in /opt/protegrity/rpagent.
    

    Note: If the JWT token is not specified while downloading the certificates, the RPAgent automatically retrieves the token from ESA. Note: For manual installation, the script will install the component under the specified directory only.

11. Navigate to the /opt/protegrity/rpagent/bin/ directory.

12. To start the RPAgent, run the following command:

    ./rpagentctrl start
    

13. Press ENTER.
    The command starts the RPAgent successfully and a confirmation message appears.

    Starting rpagent
    

14. To verify the status of the RPAgent, run the following command:

    ./rpagentctrl status
    

15. Press ENTER.
    The status of the RPAgent service appears.

    rpagent is running (pid=<process_ID>)