Centralized License Manager Release 21.6 Installation and Upgrade Guide 3HE-17327-AAAB-TQZZA Issue 1 June 2021 © 2021 Nokia. Use subject to Terms available at: www.nokia.com/terms CLM Legal notice Nokia is committed to diversity and inclusion. We are continuously reviewing our customer documentation and consulting with standards bodies to ensure that terminology is inclusive and aligned with the industry. Our future customer documentation will be updated accordingly. This document includes Nokia proprietary and confidential information, which may not be distributed or disclosed to any third parties without the prior written consent of Nokia. This document is intended for use by Nokia’s customers (“You”/”Your”) in connection with a product purchased or licensed from any company within Nokia Group of Companies. Use this document as agreed. You agree to notify Nokia of any errors you may find in this document; however, should you elect to use this document for any purpose(s) for which it is not intended, You understand and warrant that any determinations You may make or actions You may take will be based upon Your independent judgment and analysis of the content of this document. Nokia reserves the right to make changes to this document without notice. At all times, the controlling version is the one available on Nokia’s site. No part of this document may be modified. NO WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY OF AVAILABILITY, ACCURACY, RELIABILITY, TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, IS MADE IN RELATION TO THE CONTENT OF THIS DOCUMENT. IN NO EVENT WILL NOKIA BE LIABLE FOR ANY DAMAGES, INCLUDING BUT NOT LIMITED TO SPECIAL, DIRECT, INDIRECT, INCIDENTAL OR CONSEQUENTIAL OR ANY LOSSES, SUCH AS BUT NOT LIMITED TO LOSS OF PROFIT, REVENUE, BUSINESS INTERRUPTION, BUSINESS OPPORTUNITY OR DATA THAT MAY ARISE FROM THE USE OF THIS DOCUMENT OR THE INFORMATION IN IT, EVEN IN THE CASE OF ERRORS IN OR OMISSIONS FROM THIS DOCUMENT OR ITS CONTENT. Copyright and trademark: Nokia is a registered trademark of Nokia Corporation. Other product names mentioned in this document may be trademarks of their respective owners. © 2021 Nokia. © 2021 Nokia. Release 21.6 Use subject to Terms available at: www.nokia.com/terms June 2021 2 3HE-17327-AAAB-TQZZA Issue 1 Contents CLM Contents About this document............................................................................................................................................5 1 Pre-installation ...............................................................................................................................................7 1.1 Introduction .........................................................................................................................................7 1.2 Operating system specifications .........................................................................................................7 1.3 RHEL OS deployment in a VM............................................................................................................8 1.4 To deploy the RHEL OS for CLM using a qcow2 image......................................................................8 1.5 To apply a CLM RHEL qcow2 OS update .........................................................................................14 1.6 To remove the optional CLM RHEL qcow2 OS packages.................................................................16 1.7 Manual RHEL OS installation requirements......................................................................................18 1.8 Virtual machine requirements............................................................................................................32 1.9 VMware Virtualization........................................................................................................................32 1.10 KVM virtualization .............................................................................................................................33 1.11 OpenStack requirements ..................................................................................................................34 1.12 Platform requirements.......................................................................................................................35 1.13 CLM disk partitioning.........................................................................................................................36 1.14 To configure a CLM disk partition created after the RHEL OS installation ........................................36 1.15 Securing the CLM .............................................................................................................................38 1.16 CLM host OS security .......................................................................................................................39 1.17 Port information.................................................................................................................................39 1.18 CLM firewall rules and NAT...............................................................................................................41 2 Standalone installation and upgrade .........................................................................................................45 2.1 Introduction .......................................................................................................................................45 2.2 To install a standalone CLM system..................................................................................................51 2.3 To upgrade a standalone CLM server ...............................................................................................54 3 Redundant installation and upgrade..........................................................................................................59 3.1 Introduction .......................................................................................................................................59 3.2 To install a redundant CLM system ...................................................................................................59 3.3 To upgrade redundant CLM servers..................................................................................................62 3.4 To convert a standalone CLM system to a redundant CLM system..................................................66 4 Post-installation activities...........................................................................................................................69 4.1 Introduction .......................................................................................................................................69 4.2 Configuring and enabling User Access Control.................................................................................69 4.3 To uninstall a CLM system ................................................................................................................71 Release 21.6 © 2021 Nokia. June 2021 Use subject to Terms available at: www.nokia.com/terms Issue 1 3HE-17327-AAAB-TQZZA 3 Contents CLM 4.4 To enable CLM notification forwarding to NSP Fault Management application.................................72 4.5 To change CLM application settings .................................................................................................74 5 CLM user accounts and security................................................................................................................77 5.1 Introduction .......................................................................................................................................77 5.2 CLM and RHEL user accounts..........................................................................................................77 5.3 CLM authentication ...........................................................................................................................77 5.4 CLM login security.............................................................................................................................78 5.5 To suppress security warnings in CLM browser sessions.................................................................78 5.6 CLM TLS configuration and management.........................................................................................79 5.7 To configure and enable a PKI server ...............................................................................................81 5.8 To migrate to the PKI server..............................................................................................................85 5.9 To generate TLS keystore and truststore files...................................................................................86 5.10 Data privacy ......................................................................................................................................90 5.11 To configure the CLM security statement..........................................................................................91 5.12 To update the supported CLM TLS versions and ciphers .................................................................92 5.13 To update authenticator passwords ..................................................................................................95 6 Backup and restore......................................................................................................................................97