This post is to record the steps I used to install PTA. There are lots of mistakes I made during installing PTA and integrating it with Vault and PVWA.
I used VM Installation – Hyper-V image. During lab, I used 16G RAM and 8 vCPU.
Install PTA using the Wizard. It will be ran a couple of times. First time it will be used to change root password and set up network configuration. We also are able to see Web GUI to load license but it won’t be able to integrate with PAS Vault and PVWA.
The installation wizard begins. Default values are displayed in brackets. For any optional tasks, chose no.
You will need a license file to continue logging into Web GUI.
|
1. |
On the system console, log in as the root user using the password you specified during installation. |
|
2. |
Start the PTA utility by running the following command: |
/opt/tomcat/utility/run.sh
|
3. |
Select 14. Generating a Certificate Signing Request (CSR). |
|
You can also generate a Certificate Signing Request by running the /opt/tomcat/utility/certificateSigningRequestGenerationUtil.sh command.
|
|
4. |
Specify the certificate details. |
- PTA Host name
- Organization
- Department
- City
- State
- Country Code
- PTA Server shared FQDN (this is optional for disaster recovery mode)
- Subject Alternative Names (SAN)
The Certificate Signing Request (CSR) is created in the pta_server.csr file located at /opt/tomcat/ca.
This step requires Vault Admin credentials using CyberArk authentication, and a restart of PTA services.
Installing SSL Certificate Chain (Root, Intermediate(s), PTA Server certificates):
Specify your Root Certificate full path (for example: /tmp/RootCertificate.crt):
