A blue chipboard that leads to a session gateway.

ISPIM 2.1 has a new feature added which allows privileged account users to access SSH servers through a web browser without installing any additional software on their workstation. This feature is called the Session Gateway.

How to Install the Session Gateway

Step 1: Set up the Docker CE Repository on Ubuntu

a. Check for your Ubuntu version (like xenial or trusty) by typing:

lsb_release –cs

b. Type (If you encounter an error, try restarting the server.):

sudo apt-get -y install apt-transport-https ca-certificates curl.

c. Type the next set of command lines:

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add

sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"

sudo apt-get update

d. Install the latest version of Docker CE on Ubuntu:

sudo apt-get -y install docker-ce

e. Test your Docker CE Installation:

sudo docker run hello-world

Step 2: Install the Session-Gateway Image

a. On the Linux host, copy the Privileged Session Gateway package to a target location. The Privileged Session Gateway package consists of the following components:

• ibm-session-gateway.tgz - The Privileged Session Gateway image.

• install.sh - The installation script that installs Privileged Session Gateway. Run the script with the --help parameter to see the list of supported arguments.

• run.sh - The script that creates and runs a Privileged Session Gateway container. Include the --help parameter to see the list of supported arguments.

• ibm-session-gateway.rsp - Response file that defines an instance of the Privileged Session Gateway.

b. Set the executable permission for the shell scripts. From the command line, type:

chmod +x install.sh

chmod +x run.sh

c. Run the installation script install.sh:

./install.sh --file ibm-session-gateway-latest.tgz

d. Verify that the image is installed:

docker images

Step 3: Create the Response File

Note: You must obtain the IBM Security Privileged Identity Manager root certificate (crt format) first.

a. Create a copy of the response file, ibm-session-gateway.rsp, provide a new name, and define the parameters.

b. Save the response file to a location on the computer.

Step 4: Initialize the Privileged Session Gateway

a. Initialize the Privileged Session Gateway image with the response file as a parameter where gateway1.rsp is the name of the new response file created in Step 3:

./run.sh -r gateway1.rsp

b. Verify that the Privileged Session Gateway instance is started:

docker ps

Step 5: Obtain Gateway Certificate

Note: Make sure the gateway instance is active.

a. Browse to the session gateway URL. For example:

https://pimgw.iamlab.local:9443/v1

b. Export the certificate for the gateway.

Step 6: Upload Gateway Certificate

a. From the top-level menu of the Appliance Dashboard, select Configure > Manage Server Setting > Manage Certificates.

b. Select the ISPIM certificate store and Click Edit.

c. Upload the certificate previously saved for the session gateway.

d. Enter a Label name and Save.

e. Restart the services for the changes to take effect.

Step 7: Configure Privileged Session Gateway

Notes:

Install the Privileged Session Gateway
Ensure that a two-way communication link is successful between the Privileged Session Gateway and the virtual appliance. From both the virtual appliance and Privileged Session Gateway, you can use the command line interface tools, nslookup and ping.

a. From the top-level menu of the Appliance Dashboard, select Configure > Manage External Entities > Privileged Session Gateway Configuration

b. Select Configure and specify the target location for the Privileged Session Gateway

c. Click Save Configuration.

d. Restart the Identity service from the Server Control widget.

Step 8: Done

For more information on Privileged Access Management, click here. For additional information on Privileged Session Gateway installation refer to IBM Knowledge Center.

How to Install the Session Gateway for ISPIM 2.1

Services

Solutions

Pricing

Resources

Events

About Us

Get Started