1.7.0 Software McAfee VirusScan Enterprise for Linux

22
Installation Guide McAfee VirusScan Enterprise for Linux 1.7.0 Software

Transcript of 1.7.0 Software McAfee VirusScan Enterprise for Linux

Page 1: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Installation Guide

McAfee VirusScan Enterprise for Linux1.7.0 Software

Page 2: 1.7.0 Software McAfee VirusScan Enterprise for Linux

COPYRIGHTCopyright © 2011 McAfee, Inc. All Rights Reserved.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or byany means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

TRADEMARK ATTRIBUTIONSAVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE),MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registeredtrademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive ofMcAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.

LICENSE INFORMATION

License AgreementNOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETSFORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOUHAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOURSOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR AFILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SETFORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OFPURCHASE FOR A FULL REFUND.

2 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 3: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Contents

Preface 5About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5What's in this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Finding product documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

1 Introducing McAfee VirusScan Enterprise for Linux 7Product Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7What’s new in this release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

2 System Requirements 9Hardware and software requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 9

3 Installing McAfee VirusScan Enterprise for Linux 11Manual installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Silent installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14Running McAfee VirusScan Enterprise for Linux . . . . . . . . . . . . . . . . . . . . . . 15

Handling old certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Removing the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Upgrading from previous versions . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Integrating with ePolicy Orchestrator . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Index 21

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 3

Page 4: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Contents

4 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 5: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Preface

This guide provides the information you need to install your McAfee product.

For instructions on how to configure, use and maintain McAfee VirusScan Enterprise for Linux usingMcAfee ePolicy Orchestrator software, see the McAfee VirusScan Enterprise for Linux 1.7 —Configuration Guide. For detailed information all phases of product use from configuration totroubleshooting, see the McAfee VirusScan Enterprise for Linux 1.7 — Product Guide.

Contents

About this guide Finding product documentation

About this guideThis information describes the guide's target audience, the typographical conventions and icons usedin this guide, and how the guide is organized.

AudienceMcAfee documentation is carefully researched and written for the target audience.

The information in this guide is intended primarily for:

• Administrators — People who implement and enforce the company's security program.

• Users — People who use the computer where the software is running and can access some or all ofits features.

ConventionsThis guide uses the following typographical conventions and icons.

Book title or Emphasis Title of a book, chapter, or topic; introduction of a new term; emphasis.

Bold Text that is strongly emphasized.

User input or Path Commands and other text that the user types; the path of a folder or program.

Code A code sample.

User interface Words in the user interface including options, menus, buttons, and dialogboxes.

Hypertext blue A live link to a topic or to a website.

Note: Additional information, like an alternate method of accessing an option.

Tip: Suggestions and recommendations.

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 5

Page 6: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Important/Caution: Valuable advice to protect your computer system,software installation, network, business, or data.

Warning: Critical advice to prevent bodily harm when using a hardwareproduct.

What's in this guide This guide is organized to help you find the information you need.

This guide provides you with an introduction to McAfee VirusScan Enterprise for Linux and how toinstall and configure the software.

Topics include:

• Introducing McAfee VirusScan Enterprise for Linux

• System requirements and prerequisites before installing the software

• Types of installation such as manual and silent installation

• Detailed instructions on how to set up the software on various platforms

• How to run the software

• Handling old certificates

• Upgrading the software from previous versions

• Removing the software

• Brief description about integrating the software with ePolicy Orchestrator

Finding product documentationMcAfee provides the information you need during each phase of product implementation, frominstallation to daily use and troubleshooting. After a product is released, information about the productis entered into the McAfee online KnowledgeBase.

Task

1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com.

2 Under Self Service, access the type of information you need:

To access... Do this...

User documentation 1 Click Product Documentation.

2 Select a product, then select a version.

3 Select a product document.

KnowledgeBase • Click Search the KnowledgeBase for answers to your product questions.

• Click Browse the KnowledgeBase for articles listed by product and version.

PrefaceFinding product documentation

6 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 7: 1.7.0 Software McAfee VirusScan Enterprise for Linux

1 Introducing McAfee VirusScan Enterprisefor Linux

McAfee VirusScan Enterprise for Linux (previously known as LinuxShield) detects and removes virusesand other potentially unwanted software on Linux-based systems.

This information is intended for network administrators who are responsible for their company’santi-virus and security program.

Contents

Product Features What’s new in this release

Product FeaturesThis section describes the product features for the McAfee VirusScan Enterprise for Linux software.

McAfee VirusScan Enterprise for Linux software has the following features:

• Support for 64-bit AMD64/Intel EM64T operating systems.

• The latest version (5400) of the McAfee anti-virus engine.

• Incremental Virus Signature (DAT) updates.

• Mod-versioning for automatic kernel support.

• Regular expression based exclusions for On-access scan and On-demand scan from the user interface.

• Scanning

• Comprehensive on-access anti-virus scanning and cleaning using the McAfee scanning engine.

• On-access scanning for local file systems, NFS and Samba/CIFS.

• Kernel-level scan cache for improved performance.

• Scheduling of on-demand scans.

• Scheduling of updates for scanning engine and virus definition files.

• Administration

• Remote administration using browser-based interface.

• Secure browser interface with authentication and HTTPS (SSL) support.

• Remote administration and reporting using ePolicy Orchestrator 4.5 or 4.6.

1

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 7

Page 8: 1.7.0 Software McAfee VirusScan Enterprise for Linux

• Reporting

• Real-time statistics.

• Detailed database for detected items and system events.

• Ability to query the database by date range or individual field values, for example, virus name.Results of query can be exported to a CSV file.

• Configurable email notification for detected items, out-of-date virus definition files, configurationchanges, and system events.

• Diagnostic report for use when reporting a problem with the product.

What’s new in this releaseThis section describes the new enhancements in this release of VirusScan Enterprise for Linux.

• Support for Novell Cluster Services.

• Support for Corosync OCFS2 File System Cluster.

• Run-time Kernel Module Support

McAfee VirusScan Enterprise for Linux Kernel modules will be created dynamically in case of amod-version failure. To manually compile the kernel module, refer to the Frequently askedquestions — Run-time Kernel Module Support section in the Product Guide.

1 Introducing McAfee VirusScan Enterprise for LinuxWhat’s new in this release

8 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 9: 1.7.0 Software McAfee VirusScan Enterprise for Linux

2 System Requirements

This section describes the software and hardware requirements to install VirusScan Enterprise for Linux.

Hardware and software requirementsThe following hardware and software are required:

Supported operating systems (32-bit/64-bit)

• SuSE Linux Enterprise Server/Desktop 10.x

• SuSE Linux Enterprise Server/Desktop 11.x

• Red Hat Enterprise 5.x Advanced Platform, Desktop

• Red Hat Enterprise 6.x Server,Workstation, Client

• Novell Open Enterprise Server 2.x

• CentOS 5.x

• CentOS 6.x

• Ubuntu 10.04, 10.10 and 11.04 (Desktop/Server edition)

Supported kernels

• McAfee VirusScan Enterprise for Linux v1.7 supports all kernels available on the supporteddistributions.

Supported processors

• Intel x86 architecture-based processor

• Intel x86_64 architecture-based processor that supports Intel Extended Memory 64 Technology(Intel EM64T)

• AMD x86_64 architecture-based processor with AMD 64-bit technology

Memory

• Minimum: 2 GB

• Recommended: 4 GB

Free Disk space

• Minimum: 1 GB

2

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 9

Page 10: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Supported browsers

• Microsoft Internet Explorer 5.5, 6.0, 7.0 and 8.0

• Konqueror 3.5.1, 4.1.3, 4.2.x, and 4.3.x

• Mozilla 0.9.9, 1.0.1, 1.2.1, 1.4, 1.6, 1.7.8, 1.8.x, and 1.9.x

• Firefox 1.0, 1.5, 2.0, 3.0, 3.5, 3.6, 4.0, 5.0, and 6.0

Supported McAfee Management software

• McAfee ePolicy Orchestrator 4.5

• McAfee ePolicy Orchestrator 4.6

Supported McAfee Agent software

• McAfee Agent 4.5 Patch 2

• McAfee Agent 4.6

Display

Monitor screen with a recommended minimum resolution of 1024 x 768.

2 System RequirementsHardware and software requirements

10 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 11: 1.7.0 Software McAfee VirusScan Enterprise for Linux

3 Installing McAfee VirusScan Enterprisefor Linux

This chapter describes the installation process of McAfee VirusScan Enterprise for Linux.

You can install McAfee VirusScan Enterprise for Linux manually on hosts (see Manual installation) oryou can use a script (see Silent installation).

Download and extract the McAfee VirusScan Enterprise for Linux, version 1.7 package(McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz) on to a temporary directory.

Contents

Manual installation Silent installation Running McAfee VirusScan Enterprise for Linux Removing the software Upgrading from previous versions Integrating with ePolicy Orchestrator

Manual installationDuring installation, you are prompted to supply a password and other information. For most of thequestions, you can accept the default value that is offered.

Before you begin

• Ensure that there is no user named as "nails" or group named as "nailsgroup" on thecomputer.

• Ensure that you have root privileges to install McAfee VirusScan Enterprise for Linux.

• If you are installing VirusScan Enterprise for Linux on a 64-bit RHEL 6.x system, ensurethat 32-bit RHEL 6.x PAM libraries are also installed.

• If you are installing VirusScan Enterprise for Linux on a 64-bit Ubuntu system, ensurethat 32-bit Ubuntu libraries are also installed.

To set up email notification for alerts if it is required, you need a Mail Transfer Agent (MTA) configured,and the following information:

• Email address of the VirusScan administrator

• Address for the SMTP host

• TCP/IP port number for the SMTP host

3

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 11

Page 12: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Task

1 Download McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz on to a temporarydirectory.

2 From the terminal, go to the temporary directory and execute the following command:

tar -zxvf McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz

3 To install McAfee Runtime, type the following command in the terminal window:

rpm -ivh MFErt.i686.rpm

4 To install McAfee Agent (MA), type the following command in the terminal window:

rpm -ivh MFEcma.i686.rpm

5 To confirm that the McAfee Agent is running correctly, type the following command in the terminalwindow:

/etc/init.d/cma status

6 To install McAfee VirusScan Enterprise for Linux, type the following command in the terminal window:

sh McAfeeVSEForLinux-1.7.0-installer

7 Answer the questions when prompted. Accept the default values, or specify your own.

8 When prompted to start the VirusScan services, select the default option Y.

9 To confirm that VirusScan Enterprise for Linux is running correctly, type the following command inthe terminal window:

/etc/init.d/nails status

Tasks

• Installing on Novell Open Enterprise Server 2.x on page 12Use this task to install VirusScan Enterprise for Linux on Novell Open Enterprise Server 2.x.

• Installing on Ubuntu (Desktop or Server edition) on page 13Use this task to install VirusScan Enterprise for Linux on Ubuntu Server.

Installing on Novell Open Enterprise Server 2.xUse this task to install VirusScan Enterprise for Linux on Novell Open Enterprise Server 2.x.

Task

1 From the Novell eDirectory server, use iManager and create a user called "nails" and a group called"nailsgroup".

2 Add the user "nails" a member of the "nailsgroup". Enable the user and group using the Linux UserManagement.

3 Provide "nails" user with administrative privileges on all the NSS volumes.

rights -f /media/nss/<VOL-name> -r s trustee nails.<context>.<tree>

You need to provide administrative privileges to the "nails" user, every time a new NSS volume iscreated.

4 Download the MFErt.i686.rpm and MFEcma.i686.rpm file.

3 Installing McAfee VirusScan Enterprise for LinuxManual installation

12 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 13: 1.7.0 Software McAfee VirusScan Enterprise for Linux

5 Install McAfee Runtime and McAfee Agent using the following commands:

rpm -ivh MFErt.i686.rpm

rpm -ivh MFEcma.i686.rpm

6 To install McAfee VirusScan Enterprise for Linux, type the following command in the terminal window:

sh McAfeeVSEForLinux-1.7.0-installer

7 Type nailsgroup for the Linux group for VirusScan administrator.

8 Type nails for the VirusScan user.

9 Answer the questions when prompted. Accept the default values, or specify your own.

10 When prompted to start the VirusScan services, select the default option Y.

Installing on Ubuntu (Desktop or Server edition)Use this task to install VirusScan Enterprise for Linux on Ubuntu Server.

Before you begin

If you are installing VirusScan Enterprise for Linux on a 64-bit Ubuntu system, ensure thatyou perform the following steps before installation:

1 Copy pam_unix.so from /lib/security of a 32-bit Ubuntu (till version 10.10) systemto a temporary directory (/tmp) on the 64-bit Ubuntu system. From Ubuntu 11.04onwards, pam_unix.so is available under /lib/i386-linux-gnu folder.

2 In the root ( / ), create a folder pam32lib.

3 Execute the following command to copy pam_unix32.so to the pam32lib directory:

cp /tmp/pam_unix.so /pam32lib/pam_unix32.so

Task

1 Download the MFErt.i686.deb and MFEcma.i686.deb file.

2 Install McAfee Runtime and McAfee Agent using the following commands:

dpkg -i MFErt.i686.debdpkg -i MFEcma.i686.deb

3 Type the following at the command prompt:

sh McAfeeVSEForLinux-1.7.0-installer

4 Answer the questions when prompted. Accept the default values, or type your own.

5 When prompted to start the VirusScan services, select the default option Y.

6 To confirm that VirusScan Enterprise for Linux is installed and running correctly, type the followingat the command prompt:

/etc/init.d/nails status

Installing McAfee VirusScan Enterprise for LinuxManual installation 3

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 13

Page 14: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Silent installationUse this section to install McAfee VirusScan Enterprise for Linux in silent mode.

Before you begin

• Before installing VirusScan Enterprise for Linux, make sure that there is no user as"nails" and no group as "nailsgroup" in the computer.

• Before installing McAfee VirusScan Enterprise for Linux, you must have McAfee Runtimeand McAfee Agent already installed on the computer.

• Create a file "nails.options" in the root home (/root) directory.

For example:

SILENT_ACCEPTED_EULA=”yes”SILENT_INSTALLDIR=”/opt/NAI/LinuxShield”SILENT_RUNTIMEDIR=”/var/opt/NAI/LinuxShield”SILENT_ADMIN=”[email protected]”SILENT_HTTPHOST=”0.0.0.0”SILENT_HTTPPORT=”55443”SILENT_MONITORPORT=”65443”SILENT_SMTPHOST=”0.0.0.0”SILENT_SMTPPORT=”25”SILENT_NAILS_USER=”nails”SILENT_NAILS_GROUP=”nailsgroup”SILENT_CREATE_USER=”yes”SILENT_CREATE_GROUP=”yes”SILENT_RUN_WITH_MONITOR=”yes”SILENT_QUARANTINEDIR=”/quarantine”SILENT_START_PROCESSES=”yes”SILENT_CONTINUE_INSTALL_ON_PAM_ERROR=”no”

Use SILENT_CONTINUE_INSTALL_ON_PAM_ERROR only when 32-bit PAM libraries arenot present.

If you set this flag to yes and continue without Pluggable AuthenticationModule (PAM) libraries, the installation of VirusScan Enterprise for Linuxmonitor component is skipped, and the web interface will not be available.However, you can still manage the VirusScan Enterprise for Linux host usingePolicy Orchestrator or the web interface of some other VirusScan Enterprisefor Linux host. See information about Configuring VirusScan Enterprise forLinux in the Product Guide.

Task

1 To install McAfee VirusScan Enterprise for Linux, type the following command in the terminal window:

sh McAfeeVSEForLinux-1.7.0-installer

2 After performing the installation, use the command passwd to assign a password to the user "nails".

Tasks

• Installing on Novell Open Enterprise Server 2.x in silent mode on page 15Use this task to install on Novell Open Enterprise server 2.x in silent mode.

• Installing on Ubuntu (Desktop or Server edition) in silent mode on page 15Use this task to install on Ubuntu (Desktop/Server edition) in silent mode.

3 Installing McAfee VirusScan Enterprise for LinuxSilent installation

14 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 15: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Installing on Novell Open Enterprise Server 2.x in silent modeUse this task to install on Novell Open Enterprise server 2.x in silent mode.

Task

1 From the Novell eDirectory server, use iManager and create a user called "nails" and a group called"nailsgroup".

2 Add the user "nails" a member of the "nailsgroup", enable the user and group using the Linux UserManagement.

3 Provide "nails" user with administrative privileges on all the NSS volumes.

rights -f /media/nss/<VOL-name> -r s trustee nails.<context>.<tree>

You need to provide administrative privileges to the "nails" user, every time a new NSS volume iscreated.

4 In the "nails.options" file, check if the following parameters are available:

SILENT_NAILS_USER="nails"SILENT_NAILS_GROUP="nailsgroup"SILENT_CREATE_USER=”no”SILENT_CREATE_GROUP=”no”

5 From the terminal window, type sh McAfeeVSEForLinux-1.7.0-installer

6 After performing the installation, use iManager to assign a password to the user "nails".

Installing on Ubuntu (Desktop or Server edition) in silent modeUse this task to install on Ubuntu (Desktop/Server edition) in silent mode.

Before you begin

Ensure that the nails.options file is available in the root home (/root) directory. Forinformation on how to create the nails.options file, refer to the Silent installation section.

Task

1 Type the following at the command prompt:

sh McAfeeVSEForLinux-1.7.0-installer

2 After performing the installation, use the command passwd to assign a password to the user nails.

Running McAfee VirusScan Enterprise for LinuxUse this task to open the McAfee VirusScan Enterprise for Linux user interface.

Task

1 From a supported web-browser, go to https://<hostname or IP address>:<port number>Specify the hostname or IP address of the computer, on which VirusScan Enterprise for Linux isinstalled. By default, the port number is "55443".

https://192.168.200.200:55443 (or) https://server1:55443

Installing McAfee VirusScan Enterprise for LinuxRunning McAfee VirusScan Enterprise for Linux 3

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 15

Page 16: 1.7.0 Software McAfee VirusScan Enterprise for Linux

2 On the log on page, type the user name as nails and type the password that you specified duringinstallation.

If you see messages caused by the use of certificates, see the Handling old certificates section.

Tasks

• Handling old certificates on page 16Use this task if you see messages caused by the use of certificates.

Handling old certificatesUse this task if you see messages caused by the use of certificates.

VirusScan Enterprise for Linux has its own certificate which is added to the browser the first time youinstall the product. When you add this certificate permanently, then reinstall VirusScan Enterprise forLinux, you might experience an error, stating that the certificate is incorrect.

This happens because the certificate is different from the one stored in your browser. Every installationcreates a specific certificate for the host, and associates the certificate with the IP address or thename that you have provided. If the certificate does not match the stored certificate, the browserdisplays an error.

To fix this, remove the old certificate and accept the new one when prompted. The steps are describedfor each supported browser.

Tasks

• Konqueror on page 16Use this task if you see messages on Konqueror caused by the use of certificates.

• Mozilla on page 16Use this task if you see messages on Mozilla caused by the use of certificates.

• Microsoft Internet Explorer on page 17Use this task if you see messages on Internet Explorer caused by the use of certificates.

KonquerorUse this task if you see messages on Konqueror caused by the use of certificates.

Task

1 Open Konqueror.

2 At Settings, select Configure Konqueror.

3 At the new window, click the icon on the left side, called Crypto.

4 On the right pane, click the Peer SSL Certificate tab to display every certificate that you have saved.

5 Select and remove the Network Associates certificate. When you log on again, you are prompted withthe new certificate.

MozillaUse this task if you see messages on Mozilla caused by the use of certificates.

Task

1 Open Mozilla.

2 Select Edit | Preferences.

3 Installing McAfee VirusScan Enterprise for LinuxRunning McAfee VirusScan Enterprise for Linux

16 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 17: 1.7.0 Software McAfee VirusScan Enterprise for Linux

3 Expand Privacy & Security.

4 Select Certificate on the left side, and click Manage Certificates from the right pane.

5 On the new window, select the Authority tab and scroll to find Network Associates.

6 Expand this, and find the certificate displaying the IP address of the host or the host name. Selectthe certificate and delete it.

These steps should remove the certificate, and allow you to import the new certificate associated withthe host.

Microsoft Internet ExplorerUse this task if you see messages on Internet Explorer caused by the use of certificates.

Task

• Microsoft Internet Explorer does not save the certificate, but it will prompt you to accept thecertificate every time that you log on.

Removing the softwareUse this task to remove McAfee VirusScan Enterprise for Linux from your computer.

Task

1 To uninstall VirusScan Enterprise for Linux, type the following at the command prompt:

rpm -e McAfeeVSEForLinux

rpm -e MFEcma

rpm -e MFErt

If you want to uninstall from a Ubuntu server, type:

dpkg --purge mcafeevseforlinux

dpkg --purge mfecma

dpkg --purge mfert

2 Reboot the computer to remove the VirusScan Enterprise kernel modules.

You do not have to reboot the computer immediately, because the VirusScan Enterprise for Linuxkernel modules does not interrupt functioning of any other running service.

Upgrading from previous versionsUse this task to upgrade your previous LinuxShield version 1.5.1 or McAfee VirusScan Enterprise forLinux version 1.6 to version 1.7.

Task

1 To upgrade McAfee Agent (MA), type the following command in the terminal window:

rpm -Uvh MFEcma.i686.rpm

Installing McAfee VirusScan Enterprise for LinuxRemoving the software 3

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 17

Page 18: 1.7.0 Software McAfee VirusScan Enterprise for Linux

2 To confirm that the McAfee Agent is running correctly, type the following command in the terminalwindow:

/etc/init.d/cma status

3 To upgrade McAfee VirusScan Enterprise for Linux, type the following command in the terminalwindow:

sh McAfeeVSEForLinux-1.7.0-installer

4 To confirm that VirusScan Enterprise for Linux is running correctly, type the following command inthe terminal window:

/etc/init.d/nails status

Integrating with ePolicy OrchestratorUse this task to integrate McAfee VirusScan Enterprise for Linux with ePolicy Orchestrator.

Task

1 Download and extract the McAfee VirusScan Enterprise for Linux, version 1.7 package(McAfeeVSEForLinux-1.7.0-<build>-release.noarch.tar.gz) on to a temporary directory onthe ePolicy Orchestrator server.

2 Check in the McAfee Agent (MSA-LNX_4.6.0_Package.ZIP) bundled with this package on to theePolicy Orchestrator Master repository.

3 Check in McAfeeVSEForLinux-1.7.0-<build>-EPO.ZIP on to the ePolicy Orchestrator Masterrepository.

4 Check in the following extensions on to the ePolicy Orchestrator "Extensions":

• EPOAGENTMETA.ZIP

• LYNXSHLD1700.ZIP

• LYNXSHLD1700PARSER.ZIP

Before installing the reports extension (LYNXSHLD1700PARSER.ZIP), ensure that you haveremoved the previous LinuxShield reports extension module (LYNXSHLDPARSER) from ePolicyOrchestrator.

5 Create and download the agent installation package by performing the following steps:

a From System Tree, click System Tree Actions | New Systems. The New Systems page appears.

b Under How to add systems select Create and download agent installation package, click Non-Windows, then selectMcAfee Agent for Linux 4.6.0 (Current) and click OK.

c From Download file, right-click install and select Save Target As... to download the file on to your localsystem.

If you are deploying the product on a Ubuntu client system, download the installdeb.sh file on toyour local system. In case of ePolicy Orchestrator 4.5, this file is not available for download,hence copy this file from C:\Program Files\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3700LYNX\Install\0409.

3 Installing McAfee VirusScan Enterprise for LinuxIntegrating with ePolicy Orchestrator

18 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 19: 1.7.0 Software McAfee VirusScan Enterprise for Linux

6 From the Linux terminal, execute the following command:

sh install.sh –i

This will establish a connection between ePolicy Orchestrator and the Linux client computer.

7 Create a Product Deployment Task on ePolicy Orchestrator to deploy McAfee VirusScan Enterprise forLinux, version 1.7.

For more detailed information on how to integrate and configure McAfee VirusScan Enterprise forLinux using ePolicy Orchestrator, see the McAfee VirusScan Enterprise for Linux, version 1.7 —Configuration Guide.

Installing McAfee VirusScan Enterprise for LinuxIntegrating with ePolicy Orchestrator 3

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 19

Page 20: 1.7.0 Software McAfee VirusScan Enterprise for Linux

3 Installing McAfee VirusScan Enterprise for LinuxIntegrating with ePolicy Orchestrator

20 McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide

Page 21: 1.7.0 Software McAfee VirusScan Enterprise for Linux

Index

A

aboutMcAfee VirusScan Enterprise for Linux 7VirusScan Enterprise for Linux 7

about this guide 5audience 7

C

conventions and icons used in this guide 5

D

documentationaudience for this guide 5product-specific, finding 6typographical conventions and icons 5

F

featuresadministration 7reporting 7scanning 7VirusScan Enterprise for Linux 7

I

introductionMcAfee VirusScan Enterprise for Linux 7VirusScan Enterprise for Linux 7

L

Linuxshieldpreviously known as 7

M

McAfee ServicePortal, accessing 6McAfee VirusScan Enterprise for Linux

introduction 7

P

product features 7

S

ServicePortal, finding product documentation 6

T

Technical Support, finding product information 6

V

VirusScan Enterprise for Linuxfeatures 7introduction 7

W

what's in this guide 6

McAfee VirusScan Enterprise for Linux 1.7.0 Software Installation Guide 21

Page 22: 1.7.0 Software McAfee VirusScan Enterprise for Linux

00