• Endpoint Manager On-Premise Deployment Guide
• How It Works
• Hardware Requirements
• Network Communication
• Firewall Requirements
• Software Requirements
• DNS Requirements
• SSL Requirements
• Export Certificate For Use On Endpoint Manager And Tigase Server
• Installation Via Installer
• Manual Installation
• Manual Upgrade
• SMTP Settings
• About Comodo Security Solutions

Manual Installation

1. Prerequisites: install docker and docker-compose

• Login to remote server

ssh username@ip-or-hostname

• Get installation script (for ubuntu)

wget http://get-compose.on-premise.itarian.com/install-docker-compose.sh

• Make file executable

chmod +x install-docker-compose.sh

• Run script

sudo ./install-docker-compose.sh

• Setup local user permissions

sudo usermod -a -G docker $USER

• Logout from current session and login again to apply local user group changes

exit
ssh username@ip-or-hostname

• Perform docker login:
  

docker login

Note: Your docker account must be created on hub.docker.com and added by ITarian team to allow for on-premise storage.

2. Extra server setup

Only for itsm server it need to tune system settings:

sudo sysctl -w vm.max_map_count=262144
echo vm.max_map_count=262144 | sudo tee -a /etc/sysctl.conf

3. Get docker-compose.yml and configure settings

1. Create and navigate to itsm dir
   mkdir ~/itsm
cd ~/itsm

2. Get docker-compose.yml for specific server:

   
   For ITSM server

   
   wget https://get-compose.on-premise.itarian.com/docker-compose-with-turn.yml -O docker-compose.yml
   
   
   

   For Tigase server

   
   wget https://get-compose.on-premise.itarian.com/tigase-docker-compose.yml -O docker-compose.yml

3. Create file with name .env and fill it according to your server requirements:

For ITSM server

ITSM_DOMAIN=on-premise.itsm.local




ITSM_TURN_SERVERS=ip of turn server




ITSM_XMPP_HOST=xmpp.itsm.local




ITSM_XMPP_IP=ip of xmpp server




ITSM_WEB_HOST=same as ITSM_DOMAIN on-premise.itsm.local

ITSM_WEB_IP=ip of this host


Where:


ITSM_DOMAIN - domain name which must be the same as the certificate domain used in setup




ITSM_TURN_SERVERS - list of ips where turn server is running separated by comma or space ( if turn servers has been setup )




ITSM_XMPP_HOST - domain for tigase server ( if tigase has been setup )




ITSM_XMPP_IP - ip for host specified in ITSM_XMPP_HOST if dns record cannot be resolved ( if tigase has been setup without dns )




ITSM_WEB_HOST - domain name which used by rmm microservices and points to itsm-server




ITSM_WEB_IP - ip for host specified in ITSM_WEB_HOST if dns record cannot be resolved

For tigase (xmpp) server

TIGASE_DOMAIN=itsm.local




ITSM_WEB_HOST=on-premise.itsm.local




ITSM_WEB_IP=ip of itsm server

4. Prepare and save SSL certificates

1. Prepare ASCII encoded certificate files:

• cert.crt - wildcard certificate for domain which specified as ITSM_DOMAIN

• cert.key - private key without password for cert.crt

• chain.crt - chaining certificate for cert.crt

• root.crt - CA root certificate for chain

2. Compose and save certificate files

For ITSM server

Save cert.crt and cert.key.

sudo mkdir -p /opt/itsm/web/certs
cat cert.crt chain.crt | sudo tee /opt/itsm/web/certs/cert.crt
sudo cp cert.key /opt/itsm/web/certs/cert.key

For Tigase server

Save single certificate bundle under the name specified in TIGASE_DOMAIN and .pem extension.

sudo mkdir -p /opt/tigase/certs
cat cert.key cert.crt chain.crt root.crt | sudo tee /opt/tigase/certs/itsm.local.pem

5. Starting up and basic management:

• Starting system

cd ~/itsm
docker-compose up -d

• Stopping system

docker-compose down

• View logs / debugging

docker-compose logs