Offline installation of the SecureCircle agent for Linux

For Enterprise Linux (RHEL/CentOS/etc…)

Install the Java Development Kit version 8u121

This package is provided by SecureCircle and available from our repository.
https://nexus-cdn.saas.securecircle.com/repository/securecircle-centos/jdk-8u121-linux-x64.rpm
Install with:

sudo yum install jdk-8u121-linux-x64.rpm

Install the SecureCircle kernel module

Verify the current running kernel version with uname -r. It should output a version like 3.10.0-957.21.2.el7.x86_64 for example.

The example package for the v2.14.0.fde2e9d version of the SecureCircle kernel module is available from our repository.
https://nexus-cdn.saas.securecircle.com/repository/securecircle-centos/securecircle-driver-3.10.0-957.21.2-2.14.0.fde2e9d-1.el7.x86_64.rpm
Install with:

sudo yum install securecircle-driver-3.10.0-957.21.2-2.14.0.fde2e9d-1.el7.x86_64.rpm

Verify the module has been installed with:

rpm -ql securecircle-driver-3.10.0-957.21.2

Disable automated module requests from our server by setting the .scnoreqmod flag file in the /usr/share/fhfs directory.

$ sudo mkdir /usr/share/fhfs
$ sudo touch /usr/share/fhfs/.scnoreqmod

Install the SecureCircle agent

The example package for the v2.14.0.fde2e9d version of the SecureCircle agent is available from our repository.
https://nexus-cdn.saas.securecircle.com/repository/securecircle-centos/securecircle-2.14.0.fde2e9d-Linux.rpm
Install with:

sudo yum install securecircle-2.14.0.fde2e9d-Linux.rpm

Verify functionality

Verify the module has loaded with;

lsmod | grep fhfs

and

sudo journalctl -k | grep fhfs

Verify the module will load on boot by checking for the file /usr/lib/modules-load.d/fhfs.conf.

Verify the agent has loaded with;

systemctl status fhagent

and

journalctl -a -ufhagent

Register the system with the server

Using fhtools the system can be registered with the command:

$ fhtools --accept --cname $(hostname) --url MyServerHostName --inv MyInvitationId

Configure filesystem overlays.

Create a directory for using with SecureCircle. In the example below the /opt/securecircle directory is created and the developer group is given read/write access to it.

$ sudo bash -c "mkdir /opt/securecircle; chown root.developer /opt/securecircle; chmod g+w /opt/securecircle"

It is usually desired for the SecureCircle driver to start protection for a folder on boot. This can be done by configuring the /etc/fstab file. For example:

$ echo 'none /opt/securecircle fhfs rw,relatime,mount=/opt/securecircle 0 0' | sudo tee -a /etc/fstab

After issuing mount -a you should see your folder with the mount type fhfs in the listing of the mount command.