Installation on RHEL 8¶
Quick install¶
After obtaining the License Key, please use our interactive installation script to quickly install IDSTower:
$ curl -O https://download.idstower.com/install_script/1.1.0/install-IDSTower.sh
$ echo "a2d8a712add3fc732ce517cef54007817e432f9434e19d631772da96c5853313 install-IDSTower.sh" \
| sha256sum -c -
$ bash install-IDSTower.sh -i
Manual install¶
Please follow these steps to install IDSTower on RHEL 8:
Add IDSTower Yum repository
$ sudo bash -c 'cat > /etc/yum.repos.d/idstower.repo << EOF
[idstower]
name = IDSTower
baseurl = https://download.idstower.com/repos/yum/\$basearch/
enabled=1
gpgcheck=0
EOF'
Add MariaDB (10.6) Yum repository
$ sudo bash -c 'cat > /etc/yum.repos.d/mariadb.repo << EOF
[mariadb]
name = MariaDB
baseurl = https://archive.mariadb.org/mariadb-10.6/yum/rhel8-$(uname -m)
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1
enabled=1
module_hotfixes=1
EOF'
Install EPEL repository
$ sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y
Install Ansible, MariaDB and IDSTower
$ sudo yum install ansible-core ansible mariadb-server idstower -y
Start and enable MariaDB service
$ sudo systemctl enable mariadb.service
$ sudo systemctl start mariadb.service
$ sudo systemctl status mariadb.service
(Recommended) Run mariadb-secure-installation Script
$ sudo /usr/bin/mariadb-secure-installation
Edit the appsettings.json configuration file (located in: /opt/idstower/) and set the following settings
set the LicenseKey key value with the key you obtained from the license page.
set the URL key value with the url you want IDSTower to listen to, example: http://idstower.mydomain.local, this url must be reachable from your Suricata hosts, note that you can use ip addresses as well.
set the MySQL Database settings like host, port, database name, username & password via the Database key.
Initialize the IDSTower database
$ cd /opt/idstower/
$ sudo ./IDSTower --init-database
Note
If you wish to initialize the database manually, you can find the schema initialization script here: https://download.idstower.com/packages/latest/sql_scripts/
You can import the script by running:
$ sudo mysql -u [username] -p [DatabaseName] < idstower_schema_script.sql
Add an admin user to IDSTower
$ cd /opt/idstower/
$ sudo ./IDSTower --add-user [Your Admin Username]
Example:
$ sudo ./IDSTower --add-user admin
Enable and start IDSTower Service
$ sudo chown -R idstower:idstower /var/log/idstower
$ sudo systemctl enable idstower.service
$ sudo systemctl start idstower.service
Verify that IDSTower Service started correctly
$ sudo systemctl status idstower.service
Configure firewall to allow HTTP and HTTPS traffic
$ sudo firewall-cmd --zone=public --permanent --add-service=http
$ sudo firewall-cmd --zone=public --permanent --add-service=https
$ sudo firewall-cmd --reload
Access IDSTower web interface
You can now access the IDSTower web interface using the URL specified in your appsettings.json configuration file. Log in using the admin username and password you created in step 9.