Installation on Ubuntu 20 (Focal)#
Quick install#
After obtaining the License Key, please use the our interactive installation script to quickly install IDSTower:
$ curl -O https://download.idstower.com/install_script/1.0.0/install-IDSTower.sh
$ echo "6eef7644400dbc1ebfea553c912ed9010c086dd4ca551e522191df406ad28181 install-IDSTower.sh" \
| sha256sum -c -
$ bash install-IDSTower.sh -i
Manual install#
Please follow the following steps to install IDSTower on Ubuntu 20:
Add IDSTower repository
$ sudo wget -qO - https://download.idstower.com/repos/apt/idstower.key | sudo apt-key add -
$ echo "deb [arch=amd64] https://download.idstower.com/repos/apt stable main" | sudo tee /etc/apt/sources.list.d/idstower.list
$ sudo apt-get update
Install IDSTower
$ sudo apt install idstower -y
Start MariaDB service
$ sudo systemctl enable mariadb.service
$ sudo systemctl start mariadb.service
$ sudo systemctl status mariadb.service
(Recommended) Run mysql_secure_installation Script
$ sudo /usr/bin/mysql_secure_installation
Create a Database User for IDSTower
Note
Change USERNAME and PASSWORD in the command below with your desired username and password for IDSTower database user
$ sudo mariadb
$ GRANT ALL ON *.* TO 'USERNAME'@'localhost' IDENTIFIED BY 'PASSWORD' WITH GRANT OPTION;
$ FLUSH PRIVILEGES;
$ exit
Edit the appsettings.json configuration file (located in: /opt/idstower/) and set the following settings
set the LicenseKey key value with the key you obtained from the license page.
set the URL key value with the url you want IDSTower to listen to, example: http://idstower.mydomain.local, this url must be reachable from your Suricata hosts, note that you can use ip addresses as well.
set the MySQL Database settings like host, port, database name, username & password via the Database key.
run IDSTower with –init-database option to initialize the database:
$ cd /opt/idstower/
$ sudo ./IDSTower --init-database
Note
If you wish to initialize the database manually, you can find the schema initialization script here: https://download.idstower.com/packages/latest/sql_scripts/
You can easily import the script by running the following command:
$ sudo mysql -u [username] -p [DatabseName] < idstower_schema_script.sql
Add an admin user to IDSTower:
$ sudo ./IDSTower -a [Your Admin Username]
example:
$ sudo ./IDSTower -a admin
Enable & Start IDSTower Service
$ sudo chown -R idstower:idstower /var/log/idstower/*
$ sudo systemctl enable idstower.service
$ sudo systemctl start idstower.service
Verify that IDSTower Service started correctly
$ sudo systemctl status idstower.service
Now you can access IDSTower web interface using the url set in your appsettings.json