Red Hat NETWORK SATELLITE SERVER 3.7 Installation Manual page 16

12
2.4. Additional Requirements
The following additional requirements must be met before the RHN Satellite Server installation:
Full Access
•
Client systems need full network access to the RHN Satellite Server solution's services and ports.
Firewall Rules
•
The RHN Satellite Server solution can be firewalled from the Internet, but it must be able to issue
outbound connections to rhn.redhat.com and xmlrpc.rhn.redhat.com on ports 80 and 443.
Synchronized System Times
•
There is great time sensitivity when connecting to a Web server running SSL (Secure Sockets
Layer); it is imperative the time settings on the clients and server be reasonably close together so
the SSL certificate does not expire before or during use. For this reason, Red Hat requires the Satel-
lite and all client systems to use Network Time Protocol (NTP). This also applies to the separate
database machine in RHN Satellite Server with Stand-Alone Database, which must also be set to
the same time zone as the Satellite.
Fully Qualified Domain Name (FQDN)
•
The system upon which the RHN Satellite Server will be installed must resolve its own FQDN
properly. If this is not the case, cookies will not work properly on the website.
Functioning Domain Name Service (DNS)
•
For the RHN Satellite Server's domain name to be resolved by its clients, it and they must all be
linked to a working DNS server in the customer environment.
An Entitlement Certificate
•
The customer will receive, via email from the sales representative, a signed Entitlement Certificate
explaining the services provided by Red Hat through RHN Satellite Server. This certificate will be
required during the installation process.
A Red Hat Network Account
•
Customers who will be connecting to the central Red Hat Network Servers to receive incremental
updates will need an external account with Red Hat Network. This account should be set up at the
time of purchase with the sales representative.
Backups of Login Information
•
It is imperative customers keep track of all primary login information. For RHN Satellite Server, this
includes usernames and passwords for the Organization Administrator account on rhn.redhat.com,
the primary administrator account on the Satellite itself, SSL certificate generation, and database
connection (which also requires a SID, or net service name). Red Hat strongly recommends this
information be copied onto two separate floppy disks, printed out on paper, and stored in a fireproof
safe.
In addition to these requirements, it is recommended the RHN Satellite Server be configured in the
following manner:
The entire RHN Satellite Server solution should be protected by a firewall if the Satellite will be
•
accessing, or be accessed via the Internet. An Internet connection is not required for RHN Satel-
lite Servers running in completely disconnected environments as this feature instead uses Channel
Content ISOs that can be downloaded to a separate system to synchronize the Satellite with the
central Red Hat Network Servers. All other RHN Satellite Servers should be synchronized directly
over the Internet.
All unnecessary ports should be firewalled off. Client systems connect to RHN Satellite Server over
•
ports 80 and 443 only. In addition, if you plan to enable the pushing of actions from the Satellite
Chapter 2. Requirements