Updating CTPView 9.1R3.1 Server Operating System and CTPView Network Management System Software

Required Install Files

It is your responsibility to install CentOS on a VM, and the CentOS version must be 7.5.1804 (http://vault.centos.org/7.5.1804/isos/x86_64/).

For information on how to create a CentOS 7 virtual machine, see Creating a Virtualized Instance of CTPView Server on an ESX Server .

Installing newer releases of Centos are not supported; you must use Centos 7.5.1804. If you have queries or need further assistance, contact Juniper Networks Technical Assistance Center (JTAC).

You can install the CTPView 9.1R3.1 software using the following file:

To determine whether you are using the correct file:

Recommended System Configuration for Hosting a CTPView Server

We recommend the following hardware configuration to setup a CTPView 9.1R3.1 server:

• CentOS 7.5.1804 (64-bit)

• 1x processor (4 cores)

• 4 GB RAM

• Number of NICs - 2

• 80 GB Disk space

CTPView Installation and Maintenance Policy

With the CTPView 7.3Rx and earlier releases, the OS (CentOS 5.11) and CTPView application were combined and distributed as a single installation ISO, and all updates (OS and CTPView application) were only available from Juniper Networks. This causes a delay in getting CTPView maintenance releases for important security updates, including Linux OS applications and CTPView application.

With this new model, you can update individual CentOS applications independently from the CTPView application if any security vulnerabilities are reported for the Linux OS applications. This provides more flexibility you need, to ensure the security of your Linux-based platforms.

CTPView OS consists:

• Type 1—Stock CentOS 7.5 RPMs

• Type 2—Stock CentOS RPMs from other CentOS versions

• Type 3—Modified CentOS RPMs

• Type 4—CTPView application file

Where, "Stock" RPMs are the packages that are associated with a particular release of CentOS and readily available on the Internet. "Modified" RPMs are stock versions of RPMs that are modified by Juniper Networks for the needs of the CTPView platform. The CentOS 7.5 installation ISO only contains the components of type 1. The monolithic CTPView RPM contains the remaining components of types 2, 3, and 4, which can be unpacked and installed.

When Juniper Networks delivers a CTPView maintenance release RPM, it contains the updated component versions of types 2, 3, and 4. It also contains dependencies to make sure that type 1 components are also up to date and warn the user if any of them need to be updated.

Juniper Networks maintains a list of RPMs for CTPView that we suggest to be upgraded for security and functional reasons. The following methods are used for determining which CTPView RPMs need updates:

• Regular Retina/Nessus scans

• Notifications from Juniper's SIRT team

• Reports from customers

When an RPM update is required, Juniper Networks validates the new version of the component to make sure that it functions properly before adding it to the RPM list. This list will be shared with you via a KB article. Although CTPView maintenance updates mandate, and possibly provide, up-to-date RPMs before installation, this RPM list helps you to update your CTPView software between releases. If there is an RPM added to the RPM list, you can take immediate action. Juniper Networks delivers the components of type 3 via maintenance releases only. For type 1 and type 2 components, the RPMs should be freely available on the web, and Juniper Networks provides sample links. If you discover that an RPM needs a security update and it is not in the RPM list, you can notify Juniper Networks so that we can test it and add it to the list.

If you update RPMs that are not on the KB RPM list, CTPView may not function properly.

Creating a Centos 7 Virtual Machine

see Creating a Virtualized Instance of CTPView Server on an ESX Server

Installing CTPView 9.1R3.1

CTPView can be installed on the newly created CentOS 7.5[1804] VM or CentOS 7.5[1804] bare metal server. To install:

1. Create a new CentOS 7 Virtual Machine (VM) instance as mentioned in Creating a Virtualized Instance of CTPView Server on an ESX Server .
2. Copy the CTPView RPM (CTPView-9.1R-3.1-1.el7.x86_64.rpm) to /tmp directory of the newly created CentOS 7.5[1804] VM or CentOS 7.5[1804] bare metal.

3. Login as admin user that you created at the time of creating Centos 7 VM.

   Install CTPView RPM using the command sudo rpm -Uvh CTPView-9.1R-3.1-1.el7.x86_64.rpm.

4. Change the passwords for all the default user accounts (juniper_sa, root, Juniper, ctpview_pgsql) at the end, during installation (Refer section Change password of Default User accounts).

Upgrading to CTPView 9.1R3.1

1. Copy the CTPView RPM (CTPView-9.1R-3.1-1.el7.x86_64.rpm) to /tmp directory of a CTPView server running with previous version (9.0R1/9.1R1/9.1R2) of CTPView software. Before copying CTPView RPM make sure that /tmp directory is empty.

2. If you are installing it on top of

   • 9.1R2 or 9.1R1 Release, use the command sudo rpm -Uvh CTPView-9.1R-3.1-1.el7.x86_64.rpm.

   • 9.0R1 Release, use the command sudo rpm -Uvh --force CTPView-9.1R-3.1-1.el7.x86_64.rpm.

Change password of Default User accounts

This step is applicable only when you install CTPView 9.1R3.1 RPM on your server on top of Centos 7/9.1R1/9.0R1 but not applicable when you install on top of 9.1R2. Change the passwords for all the default user accounts as shown here:

########################################################################################################
CTPView has been installed on your system. Now, You need to set the passwords for all the user accounts.
########################################################################################################
#########################################################################
#########################################################################
#########################################################################
                  PLEASE REMEMBER THESE PASSWORDS!!!


Password recovery is not a simple process:
- It is service affecting.
- It requires console access to the CTPView
- It requires rebooting the CTPView (Possibly even a system repower)
#########################################################################
#########################################################################
#########################################################################
Enter New UNIX Password for root

Retype New UNIX Password for root

Changing password for user root.
passwd: all authentication tokens updated successfully.

This will be a System Administrator

Enter New UNIX Password for juniper_sa

Retype New UNIX Password for juniper_sa

Changing password for user juniper_sa.
passwd: all authentication tokens updated successfully.

Changing password for user Juniper
Enter the new password:


Re-Enter the new password:


You will now be asked for the password of the PostgreSQL Administrator account:
Password for user postgres:
UPDATE 1
===== Successfully updated the CTPView password for default user Juniper. =====

Note:  The user Juniper has been assigned to the default user group TempGroup
       and has been given default user properties.  Review the values using
       the CTPView Admin Center and make any appropriate modifications.

Changing password for user ctpview_pgsql
Enter the new password:

Re-Enter the new password:

You will now be asked for the password of the PostgreSQL Administrator account:
Password for user postgres:
ALTER ROLE

Note - You can also reset the password of all default user accounts from CTPView menu -> Advanced Functions
-> Reset account for default System Administrator

Uninstalling CTPView 9.1R3.1

To uninstall CTPView 9.1R3.1 from Centos 7:

1. Check if root login is permitted. If not, enable root login from menu -> Security Profile(1) -> Modify Security Level(5) -> Set OS level to 'very-low'(3).
2. Login through “root” user and run the command sudo rpm -evh CTPView-9.1R-3.1-1.el7.x86_64.rpm.
3. System will reboot after uninstalling. Then use admin user (the one you created while creating CentOS 7) to login.