Install the Entrust Certificate Authority

Install the Entrust Certificate Authority PostgreSQL

Entrust Certificate Authority requires a database to store information about the Certification Authority, X.509 users and EAC entities. See document PSIC-Entrust Certificate Authority 10.2.pdf located in the Documents tab of Product Support Center for Authority for supported databases.

In this guide, an embedded Certificate Authority supplied PostgreSQL database is used. This database will be installed on the same server that will host Entrust Certificate Authority. If you are using your own supplied database, Entrust strongly recommends that you install the database on its own dedicated server.

To install and use Certificate Authority in a cluster, you must use your own supplied database. The Entrust supplied Certificate Authority PostgreSQL Database does not support a clustered environment.

  1. Download the PostgreSQL 15.2.0 Full and Upgrade Installer - Windows from the Entrust TrustedCare online support site Certificate Authority.

  2. Double-click the msi file downloaded above. On a fresh installation the setup dialogs appears. Otherwise instructions to run ent_setup.bat appears as shown by the red arrow below. Proceeded to the setup window or select Finish and launch ent_setup.bat.

    run ent setup
    To launch ent_setup.bat open a command windows and execute C:\Program Files\Entrust\easm_postgres15\dbserver\bin\ent_setup.bat.
  3. Enter the following information in the setup window. Then press any key to complete the setup.

    Parameter Value

    Database super user easm_entrust_pg

    Password

    Database listen port

    Default 5432

    PostgreSQL Data directory

    Default C:\eca_pg_data\15

    PostgreSQL Wal directory

    Default c:\eca_pg_wal\15

    Database user easm_entrust

    Password

    Database backup user easm_entbackup

    Password

    For example:

    C:\Program Files\Entrust\easm_postgres15\dbserver\bin>ent_setup.bat
    [ent_setup]
    [ent_setup] Logging to 'C:\Users\Administrator\AppData\Roaming\Entrust\postgresql\ent_setup.log'.
    [ent_setup]
    [ent_setup] *******************************************************
    [ent_setup] Starting setup...
    [ent_setup] *******************************************************
    [ent_setup] Welcome to the Entrust Certificate Authority PostgreSQL Database 15.2 setup.
    [ent_setup]    Running as [ENTRUST-SM-WIND\Administrator]
    [ent_setup]
    [ent_setup] Checking for a previous version...
    [ent_setup]    Registry key [HKLM:\SOFTWARE\Entrust\PostgreSQL\11] does not exist, no installation found.
    [ent_setup]
    [ent_setup] Checking for current version...
    [ent_setup]    Found InstallDir [C:\Program Files\Entrust\easm_postgres15\].
    [init]
    [init] No upgradeable Entrust Authority Security Manager PostgreSQL Database installation was found.
    [init]
    [init] Do you wish to initialize Entrust Certificate Authority PostgreSQL Database 15.2 at this time? (y/n): y
    [init] Performing a full initialization for installation at [C:\Program Files\Entrust\easm_postgres15]...
    [init]
    [init] Checking for 'easm_entrust_pg' OS user...
    [init]    User was not found, creating OS user 'easm_entrust_pg'...
    [init]
    [init]    ***NOTE***: Be sure to adhere to any of your organization's password rules as well.
    [init]
    [init] The following characters cannot be used when choosing the password:
    [init]    < > # \ " / | ' ^ ; &  <space> <tab>
    [init] Please choose a password for:    'easm_entrust_pg': ***********
    [init] Please confirm the password for: 'easm_entrust_pg': ***********
    [init]    The 'easm_entrust_pg' user has been successfully created.
    [init]    Enabling SeServiceLogonRight for easm_entrust_pg...
    [init]
    [init] A database super user 'easm_entrust_pg' is required.
    [init]
    [init] The following characters cannot be used when choosing the password:
    [init]    < > # \ " / | ' ^ ; &  <space> <tab>
    [init] Please choose a password for:    'easm_entrust_pg': ***********
    [init] Please confirm the password for: 'easm_entrust_pg': ***********
    [init]
    [init] Please choose a listen port for the server [5432]:
    [init]
    [init] Please choose a location for the PostgreSQL Data directory : [c:\eca_pg_data\15]:
    [init] Adding full (inheritable) permission for [easm_entrust_pg] to location [c:\eca_pg_data\15]...
    [init] Adding full (inheritable) permission for [Administrators] to location [c:\eca_pg_data\15]...
    [init] Adding full (inheritable) permission for [ENTRUST-SM-WIND\Administrator] to location [c:\eca_pg_data\15]...
    [init]
    [init] Please choose a location for the PostgreSQL Wal directory : [c:\eca_pg_wal\15]:
    [init] Adding full (inheritable) permission for [easm_entrust_pg] to location [c:\eca_pg_wal\15]...
    [init] Adding full (inheritable) permission for [Administrators] to location [c:\eca_pg_wal\15]...
    [init] Adding full (inheritable) permission for [ENTRUST-SM-WIND\Administrator] to location [c:\eca_pg_wal\15]...
    [init]
    [init] Initializing Database cluster with database super user 'easm_entrust_pg'...
    [init]
    [init] Calculating the recommended shared_buffers value...
    [init] Installing and updating custom pg_easm_DB.conf...
    [init]    Setting archive_command path to C:\Program Files\Entrust\easm_postgres15\bin\pg_archwal.bat
    [init]    Setting port = 5432
    [init]    Setting shared_buffers = 2147483648 Bytes
    [init] Updating postgresql.conf...
    [init]    Setting include = pg_easm_DB.conf
    [init]    The database cluster is initialized.
    [init] Setting EASMPOSTGRESDIR environment variable...
    [init] Setting OPENSSL_CONF environment variable...
    [init]
    [init] Registering PostgreSQL Server as a Windows service...
    [init]
    [init] Setting PostgreSQL service display name and description...
    [init]
    [init] Starting the PostgreSQL service...
    [init]
    [init] Creating database easm_DB...
    [init]
    [init] A database user 'easm_entrust' is required.
    [init]
    [init] The following characters cannot be used when choosing the password:
    [init]    < > # \ " / | ' ^ ; &  <space> <tab>
    [init] Please choose a password for:    'easm_entrust': ***********
    [init] Please confirm the password for: 'easm_entrust': ***********
    [init] Creating 'easm_entrust' user...
    [init]
    [init] A database backup role 'easm_entbackup' is required.
    [init]
    [init] The following characters cannot be used when choosing the password:
    [init]    < > # \ " / | ' ^ ; &  <space> <tab>
    [init] Please choose a password for:    'easm_entbackup': ***********
    [init] Please confirm the password for: 'easm_entbackup': ***********
    [init] Creating 'easm_entbackup' database role...
    [init]
    [init] Creating easm_entrust schema...
    [init] Creating extension pgrowlocks...
    [init] Creating extension pg_freespacemap...
    [init] Creating extension pgstattuple...
    [init] Creating extension pg_buffercache...
    [init] Creating extension pageinspect...
    [init]
    [init] Removing full (inheritable) permission for [ENTRUST-SM-WIND\Administrator] from location [c:\eca_pg_data\15]...
    [init] Removing full (inheritable) permission for [ENTRUST-SM-WIND\Administrator] from location [c:\eca_pg_wal\15]...
    [init]
    [init] Registering PostgreSQL event DLL for [C:\Program Files\Entrust\easm_postgres15]...
    [init]
    [init] Setting PGPORT environment variable...
    [init]
    [init] Stopping the PostgreSQL service...
    [init]
    [init] Starting the PostgreSQL service...
    [ent_setup]
    [ent_setup] Operation complete!
    Press any key to continue . . .

Install the Entrust Certificate Authority

  1. Download the Certificate Authority Full and Upgrade Installer 10.2.11 - Windows from the Entrust TrustedCare online support site Certificate Authority.

  2. Double-click the msi file downloaded above to begin the installation.

    An installation wizard appears.

  3. Once the installation completes, select Finish in the Install Wizard Complete dialog. The installation path after the install will be C:\Program Files\Entrust.