System requirements for ACDI
Unzip and start the installation
Check the hostname and extract all components
Step 1 Choose or create an ACDI user
Step 2 ACDI Server hostname
Step 3 Configure ACDI Local-admin service account
Step 4 Configure Opensearch admin service account
Step 5 Configure OSD service account
Step 6 Configure LDAP connection
Step 7 Configure AuditReport ServiceSteps 8 and 9 Install Autostart Scripts and start ACDI components. A self-signed certificate
Adding a License
Today we'll go through ACDI installation. On this screen you may see the system requirements for ACDI.
These requirements are:
Minimum 4 cores from 16 to 32GB of RAM
Root access
At least 100GB of disk space
Red Hat version 8, SLES 15 or Ubuntu 22. Any other Linux may be used on demand.
Open in port 3119 to outside. It will be required to send data from a machine with IDM to a machine with ACDI.
Now let's go to the terminal, to the machine where we'll install ACDI.
 We'll need root access, as well as the zip file with ACDI. Let's unzip it. We install into the OPT folder.
Okay, let's go inside. Here we’ll need to start ./install.sh.
So, we know that the hostname of our machine – Linux Nzdp – is resolvable and we'll use it in the ACDI installation.
Let's extract all components. Now the files are extracted.
As the next step, we need to choose whether we'll use an existing Linux user or create a new one.
By default, the Install script suggests that we create a user with the name acdi.
Press Enter to use the default name.
Now we need to define a resolvable FQDN for the ACDI instance.
In step #3 we'll need to define the name of a local account that will have administrative rights and access to all components.
Press Enter to use the default ACDI admin.
Now we need to set a default password for this user.
We will need this user to be able to configure a connection to ACDI in ACDI Driver in IDM.
This user will have access to the OpenSearch dashboards.
Press Enter to use the default OSD admin.
Now we need to select what LDAP connection will be used as the default connection to eDirectory or to Active Directory.
Here we'll use eDirectory.
Now we need to define a resolvable FQDN of the LDAP server.
Please don't forget to set the port.
So, this is the account which has access and can read data from the LDAP server.
Now we need to set its password.
Note: If, for some reason, the connection was broken and installation was interrupted during any of the steps, we can run ./install.sh one more time and continue from the place where the installation has been interrupted.
Great! The connection to the LDAP server has been established. The authorization is successful.
