Quick Start SUMA Proxy

This guide shows you how to install and configure a single SUSE Manager Proxy for x86-64 architecture from the SUSE Linux Enterprise installation media with the Unified Installer.

For this topic we assume that you already have valid organization credentials with SUSE Customer Center and have obtained a registration code for your SUSE Manager Proxy, for example from a "SUSE Manager Lifecycle Management+" subscription.

1. Install SUSE Manager Proxy

This guide shows you how to install and configure a single SUSE Manager Proxy for x86-64 architecture from the SUSE Linux Enterprise installation media with the Unified Installer.

Procedure: Installing SUSE Manager Proxy with the Unified Installer
  1. To boot the Unified Installer from the installation image, you might need to adjust the boot order in the BIOS.

  2. When prompted, select Installation.

  3. In the Language, Keyboard and Product Selection screen, check the SUSE Manager Proxy checkbox, and click Next.

    unifiedinstaller proxy
  4. Read and agree to the End User Licence Agreement, and click Next.

  5. In the Registration screen, check the Register System via scc.suse.com checkbox, enter your SUSE Customer Center credentials, and click Next.

  6. In the Available Extensions and Modules screen, select any extensions or modules you require, and click Next. Basesystem, SUSE Manager Proxy, and Server Applications are pre-selected and mandatory for the SUSE Manager Proxy installation. OPTIONAL: In the following Add On Product screen, select any additional or add-on products you require, and click Next.

  7. In the System Role screen, check the SUSE Manager Proxy checkbox, and click Next.

  8. In the Suggested Partitioning screen, accept the default values, or use the Guided Setup or Expert Partitioner options to customize your partitioning model, and click Next.

  9. In the Clock and Time Zone screen, enter your region and timezone, and click Next.

  10. In the Local Users screen, create a new user, and click Next.

  11. Review the settings on the Installation Settings screen, and then click Install.

2. Register SUSE Manager Proxy

Before you can select the correct child channels while creating the activation key, ensure you have completely downloaded the SUSE Manager Proxy 4.3 channel and all the recommended and mandatory SUSE Linux Enterprise 15 SP4 channels.

Procedure: Registering the Proxy
  1. Create an activation key based on the SLE-Product-SUSE-Manager-Proxy-4.3-Pool base channel. For more information about activation keys, see アクティベーションキー.

    proxy key
    Figure 1. Proxy activation key
  2. From the Child Channels listing select the recommended channels by clicking the include recommended icon:

    • SLE-Module-Basesystem15-SP4-Pool

    • SLE-Module-Basesystem15-SP4-Updates

    • SLE-Module-Server-Applications15-SP4-Pool

    • SLE-Module-Server-Applications15-SP4-Updates

    • SLE-Module-SUSE-Manager-Proxy-4.3-Pool

    • SLE-Module-SUSE-Manager-Proxy-4.3-Updates

      The SLE-Product-SUSE-Manager-Proxy-4.3-Updates channel is mandatory.

      proxy child
      Figure 2. Base and Child Proxy Channel
  3. To bootstrap a proxy, use the bootstrap script. For more information about bootstrap scripts, see ブートストラップスクリプトを使用してクライアントを登録する.

    proxy bootstrap
    Figure 3. Modifying bootstrap script
  4. Alternatively, in the SUSE Manager Web UI, navigate to System  Bootstrapping.

    proxy bootstrapGUI
    Figure 4. Bootstrapping a proxy from GUI
  5. Navigate to System Details  Software  Software Channels, and check that the four proxy channels (Pool and Updates for SLE-PRODUCT and SLE-MODULE) plus the recommended channels are selected. SLE-PRODUCT-Pool must be the base channel and the others are child channels.

    sles15 proxy channels
    Figure 5. Proxy Channels

3. Set up SUSE Manager Proxy

Make sure the TCP ports 4505 and 4506 are open on the proxy. The proxy must be able to reach the SUSE Manager Server or a parent proxy on these ports.

Procedure: Copy Server Certificate and Key
  1. The proxy will share some SSL information with the SUSE Manager Server.

  2. Copy the certificate and its key from the SUSE Manager Server or the parent proxy.

  3. As root, enter the following commands on the proxy using your SUSE Manager Server or parent Proxy (named PARENT):

    mkdir -m 700 /root/ssl-build
    cd /root/ssl-build
    scp root@PARENT:/root/ssl-build/RHN-ORG-PRIVATE-SSL-KEY .
    scp root@PARENT:/root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT .
    scp root@PARENT:/root/ssl-build/rhn-ca-openssl.cnf .
  4. Run configure-proxy.sh The configure-proxy.sh script finalizes the setup of your SUSE Manager Proxy.

  5. Execute the interactive configure-proxy.sh script. Pressing Enter without further input will make the script use the default values provided between brackets []. Otherwise, use the values specific for your environment.

When the proxy configuration process is complete, you can continue with client registration. For more instructions, see クライアントをプロキシに登録する.