| #### Installing the Master Security Server You must install one master Security server in each cell. Although you can have only one master Security server in each cell, you can install any number of replica Security servers. (See Installing a Security Server Replica for more information.) The machine on which you install the master Security server must be reliable and physically secure. In order to show all the common prompts you could receive, the installation steps in this topic assume that this is the first time you have installed the DCE. When you install a Security server, you may not receive all the prompts shown. To install the master Security server, perform the steps listed below: 1. At the DCE Installation Menu, type 1 and press <Return>. The dce_config script asks whether or not you want to remove the previous DCE installation by displaying the following prompt: Do you wish to first remove all remnants of previous DCE installations for all components? You should do so if you plan on re-installing all existing DCE components now (n): 2. Because you are installing the master Security server for the first time, type n and press <Return>. The dce_config script installs the master Security server and the DCE client binaries, displaying what it is doing as it does it. Then, if you are installing on an OSF/1 machine, dce_config prompts for whether to install lib_admin, a tool to load and install and load the OSF/1 shared libraries: Run /sbin/lib_admin? (y) 3. Type y to install the OSF/1 shared libraries or n to not and press <Return>. The dce_config script then prompts for the location of the message catalogs: Enter the directory into which message catalogs should be stored on the local machine (/usr/lib/nls/C): 4. Type the full pathname name of the directory in which the DCE message catalogs should be stored and press <Return> . Alternatively you can press <Return> to accept the default. Note that the actual default directory depends on the operating system on your machine. If your machine has an existing /etc/zoneinfo directory, dce_config displays the following prompt: The DCE version of the zoneinfo data files has been installed in /opt/dcelocal/etc/zoneinfo. You may need to replace /etc/zoneinfo with a link to this directory for the DCE time component to work correctly. Press <RETURN> to continue, CTRL-C to exit: This prompt is to remind you that you must replace the existing zoneinfo directory with a link to the newly installed DCE zoneinfo directory. You can do this after the installation completes. 5. To continue the installation, press <Return> at the prompt. If you are installing DCE on the OSF/1 reference platform and the /etc/ieee_802_addr file exists, the dce_config script prompts you to verify the machine's 12-digit hexadecimal Ethernet address: The following IEEE 802 address has already been entered for this machine: 0000c0eac744 Is this correct? (y) The dce_config script takes the displayed address from the Ethernet card or from the /etc/ieee_802_addr file. If the script cannot obtain the Ethernet address, it will prompt for it. At this point, you have two choices: a. Press <Return> if the displayed address is correct. b. If the displayed address is incorrect, type n and press <Return>. The dce_config script prompts for the correct address. Enter your machine's IEEE 802 address as a 12 digit hex number (e.g. 08002B0F59BB): Type the correct address and press <Return>. The dce_config script completes the installation and returns the DCE Installation Menu. ###