Install the Advanced Server Access server agent on Red Hat (RHEL), Amazon Linux, or Alma Linux

Note:

End of sale announcement

Effective May 1, 2026, Okta will no longer sell or renew Advanced Server Access. Existing customers must migrate to Okta Privileged Access within one year of their next scheduled renewal date to maintain service.

Read the FAQ and learn more about Okta Privileged Access.

To install the Advanced Server Access server agent:

Add the RPM key.
sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

To access the artifacts create on one of the following files:

/etc/yum.repos.d/oktapam-stable.repo
/etc/yum.repos.d/oktapam-preview.repo

Replace PLATFORM-KEY with the appropriate platform name; for example, amazonlinux, rhel, or alma. Replace RELEASE-VERSION with the appropriate major version of the OS; for example, 7, 8, and 9 (don't include the minor version).

Stable

[oktapam-stable]
name=Okta PAM Stable - PLATFORM-KEY RELEASE-VERSION
baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/RELEASE-VERSION/$basearch
gpgcheck=1
repo_gpgcheck=1
enabled=1
gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

Preview

[oktapam-preview]
name=Okta PAM Preview - PLATFORM-KEY RELEASE-VERSION
baseurl=https://dist.scaleft.com/repos/rpm/preview/PLATFORM-KEY/RELEASE-VERSION/$basearch
gpgcheck=1
repo_gpgcheck=1
enabled=1
gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

Run sudo dnf makecache and accept the new GPG key.

Importing GPG key 0xB8966AE8:
 Userid     : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>"
 Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8
 From       : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

Note:

If you get 404 errors, make sure the RELEASE-VERSION in step 2 above is being replaced with a supported version and only includes the major version. For example, for RedHat 8.6, replace RELEASE-VERSION with 8 .

Install the server tools package, which includes the agent. If you don't have the dnf package manager you can use yum.
sudo dnf install scaleft-server-tools

The sftd daemon should start automatically. Check the newest sftd log under /var/log/sftd/ to verify that the daemon is running.

Next steps

Server Enrollment