Install the RDP Session transcoder

When capturing RDP sessions flowing through the Okta Privileged Access gateway, the log files are stored in a binary .asa format that isn't user-friendly. You can convert these files to a more usable .mkv video format by using a transcoder.The transcoder is packaged separately from the Okta Privileged Access gateway, and must be installed on the following supported platforms:

  • Ubuntu 22.04
  • Ubuntu 20.04
  • RHEL 8
  • RHEL 8 and 9

Ubuntu

To install the Okta Privileged Access gateway:

Steps 1–4 are only required once. If you've already installed an Okta Privileged Access agent or gateway, you can skip steps 1–4.

  1. Add the Okta Privileged Access repository key. curl -fsSL https://dist.scaleft.com/GPG-KEY-OktaPAM-2023 | gpg --dearmor | sudo tee /usr/share/keyrings/oktapam-2023-archive-keyring.gpg > /dev/null

  2. Create a package resource list entry. Replace DISTRIBUTION with the appropriate distribution name such as xenial, jammy, or bullseye. The distribution name for supported platforms are provided in the table below. echo "deb [signed-by=/usr/share/keyrings/oktapam-2023-archive-keyring.gpg] https://dist.scaleft.com/repos/deb DISTRIBUTION okta" | sudo tee /etc/apt/sources.list.d/oktapam-stable.list

    Platform

    Version
    Ubuntu

    Ubuntu 16.04 xenial

    Ubuntu 18.04 bionic

    Ubuntu 20.04 focal

    Ubuntu 22.04 jammy

    Debian

    Debian 10 buster

    Debian 11 bullseye
  3. Update the list of available packages:

    sudo apt-get update

  4. Search for the Okta Privileged Access packages.

    sudo apt-cache search scaleft

  5. Install the transcoder.

    sudo apt-get install scaleft-rdp-transcoder

RHEL 8

To install the Okta Privileged Access gateway:

Steps 2–4 are only required once. If you've already installed the Okta Privileged Access agent or gateway, you can skip steps 2–4.

  1. Install the prerequisites. FFmpeg and other dependent packages aren't available within the default Red Hat repository; therefore, the following two repositories must be added first.

    • sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y

    • sudo dnf install https://download1.rpmfusion.org/free/el/rpmfusion-free-release-8.noarch.rpm -y

  2. Add the RPM key.

    sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  3. To access the artifacts create a /etc/yum.repos.d/oktapam-stable.repo file. Replace PLATFORM-KEY with the platform name. You must only include a major version of the OS. For example, 8 for RHEL 8 (don't include a minor version).

    [oktapam-stable] name=Okta PAM Stable - PLATFORM-KEY 8 baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/8/$basearch gpgcheck=1 repo_gpgcheck=1 enabled=1 gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  4. Run dnf update and accept the new GPG key.

    Importing GPG key 0xB8966AE8: Userid : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>" Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8 From : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

    If you get 404 errors, make sure that the RHEL 8 version number only includes the major version.

  5. Install the transcoder.

    sudo dnf install scaleft-rdp-transcoder

RHEL 9

To install the Okta Privileged Access gateway:

Steps 2–4 are only required once. If you've already installed the Okta Privileged Access agent or gateway, you can skip steps 2–4.

  1. Install the prerequisites. FFmpeg and other dependent packages aren't available within the default Red Hat repository; therefore, the following two repositories must be added first.

    • sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm -y

    • sudo dnf install https://download1.rpmfusion.org/free/el/rpmfusion-free-release-9.noarch.rpm -y

    • sudo crb enable

  2. Add the RPM key.

    sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  3. To access the artifacts create a /etc/yum.repos.d/oktapam-stable.repo file. Replace PLATFORM-KEY with the platform name (rhel). Replace RELEASE-VERSION with the appropriate major version of the OS. For example, 9 for RHEL 9 (don't include minor version).

    [oktapam-stable] name=Okta PAM Stable - PLATFORM-KEY 9 baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/9/$basearch gpgcheck=1 repo_gpgcheck=1 enabled=1 gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  4. Run dnf update and accept the new GPG key.

    Importing GPG key 0xB8966AE8: Userid : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>" Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8 From : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

    If you get 404 errors, make sure that the RHEL 9 version number only includes the major version.

  5. Install the transcoder.

    sudo dnf install scaleft-rdp-transcoder

Related topics

Manage session logs

Session recording