Install the Advanced Server Access server agent on Red Hat (RHEL), Amazon Linux, or Alma Linux

End of sale announcement

Effective May 1, 2026, Okta will no longer sell or renew Advanced Server Access. Existing customers must migrate to Okta Privileged Access within one year of their next scheduled renewal date to maintain service.

Read the FAQ and learn more about Okta Privileged Access.

To install the Advanced Server Access server agent:

  1. Add the RPM key.

    sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  2. To access the artifacts create on one of the following files:
    • /etc/yum.repos.d/oktapam-stable.repo
    • /etc/yum.repos.d/oktapam-preview.repo

    Replace PLATFORM-KEY with the appropriate platform name; for example, amazonlinux, rhel, or alma. Replace RELEASE-VERSION with the appropriate major version of the OS; for example, 7, 8, and 9 (don't include the minor version).

    Stable

    [oktapam-stable] name=Okta PAM Stable - PLATFORM-KEY RELEASE-VERSION baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/RELEASE-VERSION/$basearch gpgcheck=1 repo_gpgcheck=1 enabled=1 gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

    Preview

    [oktapam-preview] name=Okta PAM Preview - PLATFORM-KEY RELEASE-VERSION baseurl=https://dist.scaleft.com/repos/rpm/preview/PLATFORM-KEY/RELEASE-VERSION/$basearch gpgcheck=1 repo_gpgcheck=1 enabled=1 gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  3. Run sudo dnf makecache and accept the new GPG key.

    Importing GPG key 0xB8966AE8: Userid : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>" Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8 From : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

    If you get 404 errors, make sure the RELEASE-VERSION in step 2 above is being replaced with a supported version and only includes the major version. For example, for RedHat 8.6, replace RELEASE-VERSION with 8 .

  4. Install the server tools package, which includes the agent. If you don't have the dnf package manager you can use yum.

    sudo dnf install scaleft-server-tools

The sftd daemon should start automatically. Check the newest sftd log under /var/log/sftd/ to verify that the daemon is running.

Next steps