Install the Okta Privileged Access server agent on Red Hat (RHEL), Amazon Linux, Alma Linux, or Fedora

  1. Add the RPM key.

    sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  2. To access the artifacts, create one of the following files:
    • Stable: /etc/yum.repos.d/oktapam-stable.repo
    • Preview: /etc/yum.repos.d/oktapam-preview.repo

    Replace PLATFORM-KEY with the platform name. For example, amazonlinux, rhel, fedora, or alma. Replace RELEASE-VERSION with the major version of the OS. For example, 7, 8, and 9 (don't include minor version).

    Stable

    [oktapam-stable] name=Okta PAM Stable - PLATFORM-KEY RELEASE-VERSION baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/RELEASE-VERSION/$basearch gpgcheck=1 repo_gpgcheck=1 enabled=1 gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

    Preview

    [oktapam-preview] name=Okta PAM Preview - PLATFORM-KEY RELEASE-VERSION baseurl=https://dist.scaleft.com/repos/rpm/preview/PLATFORM-KEY/RELEASE-VERSION/$basearch gpgcheck=1 repo_gpgcheck=1 enabled=1 gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  3. Run dnf update and accept the new GPG key.

    If you get 404 errors, make sure the RELEASE-VERSION in step 2 is replaced with a supported version and only includes the major version. For example, for RedHat 8.6, replace RELEASE-VERSION with 8.

    Importing GPG key 0xB8966AE8: Userid : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>" Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8 From : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

  4. Install the server tools package, which includes the agent. If you don't have the dnf package manager you can use yum.

    sudo dnf install scaleft-server-tools

The sftd daemon should start automatically. Check the newest sftd log under /var/log/sftd/ to verify that the daemon is running.

Next steps

Server Enrollment