Install the ONTAP Mediator installation package
Contributors
Suggest changes
PDFs
To install ONTAP Mediator, you must get the installation package and run the installer on the host.
|
To upgrade an existing ONTAP Mediator installation, see Upgrade ONTAP Mediator instead. |
About this task
-
Beginning with ONTAP 9.19.1 and ONTAP Mediator 1.12, you have the option to install ONTAP Mediator with iSCSI and HTTPS support, or support for HTTPS only. If you choose to install ONTAP Mediator with support for HTTPS only, the SCST package is not installed.
-
If you upgrade from ONTAP Mediator 1.11 or earlier with SCST installed, and you choose the HTTPS only option during the upgrade, the SCST package is uninstalled and the new ONTAP Mediator version does not contain the SCST package.
-
If you plan to use ONTAP Mediator to monitor multiple MetroCluster IP configurations, the support depends on your Mediator type, ONTAP version, and OS. Refer to Use ONTAP Mediator to monitor multiple MetroCluster IP configurations for more information.
-
Installing ONTAP Mediator with support for HTTPS only is supported for the following use cases:
-
You plan to only use ONTAP Mediator to monitor your SnapMirror active sync clusters.
-
You plan to configure ONTAP Mediator with HTTPS to monitor one or more MetroCluster IP configurations.
-
-
ONTAP Mediator must be installed with support for iSCSI and HTTPS in the following scenario:
-
You plan to configure ONTAP Mediator with iSCSI to monitor one or more MetroCluster IP configurations.
-
-
During installation or upgrade to ONTAP Mediator 1.12 or later, the installer prompts you to respond to the following:
ONTAP Mediator can be installed with iSCSI and HTTPS support, or HTTPS support only. Do you wish to install ONTAP Mediator with iSCSI and HTTPS support? Y(es)/n(o):-
Respond
Yesif you plan to use ONTAP Mediator configured with iSCSI to monitor one or more MetroCluster IP configurations. -
Respond
Noif you plan to only use ONTAP Mediator for SnapMirror active sync, or if you plan to configure ONTAP Mediator with HTTPS to monitor one or more MetroCluster IP configurations.Alternatively, you can use the
--https-onlyoption in the./ontap-mediator-1.13.0/ontap-mediator-1.13.0command to specify HTTPS only.
-
-
For automation use cases, you can use the
./ontap-mediator-1.13.0/ontap-mediator-1.13.0 -ycommand to skip the installer prompts.
Steps
-
Run the installer and respond to the prompts as required:
./ontap-mediator-1.13.0/ontap-mediator-1.13.0[root@mediator_host ~]# ./ontap-mediator-1.13.0/ontap-mediator-1.13.0
To skip signature check during installation, use the
./ontap-mediator-1.13.0/ontap-mediator-1.13.0 --skip-code-signature-checkcommandThe installer creates the required accounts and installs the required packages. If ONTAP Mediator is already installed, the installer prompts you to upgrade instead; for upgrade-specific steps and examples, see Upgrade ONTAP Mediator.
Example ONTAP Mediator installation with HTTPS and iSCSI support (console output)
[root@mediator-host ~]# ontap-mediator-1.13.0/ontap-mediator-1.13.0 -y ONTAP Mediator: Self Extracting Installer + Extracting the ONTAP Mediator installation/upgrade archive + Performing the ONTAP Mediator run-time code signature check Using openssl from the path: /usr/bin/openssl configured for CApath:/etc/pki/tls Error querying OCSP responder 40B70028217F0000:error:1E800080:HTTP routines:OSSL_HTTP_REQ_CTX_nbio:failed reading data:crypto/http/http_client.c:596: 40B70028217F0000:error:1E800067:HTTP routines:OSSL_HTTP_REQ_CTX_exchange:error receiving:crypto/http/http_client.c:1046:server=http://ocsp.entrust.net:80 WARNING: The OCSP check failed while attempting to test the Code-Signature-Check certificate Continue without code signature checking (only recommended if integrity has been established manually)? y(es)/N(o): yes SKIPPING: Code signature check, manual override due to lack of OCSP response + Unpacking the ONTAP Mediator installer + ONTAP_MEDIATOR_INSTALL_HTTPS_ONLY is set to '0', args are: '' + Starting ONTAP Mediator install/update process: previous installation_mode is '' ONTAP Mediator can be installed with iSCSI and HTTPS support, or HTTPS support only. Do you wish to install ONTAP Mediator with iSCSI and HTTPS support? Y(es)/n(o): yes ONTAP Mediator will be installed with mode: ISCSI_HTTPS + Selected install package mode: ISCSI_HTTPS + Checking that required ports 3260 and 31784 are free ONTAP Mediator requires two user accounts. One for the service (netapp), and one for use by ONTAP to the mediator API (mediatoradmin). Would you like to use the default account names: netapp + mediatoradmin? (Y(es)/n(o)): yes Enter ONTAP Mediator user account (mediatoradmin) password: Re-Enter ONTAP Mediator user account (mediatoradmin) password: + Checking if SELinux is in enforcing mode SELinux is set to Enforcing. ONTAP Mediator server requires modifying the SELinux context of the file /opt/netapp/lib/ontap_mediator/pyenv/bin/uwsgi from type 'lib_t' to 'bin_t'. This is neccessary to start the ONTAP Mediator service while SELinux is set to Enforcing. Allow SELinux context change? Y(es)/n(o): yes The installer will change the SELinux context type of /opt/netapp/lib/ontap_mediator/pyenv/bin/uwsgi from type 'lib_t' to 'bin_t'. + Checking for default Linux firewall Linux firewall is running. Open ports 31784 and 3260? Y(es)/n(o): yes success success success + Installing required packages. Last metadata expiration check: 0:04:17 ago on Mon 02 Nov 2026 06:27:32 AM EST. Package openssl-1:3.5.5-2.0.1.el10_2.x86_64 is already installed. Package which-2.21-44.el10.x86_64 is already installed. Package libselinux-utils-3.10-1.el10.x86_64 is already installed. Package perl-Data-Dumper-2.189-512.el10.x86_64 is already installed. Package bzip2-1.0.8-25.el10.x86_64 is already installed. Package efibootmgr-18-8.0.1.el10.x86_64 is already installed. Package mokutil-2:0.7.2-4.el10.x86_64 is already installed. Package policycoreutils-python-utils-3.10-1.el10.noarch is already installed. Package python3-3.12.13-2.0.1.el10_2.x86_64 is already installed. Dependencies resolved. ============================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================= Installing: elfutils-libelf-devel x86_64 0.194-2.el10_2 ol10_appstream_netapp 140 k gcc x86_64 14.3.1-4.4.0.1.el10 ol10_appstream_netapp 38 M kernel-uek-devel x86_64 6.12.0-204.92.4.2.el10uek ol10_uek8_netapp 47 M make x86_64 1:4.4.1-9.el10 ol10_baseos_netapp 620 k openssl-devel x86_64 1:3.5.8-2.0.1.el10_2 ol10_appstream_netapp 3.7 M patch x86_64 2.7.6-26.el10 ol10_appstream_netapp 133 k perl-ExtUtils-MakeMaker noarch 2:7.70-513.el10 ol10_appstream_netapp 344 k python3-devel x86_64 3.12.15-1.0.1.el10_2 ol10_appstream_netapp 521 k python3-pip noarch 23.3.2-11.el10_2 ol10_appstream_netapp 4.4 M Upgrading: openssl x86_64 1:3.5.8-2.0.1.el10_2 ol10_baseos_netapp 1.4 M openssl-libs x86_64 1:3.5.8-2.0.1.el10_2 ol10_baseos_netapp 2.3 M policycoreutils x86_64 3.10-2.el10_2 ol10_baseos_netapp 568 k policycoreutils-python-utils noarch 3.10-2.el10_2 ol10_appstream_netapp 250 k python-unversioned-command noarch 3.12.15-1.0.1.el10_2 ol10_appstream_netapp 15 k python3 x86_64 3.12.15-1.0.1.el10_2 ol10_baseos_netapp 37 k python3-libs x86_64 3.12.15-1.0.1.el10_2 ol10_baseos_netapp 11 M python3-policycoreutils noarch 3.10-2.el10_2 ol10_appstream_netapp 2.6 M which x86_64 2.21-44.el10_0 ol10_baseos_netapp 62 k Installing dependencies: annobin-docs noarch 13.02-2.el10 ol10_appstream_netapp 147 k annobin-plugin-gcc x86_64 13.02-2.el10 ol10_appstream_netapp 1.0 M binutils x86_64 2.41-63.0.1.el10 ol10_baseos_netapp 6.7 M binutils-devel x86_64 2.41-63.0.1.el10 ol10_appstream_netapp 8.8 M binutils-gold x86_64 2.41-63.0.1.el10 ol10_baseos_netapp 908 k cmake-filesystem x86_64 3.31.8-1.el10 ol10_appstream_netapp 57 k cpp x86_64 14.3.1-4.4.0.1.el10 ol10_appstream_netapp 13 M dwz x86_64 0.16-1.el10 ol10_appstream_netapp 150 k efi-srpm-macros noarch 6-6.0.1.el10 ol10_appstream_netapp 27 k fonts-srpm-macros noarch 1:2.0.5-18.el10 ol10_appstream_netapp 31 k forge-srpm-macros noarch 0.4.0-6.el10 ol10_appstream_netapp 26 k gcc-c++ x86_64 14.3.1-4.4.0.1.el10 ol10_appstream_netapp 15 M gcc-plugin-annobin x86_64 14.3.1-4.4.0.1.el10 ol10_appstream_netapp 70 k glibc-devel x86_64 2.39-121.0.1.el10_2 ol10_appstream_netapp 1.1 M go-srpm-macros noarch 3.8.0-1.el10 ol10_appstream_netapp 34 k kernel-headers x86_64 6.12.0-211.69.1.el10_2 ol10_appstream_netapp 4.4 M kernel-srpm-macros noarch 1.0-27.0.1.el10 ol10_appstream_netapp 12 k libstdc++-devel x86_64 14.3.1-4.4.0.1.el10 ol10_appstream_netapp 3.5 M libxcrypt-devel x86_64 4.4.36-10.el10 ol10_appstream_netapp 42 k libzstd-devel x86_64 1.5.5-9.el10 ol10_appstream_netapp 55 k lua-srpm-macros noarch 1-15.el10 ol10_appstream_netapp 8.7 k ocaml-srpm-macros noarch 10-4.el10 ol10_appstream_netapp 9.0 k openblas-srpm-macros noarch 2-19.el10 ol10_appstream_netapp 7.6 k package-notes-srpm-macros noarch 0.5-13.el10 ol10_appstream_netapp 9.1 k perl-AutoSplit noarch 5.74-515.el10_2 ol10_appstream_netapp 103 k perl-Benchmark noarch 1.25-515.el10_2 ol10_appstream_netapp 108 k perl-CPAN-Meta-Requirements noarch 2.143-11.el10 ol10_appstream_netapp 43 k perl-CPAN-Meta-YAML noarch 0.018-512.el10 ol10_appstream_netapp 31 k perl-Devel-PPPort x86_64 3.72-512.el10 ol10_appstream_netapp 227 k perl-ExtUtils-Command noarch 2:7.70-513.el10 ol10_appstream_netapp 14 k perl-ExtUtils-Constant noarch 0.25-515.el10_2 ol10_appstream_netapp 134 k perl-ExtUtils-Install noarch 2.22-511.el10 ol10_appstream_netapp 51 k perl-ExtUtils-Manifest noarch 1:1.75-511.el10 ol10_appstream_netapp 40 k perl-ExtUtils-ParseXS noarch 1:3.51-512.el10 ol10_appstream_netapp 211 k perl-File-Compare noarch 1.100.800-515.el10_2 ol10_appstream_netapp 94 k perl-File-Copy noarch 2.41-515.el10_2 ol10_appstream_netapp 101 k perl-I18N-Langinfo x86_64 0.24-515.el10_2 ol10_appstream_netapp 107 k perl-JSON-PP noarch 1:4.16-513.el10 ol10_appstream_netapp 86 k perl-Test-Harness noarch 1:3.48-512.el10 ol10_appstream_netapp 375 k perl-lib x86_64 0.65-515.el10_2 ol10_appstream_netapp 96 k perl-srpm-macros noarch 1-57.el10 ol10_appstream_netapp 8.4 k perl-version x86_64 8:0.99.32-4.el10 ol10_appstream_netapp 74 k pyproject-srpm-macros noarch 1.18.5-1.el10 ol10_appstream_netapp 26 k python-srpm-macros noarch 3.12-11.el10 ol10_appstream_netapp 47 k qt6-srpm-macros noarch 6.10.1-1.el10 ol10_appstream_netapp 12 k redhat-rpm-config noarch 295-1.0.1.el10 ol10_appstream_netapp 155 k rust-toolset-srpm-macros noarch 1.92.0-2.el10_2 ol10_appstream_netapp 27 k systemtap-sdt-devel x86_64 5.4-3.0.1.el10 ol10_appstream_netapp 85 k systemtap-sdt-dtrace x86_64 5.4-3.0.1.el10 ol10_appstream_netapp 84 k zlib-ng-compat-devel x86_64 2.2.3-3.el10_1 ol10_appstream_netapp 45 k Installing weak dependencies: perl-CPAN-Meta noarch 2.150010-511.el10 ol10_appstream_netapp 288 k perl-Encode-Locale noarch 1.05-31.el10 ol10_appstream_netapp 22 k perl-Time-HiRes x86_64 4:1.9777-511.el10 ol10_appstream_netapp 64 k perl-devel x86_64 4:5.40.2-512.2.el10_0 ol10_appstream_netapp 925 k perl-doc noarch 5.40.2-512.2.el10_0 ol10_appstream_netapp 5.3 M Transaction Summary ============================================================================================================================================================= Install 64 Packages Upgrade 9 Packages Total download size: 177 M Is this ok [y/N]: y Downloading Packages: (1/73): make-4.4.1-9.el10.x86_64.rpm 3.4 MB/s | 620 kB 00:00 (2/73): binutils-gold-2.41-63.0.1.el10.x86_64.rpm 4.3 MB/s | 908 kB 00:00 (3/73): annobin-docs-13.02-2.el10.noarch.rpm 2.2 MB/s | 147 kB 00:00 (4/73): annobin-plugin-gcc-13.02-2.el10.x86_64.rpm 5.8 MB/s | 1.0 MB 00:00 (5/73): cmake-filesystem-3.31.8-1.el10.x86_64.rpm 862 kB/s | 57 kB 00:00 (6/73): binutils-2.41-63.0.1.el10.x86_64.rpm 11 MB/s | 6.7 MB 00:00 (7/73): dwz-0.16-1.el10.x86_64.rpm 937 kB/s | 150 kB 00:00 (8/73): binutils-devel-2.41-63.0.1.el10.x86_64.rpm 14 MB/s | 8.8 MB 00:00 (9/73): efi-srpm-macros-6-6.0.1.el10.noarch.rpm 221 kB/s | 27 kB 00:00 (10/73): elfutils-libelf-devel-0.194-2.el10_2.x86_64.rpm 1.9 MB/s | 140 kB 00:00 (11/73): fonts-srpm-macros-2.0.5-18.el10.noarch.rpm 402 kB/s | 31 kB 00:00 (12/73): cpp-14.3.1-4.4.0.1.el10.x86_64.rpm 21 MB/s | 13 MB 00:00 (13/73): forge-srpm-macros-0.4.0-6.el10.noarch.rpm 234 kB/s | 26 kB 00:00 (14/73): gcc-plugin-annobin-14.3.1-4.4.0.1.el10.x86_64.rpm 1.2 MB/s | 70 kB 00:00 (15/73): glibc-devel-2.39-121.0.1.el10_2.x86_64.rpm 6.0 MB/s | 1.1 MB 00:00 (16/73): go-srpm-macros-3.8.0-1.el10.noarch.rpm 701 kB/s | 34 kB 00:00 (17/73): gcc-c++-14.3.1-4.4.0.1.el10.x86_64.rpm 21 MB/s | 15 MB 00:00 (18/73): kernel-srpm-macros-1.0-27.0.1.el10.noarch.rpm 419 kB/s | 12 kB 00:00 (19/73): libstdc++-devel-14.3.1-4.4.0.1.el10.x86_64.rpm 19 MB/s | 3.5 MB 00:00 (20/73): gcc-14.3.1-4.4.0.1.el10.x86_64.rpm 29 MB/s | 38 MB 00:01 (21/73): libxcrypt-devel-4.4.36-10.el10.x86_64.rpm 145 kB/s | 42 kB 00:00 (22/73): lua-srpm-macros-1-15.el10.noarch.rpm 277 kB/s | 8.7 kB 00:00 (23/73): libzstd-devel-1.5.5-9.el10.x86_64.rpm 824 kB/s | 55 kB 00:00 (24/73): ocaml-srpm-macros-10-4.el10.noarch.rpm 194 kB/s | 9.0 kB 00:00 (25/73): openblas-srpm-macros-2-19.el10.noarch.rpm 68 kB/s | 7.6 kB 00:00 (26/73): package-notes-srpm-macros-0.5-13.el10.noarch.rpm 102 kB/s | 9.1 kB 00:00 (27/73): openssl-devel-3.5.8-2.0.1.el10_2.x86_64.rpm 14 MB/s | 3.7 MB 00:00 (28/73): patch-2.7.6-26.el10.x86_64.rpm 1.3 MB/s | 133 kB 00:00 (29/73): perl-AutoSplit-5.74-515.el10_2.noarch.rpm 1.6 MB/s | 103 kB 00:00 (30/73): perl-Benchmark-1.25-515.el10_2.noarch.rpm 1.5 MB/s | 108 kB 00:00 (31/73): perl-CPAN-Meta-2.150010-511.el10.noarch.rpm 4.0 MB/s | 288 kB 00:00 (32/73): perl-CPAN-Meta-YAML-0.018-512.el10.noarch.rpm 759 kB/s | 31 kB 00:00 (33/73): perl-CPAN-Meta-Requirements-2.143-11.el10.noarch.rpm 471 kB/s | 43 kB 00:00 (34/73): perl-Devel-PPPort-3.72-512.el10.x86_64.rpm 3.0 MB/s | 227 kB 00:00 (35/73): perl-Encode-Locale-1.05-31.el10.noarch.rpm 195 kB/s | 22 kB 00:00 (36/73): perl-ExtUtils-Command-7.70-513.el10.noarch.rpm 201 kB/s | 14 kB 00:00 (37/73): perl-ExtUtils-Constant-0.25-515.el10_2.noarch.rpm 1.8 MB/s | 134 kB 00:00 (38/73): perl-ExtUtils-Install-2.22-511.el10.noarch.rpm 971 kB/s | 51 kB 00:00 (39/73): perl-ExtUtils-Manifest-1.75-511.el10.noarch.rpm 893 kB/s | 40 kB 00:00 (40/73): perl-ExtUtils-MakeMaker-7.70-513.el10.noarch.rpm 3.9 MB/s | 344 kB 00:00 (41/73): perl-ExtUtils-ParseXS-3.51-512.el10.noarch.rpm 4.0 MB/s | 211 kB 00:00 (42/73): perl-File-Compare-1.100.800-515.el10_2.noarch.rpm 1.7 MB/s | 94 kB 00:00 (43/73): perl-File-Copy-2.41-515.el10_2.noarch.rpm 1.0 MB/s | 101 kB 00:00 (44/73): perl-I18N-Langinfo-0.24-515.el10_2.x86_64.rpm 1.3 MB/s | 107 kB 00:00 (45/73): perl-JSON-PP-4.16-513.el10.noarch.rpm 1.1 MB/s | 86 kB 00:00 (46/73): perl-Test-Harness-3.48-512.el10.noarch.rpm 4.6 MB/s | 375 kB 00:00 (47/73): perl-Time-HiRes-1.9777-511.el10.x86_64.rpm 758 kB/s | 64 kB 00:00 (48/73): perl-devel-5.40.2-512.2.el10_0.x86_64.rpm 6.0 MB/s | 925 kB 00:00 (49/73): perl-lib-0.65-515.el10_2.x86_64.rpm 1.1 MB/s | 96 kB 00:00 (50/73): perl-srpm-macros-1-57.el10.noarch.rpm 178 kB/s | 8.4 kB 00:00 (51/73): perl-doc-5.40.2-512.2.el10_0.noarch.rpm 14 MB/s | 5.3 MB 00:00 (52/73): perl-version-0.99.32-4.el10.x86_64.rpm 478 kB/s | 74 kB 00:00 (53/73): pyproject-srpm-macros-1.18.5-1.el10.noarch.rpm 446 kB/s | 26 kB 00:00 (54/73): python-srpm-macros-3.12-11.el10.noarch.rpm 616 kB/s | 47 kB 00:00 (55/73): python3-devel-3.12.15-1.0.1.el10_2.x86_64.rpm 4.3 MB/s | 521 kB 00:00 (56/73): qt6-srpm-macros-6.10.1-1.el10.noarch.rpm 256 kB/s | 12 kB 00:00 (57/73): redhat-rpm-config-295-1.0.1.el10.noarch.rpm 1.9 MB/s | 155 kB 00:00 (58/73): python3-pip-23.3.2-11.el10_2.noarch.rpm 13 MB/s | 4.4 MB 00:00 (59/73): rust-toolset-srpm-macros-1.92.0-2.el10_2.noarch.rpm 247 kB/s | 27 kB 00:00 (60/73): systemtap-sdt-dtrace-5.4-3.0.1.el10.x86_64.rpm 1.0 MB/s | 84 kB 00:00 (61/73): systemtap-sdt-devel-5.4-3.0.1.el10.x86_64.rpm 704 kB/s | 85 kB 00:00 (62/73): zlib-ng-compat-devel-2.2.3-3.el10_1.x86_64.rpm 448 kB/s | 45 kB 00:00 (63/73): openssl-3.5.8-2.0.1.el10_2.x86_64.rpm 9.0 MB/s | 1.4 MB 00:00 (64/73): openssl-libs-3.5.8-2.0.1.el10_2.x86_64.rpm 7.9 MB/s | 2.3 MB 00:00 (65/73): policycoreutils-3.10-2.el10_2.x86_64.rpm 3.8 MB/s | 568 kB 00:00 (66/73): python3-3.12.15-1.0.1.el10_2.x86_64.rpm 352 kB/s | 37 kB 00:00 (67/73): kernel-uek-devel-6.12.0-204.92.4.2.el10uek.x86_64.rpm 33 MB/s | 47 MB 00:01 (68/73): kernel-headers-6.12.0-211.69.1.el10_2.x86_64.rpm 1.0 MB/s | 4.4 MB 00:04 (69/73): which-2.21-44.el10_0.x86_64.rpm 814 kB/s | 62 kB 00:00 (70/73): python3-libs-3.12.15-1.0.1.el10_2.x86_64.rpm 13 MB/s | 11 MB 00:00 (71/73): python-unversioned-command-3.12.15-1.0.1.el10_2.noarch.rpm 113 kB/s | 15 kB 00:00 (72/73): policycoreutils-python-utils-3.10-2.el10_2.noarch.rpm 1.7 MB/s | 250 kB 00:00 (73/73): python3-policycoreutils-3.10-2.el10_2.noarch.rpm 11 MB/s | 2.6 MB 00:00 ------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 28 MB/s | 177 MB 00:06 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : binutils-gold-2.41-63.0.1.el10.x86_64 1/82 Running scriptlet: binutils-gold-2.41-63.0.1.el10.x86_64 1/82 Installing : binutils-2.41-63.0.1.el10.x86_64 2/82 Running scriptlet: binutils-2.41-63.0.1.el10.x86_64 2/82 Upgrading : openssl-libs-1:3.5.8-2.0.1.el10_2.x86_64 3/82 Installing : perl-version-8:0.99.32-4.el10.x86_64 4/82 Installing : perl-File-Copy-2.41-515.el10_2.noarch 5/82 Installing : perl-CPAN-Meta-Requirements-2.143-11.el10.noarch 6/82 Upgrading : python-unversioned-command-3.12.15-1.0.1.el10_2.noarch 7/82 Upgrading : python3-3.12.15-1.0.1.el10_2.x86_64 8/82 Upgrading : python3-libs-3.12.15-1.0.1.el10_2.x86_64 9/82 Installing : systemtap-sdt-dtrace-5.4-3.0.1.el10.x86_64 10/82 Installing : perl-Time-HiRes-4:1.9777-511.el10.x86_64 11/82 Installing : perl-JSON-PP-1:4.16-513.el10.noarch 12/82 Installing : perl-File-Compare-1.100.800-515.el10_2.noarch 13/82 Installing : perl-ExtUtils-ParseXS-1:3.51-512.el10.noarch 14/82 Installing : systemtap-sdt-devel-5.4-3.0.1.el10.x86_64 15/82 Installing : python3-pip-23.3.2-11.el10_2.noarch 16/82 Installing : perl-ExtUtils-Command-2:7.70-513.el10.noarch 17/82 Installing : perl-ExtUtils-Manifest-1:1.75-511.el10.noarch 18/82 Upgrading : policycoreutils-3.10-2.el10_2.x86_64 19/82 Running scriptlet: policycoreutils-3.10-2.el10_2.x86_64 19/82 Upgrading : python3-policycoreutils-3.10-2.el10_2.noarch 20/82 Installing : rust-toolset-srpm-macros-1.92.0-2.el10_2.noarch 21/82 Installing : qt6-srpm-macros-6.10.1-1.el10.noarch 22/82 Installing : pyproject-srpm-macros-1.18.5-1.el10.noarch 23/82 Installing : perl-srpm-macros-1-57.el10.noarch 24/82 Installing : perl-lib-0.65-515.el10_2.x86_64 25/82 Installing : perl-doc-5.40.2-512.2.el10_0.noarch 26/82 Installing : perl-I18N-Langinfo-0.24-515.el10_2.x86_64 27/82 Installing : perl-Encode-Locale-1.05-31.el10.noarch 28/82 Installing : perl-ExtUtils-Constant-0.25-515.el10_2.noarch 29/82 Installing : perl-Devel-PPPort-3.72-512.el10.x86_64 30/82 Installing : perl-CPAN-Meta-YAML-0.018-512.el10.noarch 31/82 Installing : perl-CPAN-Meta-2.150010-511.el10.noarch 32/82 Installing : perl-Benchmark-1.25-515.el10_2.noarch 33/82 Installing : perl-Test-Harness-1:3.48-512.el10.noarch 34/82 Installing : perl-AutoSplit-5.74-515.el10_2.noarch 35/82 Installing : package-notes-srpm-macros-0.5-13.el10.noarch 36/82 Installing : openblas-srpm-macros-2-19.el10.noarch 37/82 Installing : ocaml-srpm-macros-10-4.el10.noarch 38/82 Installing : lua-srpm-macros-1-15.el10.noarch 39/82 Installing : libzstd-devel-1.5.5-9.el10.x86_64 40/82 Installing : libstdc++-devel-14.3.1-4.4.0.1.el10.x86_64 41/82 Installing : kernel-srpm-macros-1.0-27.0.1.el10.noarch 42/82 Installing : kernel-headers-6.12.0-211.69.1.el10_2.x86_64 43/82 Installing : libxcrypt-devel-4.4.36-10.el10.x86_64 44/82 Installing : glibc-devel-2.39-121.0.1.el10_2.x86_64 45/82 Installing : efi-srpm-macros-6-6.0.1.el10.noarch 46/82 Installing : dwz-0.16-1.el10.x86_64 47/82 Installing : cpp-14.3.1-4.4.0.1.el10.x86_64 48/82 Installing : cmake-filesystem-3.31.8-1.el10.x86_64 49/82 Installing : zlib-ng-compat-devel-2.2.3-3.el10_1.x86_64 50/82 Installing : binutils-devel-2.41-63.0.1.el10.x86_64 51/82 Installing : annobin-docs-13.02-2.el10.noarch 52/82 Installing : make-1:4.4.1-9.el10.x86_64 53/82 Installing : gcc-14.3.1-4.4.0.1.el10.x86_64 54/82 Installing : annobin-plugin-gcc-13.02-2.el10.x86_64 55/82 Installing : gcc-c++-14.3.1-4.4.0.1.el10.x86_64 56/82 Installing : gcc-plugin-annobin-14.3.1-4.4.0.1.el10.x86_64 57/82 Installing : fonts-srpm-macros-1:2.0.5-18.el10.noarch 58/82 Installing : forge-srpm-macros-0.4.0-6.el10.noarch 59/82 Installing : go-srpm-macros-3.8.0-1.el10.noarch 60/82 Installing : python-srpm-macros-3.12-11.el10.noarch 61/82 Installing : redhat-rpm-config-295-1.0.1.el10.noarch 62/82 Running scriptlet: redhat-rpm-config-295-1.0.1.el10.noarch 62/82 Installing : perl-devel-4:5.40.2-512.2.el10_0.x86_64 63/82 Installing : perl-ExtUtils-Install-2.22-511.el10.noarch 64/82 Installing : perl-ExtUtils-MakeMaker-2:7.70-513.el10.noarch 65/82 Installing : kernel-uek-devel-6.12.0-204.92.4.2.el10uek.x86_64 66/82 Running scriptlet: kernel-uek-devel-6.12.0-204.92.4.2.el10uek.x86_64 66/82 Installing : elfutils-libelf-devel-0.194-2.el10_2.x86_64 67/82 Upgrading : policycoreutils-python-utils-3.10-2.el10_2.noarch 68/82 Installing : python3-devel-3.12.15-1.0.1.el10_2.x86_64 69/82 Installing : openssl-devel-1:3.5.8-2.0.1.el10_2.x86_64 70/82 Upgrading : openssl-1:3.5.8-2.0.1.el10_2.x86_64 71/82 Upgrading : which-2.21-44.el10_0.x86_64 72/82 Installing : patch-2.7.6-26.el10.x86_64 73/82 Cleanup : openssl-1:3.5.5-2.0.1.el10_2.x86_64 74/82 Cleanup : policycoreutils-python-utils-3.10-1.el10.noarch 75/82 Cleanup : python3-policycoreutils-3.10-1.el10.noarch 76/82 Cleanup : python3-3.12.13-2.0.1.el10_2.x86_64 77/82 Cleanup : python-unversioned-command-3.12.13-2.0.1.el10_2.noarch 78/82 Cleanup : python3-libs-3.12.13-2.0.1.el10_2.x86_64 79/82 Cleanup : openssl-libs-1:3.5.5-2.0.1.el10_2.x86_64 80/82 Running scriptlet: policycoreutils-3.10-1.el10.x86_64 81/82 Cleanup : policycoreutils-3.10-1.el10.x86_64 81/82 Cleanup : which-2.21-44.el10.x86_64 82/82 Running scriptlet: which-2.21-44.el10.x86_64 82/82 Upgraded: openssl-1:3.5.8-2.0.1.el10_2.x86_64 openssl-libs-1:3.5.8-2.0.1.el10_2.x86_64 policycoreutils-3.10-2.el10_2.x86_64 policycoreutils-python-utils-3.10-2.el10_2.noarch python-unversioned-command-3.12.15-1.0.1.el10_2.noarch python3-3.12.15-1.0.1.el10_2.x86_64 python3-libs-3.12.15-1.0.1.el10_2.x86_64 python3-policycoreutils-3.10-2.el10_2.noarch which-2.21-44.el10_0.x86_64 Installed: annobin-docs-13.02-2.el10.noarch annobin-plugin-gcc-13.02-2.el10.x86_64 binutils-2.41-63.0.1.el10.x86_64 binutils-devel-2.41-63.0.1.el10.x86_64 binutils-gold-2.41-63.0.1.el10.x86_64 cmake-filesystem-3.31.8-1.el10.x86_64 cpp-14.3.1-4.4.0.1.el10.x86_64 dwz-0.16-1.el10.x86_64 efi-srpm-macros-6-6.0.1.el10.noarch elfutils-libelf-devel-0.194-2.el10_2.x86_64 fonts-srpm-macros-1:2.0.5-18.el10.noarch forge-srpm-macros-0.4.0-6.el10.noarch gcc-14.3.1-4.4.0.1.el10.x86_64 gcc-c++-14.3.1-4.4.0.1.el10.x86_64 gcc-plugin-annobin-14.3.1-4.4.0.1.el10.x86_64 glibc-devel-2.39-121.0.1.el10_2.x86_64 go-srpm-macros-3.8.0-1.el10.noarch kernel-headers-6.12.0-211.69.1.el10_2.x86_64 kernel-srpm-macros-1.0-27.0.1.el10.noarch kernel-uek-devel-6.12.0-204.92.4.2.el10uek.x86_64 libstdc++-devel-14.3.1-4.4.0.1.el10.x86_64 libxcrypt-devel-4.4.36-10.el10.x86_64 libzstd-devel-1.5.5-9.el10.x86_64 lua-srpm-macros-1-15.el10.noarch make-1:4.4.1-9.el10.x86_64 ocaml-srpm-macros-10-4.el10.noarch openblas-srpm-macros-2-19.el10.noarch openssl-devel-1:3.5.8-2.0.1.el10_2.x86_64 package-notes-srpm-macros-0.5-13.el10.noarch patch-2.7.6-26.el10.x86_64 perl-AutoSplit-5.74-515.el10_2.noarch perl-Benchmark-1.25-515.el10_2.noarch perl-CPAN-Meta-2.150010-511.el10.noarch perl-CPAN-Meta-Requirements-2.143-11.el10.noarch perl-CPAN-Meta-YAML-0.018-512.el10.noarch perl-Devel-PPPort-3.72-512.el10.x86_64 perl-Encode-Locale-1.05-31.el10.noarch perl-ExtUtils-Command-2:7.70-513.el10.noarch perl-ExtUtils-Constant-0.25-515.el10_2.noarch perl-ExtUtils-Install-2.22-511.el10.noarch perl-ExtUtils-MakeMaker-2:7.70-513.el10.noarch perl-ExtUtils-Manifest-1:1.75-511.el10.noarch perl-ExtUtils-ParseXS-1:3.51-512.el10.noarch perl-File-Compare-1.100.800-515.el10_2.noarch perl-File-Copy-2.41-515.el10_2.noarch perl-I18N-Langinfo-0.24-515.el10_2.x86_64 perl-JSON-PP-1:4.16-513.el10.noarch perl-Test-Harness-1:3.48-512.el10.noarch perl-Time-HiRes-4:1.9777-511.el10.x86_64 perl-devel-4:5.40.2-512.2.el10_0.x86_64 perl-doc-5.40.2-512.2.el10_0.noarch perl-lib-0.65-515.el10_2.x86_64 perl-srpm-macros-1-57.el10.noarch perl-version-8:0.99.32-4.el10.x86_64 pyproject-srpm-macros-1.18.5-1.el10.noarch python-srpm-macros-3.12-11.el10.noarch python3-devel-3.12.15-1.0.1.el10_2.x86_64 python3-pip-23.3.2-11.el10_2.noarch qt6-srpm-macros-6.10.1-1.el10.noarch redhat-rpm-config-295-1.0.1.el10.noarch rust-toolset-srpm-macros-1.92.0-2.el10_2.noarch systemtap-sdt-devel-5.4-3.0.1.el10.x86_64 systemtap-sdt-dtrace-5.4-3.0.1.el10.x86_64 zlib-ng-compat-devel-2.2.3-3.el10_1.x86_64 Complete! OS package installations finished + Installing ONTAP Mediator. (Log: /root/ontap_mediator.26mL7P/ontap-mediator-1.13.0/ontap-mediator-1.13.0/install_20261102063122.log) This step will take several minutes. Use the log file to view progress. Sudoer config verified ONTAP Mediator rsyslog and logging rotation enabled + Install successful. (Moving log to /opt/netapp/lib/ontap_mediator/log/install_20261102063122.log) + WARNING: This system supports UEFI Secure Boot (SB) is currently enabled on this system. The following action need be taken: Using the keys in /opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys follow instructions in /opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/README.module-signing to sign the SCST kernel module. Note that reboot will be needed. SCST will not start automatically when Secure Boot is enabled and not configured properly. + Note: ONTAP Mediator generated a self-signed server certificate for temporary use on this host. If the DNS name or IP address for the host is changed, the certificate will no longer be valid. The default certificates should be replaced with secure trusted certificates signed by a known certificate authority prior to use for production. For more information, see /opt/netapp/lib/ontap_mediator/README + Note: ONTAP Mediator uses a kernel module compiled specifically for the current OS. Using 'yum update' to upgrade the kernel might cause service interruption. For more information, see /opt/netapp/lib/ontap_mediator/README [root@mediator-host ~]#Example ONTAP Mediator installation with support for HTTPS only (console output)
[root@localhost ~]# ontap-mediator-1.13.0/ontap-mediator-1.13.0 --https-only ONTAP Mediator: Self Extracting Installer + Extracting the ONTAP Mediator installation/upgrade archive + Performing the ONTAP Mediator run-time code signature check Using openssl from the path: /usr/bin/openssl configured for CApath:/etc/pki/tls Error querying OCSP responder 4097E2673F7F0000:error:10080002:BIO routines:BIO_lookup_ex:system lib:crypto/bio/bio_addr.c:767:Name or service not known WARNING: The OCSP check failed while attempting to test the Code-Signature-Check certificate Continue without code signature checking (only recommended if integrity has been established manually)? y(es)/N(o): yes SKIPPING: Code signature check, manual override due to lack of OCSP response + Unpacking the ONTAP Mediator installer + ONTAP_MEDIATOR_INSTALL_HTTPS_ONLY is set to '1', args are: '' + Starting ONTAP Mediator install/update process: previous installation_mode is '' + Selected install package mode: HTTPS_ONLY + Checking that required port 31784 is free ONTAP Mediator requires two user accounts. One for the service (netapp), and one for use by ONTAP to the mediator API (mediatoradmin). Would you like to use the default account names: netapp + mediatoradmin? (Y(es)/n(o)): yes Enter ONTAP Mediator user account (mediatoradmin) password: Re-Enter ONTAP Mediator user account (mediatoradmin) password: + Checking if SELinux is in enforcing mode SELinux is set to Enforcing. ONTAP Mediator server requires modifying the SELinux context of the file /opt/netapp/lib/ontap_mediator/pyenv/bin/uwsgi from type 'lib_t' to 'bin_t'. This is neccessary to start the ONTAP Mediator service while SELinux is set to Enforcing. Allow SELinux context change? Y(es)/n(o): yes The installer will change the SELinux context type of /opt/netapp/lib/ontap_mediator/pyenv/bin/uwsgi from type 'lib_t' to 'bin_t'. + Checking for default Linux firewall + Installing required packages. Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register. Last metadata expiration check: 1:00:07 ago on Fri 16 Oct 2026 01:18:47 AM EDT. Package openssl-1:3.5.8-2.el9_8.x86_64 is already installed. Package openssl-devel-1:3.5.8-2.el9_8.x86_64 is already installed. Package gcc-11.5.0-15.el9.x86_64 is already installed. Package make-1:4.3-8.el9.x86_64 is already installed. Package which-2.21-30.el9.x86_64 is already installed. Package libselinux-utils-3.6-4.el9.x86_64 is already installed. Package patch-2.7.6-16.el9.x86_64 is already installed. Package perl-Data-Dumper-2.174-462.el9.x86_64 is already installed. Package perl-ExtUtils-MakeMaker-2:7.60-3.el9.noarch is already installed. Package bzip2-1.0.8-11.el9.x86_64 is already installed. Package efibootmgr-16-12.el9.x86_64 is already installed. Package mokutil-2:0.7.2-6.el9_9.x86_64 is already installed. Package python3-pip-21.3.1-2.el9_8.noarch is already installed. Package elfutils-libelf-devel-0.195-1.el9.x86_64 is already installed. Package policycoreutils-python-utils-3.6-9.el9.noarch is already installed. Package python3.12-3.12.15-1.el9_8.x86_64 is already installed. Package python3.12-devel-3.12.15-1.el9_8.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! OS package installations finished + Installing ONTAP Mediator. (Log: /root/ontap_mediator.aq18RI/ontap-mediator-1.13.0/ontap-mediator-1.13.0/install_20261016021831.log) This step will take several minutes. Use the log file to view progress. Sudoer config verified ONTAP Mediator rsyslog and logging rotation enabled + Install successful. (Moving log to /opt/netapp/lib/ontap_mediator/log/install_20261016021831.log) + WARNING: This system supports UEFI + Note: Not signing the SCST modules since they were not installed by this installation. + Note: SCST will not start automatically if Secure Boot is enabled and not configured properly. + Note: ONTAP Mediator generated a self-signed server certificate for temporary use on this host. If the DNS name or IP address for the host is changed, the certificate will no longer be valid. The default certificates should be replaced with secure trusted certificates signed by a known certificate authority prior to use for production. For more information, see /opt/netapp/lib/ontap_mediator/README [root@localhost ~]# [root@localhost ~]#
Register the security key for UEFI Secure Boot
Beginning with ONTAP Mediator 1.4, the Secure Boot mechanism is enabled on UEFI systems. When Secure Boot is enabled, you must take additional steps to register the security key after installation.
|
|
If you installed ONTAP Mediator 1.12 or later with support for HTTPS only, the SCST package is not installed and you can skip this task. |
Steps
-
Follow the instructions in the README file to sign the SCST kernel module:
/opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/README.module-signing -
Locate the required keys:
/opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys
After installation, the system output provides the README files and key location. -
Add the public key to the MOK list:
mokutil --import /opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/scst_module_key.der
You can leave the private key in its default location or move it to a secure location. You must keep the public key in its existing location so the Boot Manager can use it. For more information, see the README.module-signing file:
[root@hostname ~]# ls /opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/ README.module-signing scst_module_key.der scst_module_key.priv -
Reboot the host and use your device's UEFI Boot Manager to approve the new MOK. You'll need the passphrase provided for the
mokutilutility in Install ONTAP Mediator when UEFI Secure Boot is enabled.
Sign SCST kernel modules
After ONTAP Mediator is installed, if the systemctl status mediator-scst shows as failed (inactive), follow these steps to sign the SCST kernel module.
|
|
If you installed ONTAP Mediator 1.12 or later with support for HTTPS only, the SCST package is not installed and you can skip this task. |
Steps
-
During the build process a public/private key pair is generated in the
/opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/directory. Run the following command to view the generated keys:ls /opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/README.module-signing scst_module_key.der scst_module_key.priv
-
Start the process of importing the public key into the UEFI key repository by running the following command:
mokutil --import /opt/netapp/lib/ontap_mediator/ontap_mediator/SCST_mod_keys/scst_module_key.derThe
mokutilutility prompts you to enter a password twice. -
The mokutil software requests a temporary password to be used for this key during the import process.
-
Verify whether the import process has started with the following command, and then reboot the system. The bootloader starts the EFI MOK manager.
mokutil --list-new -
Use the menus on the screen to turn on the SCST kernel module key. After booting, run the following command. Once the service starts, the SCST kernel modules are signed.
systemctl status mediator-scst
What’s next?