This efforts is contributed by following authors
- Satyamev Choudhary
- Jai Waghela
IBM PowerSC : Simplify Security and Compliance
Protect your mission-critical AIX®, IBM i, and Linux® environments with IBM® PowerSC— an integrated security and compliance solution built for IBM Power® Systems. Designed for hybrid cloud resilience, PowerSC helps enterprises automate compliance, detect threats in real time, and simplify audit readiness across regulated industries.
In today's enterprise environments, security and compliance are not optional—they're essential. IBM PowerSC Standard Edition is designed specifically for IBM Power Systems running AIX and Linux, offering a robust suite of tools to automate, monitor, and enforce security policies across virtualized environments.
Product page : https://www.ibm.com/products/powersc
IBM PowerSC Standard Edition – Linux Installation Steps
Prerequisites
Before installing PowerSC on Linux systems, ensure the following:
- Supported OS:
- SUSE Linux Enterprise Server 12 SP3 or later
- Red Hat Enterprise Linux Server 7.4 or later
- Must be running on IBM Power Systems
- System Requirements:
- Minimum 4GB RAM for PowerSC GUI Server
- Root access for installation
- Network connectivity via SSH to the collector
- Software Dependencies:
- sendmail daemon must be running
- GUI server listens on TCP port 443
- GUI agent listens on TCP port 11125
- Java >= 1.8.0
- Python3 must be installed
Installation Steps
PowerSC components for Linux are distributed as shell archive scripts (.sh). These include:
- powersc-pscxpert-1.2.0_latest-<distro>.ppc64le.sh – Compliance package
- powersc-uiAgent-1.2.0_latest-<distro>.ppc64le.sh – GUI Agent
- powersc-uiServer-1.2.0_latest-<distro>.ppc64le.sh – GUI Server
Installation Procedure
- Login as root.
- Extract the binaries and browse to directory specific to unix distro
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ pwd
/home/jaiw/PSC_V2203/inst.images/rhel/x86_64
- Run the shell script for the desired component:
jaiw@jai-powersc-server-1 x86_64]$ ll
total 213908
-rw-r--r--. 1 jaiw jaiw 104804 Aug 9 2024 pmfa-pambase-2.2.0.3-2408091527.rhel8.x86_64.rpm
-r-xr-xr-x. 1 jaiw jaiw 3445565 Aug 9 2024 pmfa-pambase-2.2.0.3-2408091527.rhel8.x86_64.sh
-rw-r--r--. 1 jaiw jaiw 105128 Aug 9 2024 pmfa-pamfallback-2.2.0.3-2408091527.rhel8.x86_64.rpm
-r-xr-xr-x. 1 jaiw jaiw 3446007 Aug 9 2024 pmfa-pamfallback-2.2.0.3-2408091527.rhel8.x86_64.sh
-rw-r--r--. 1 jaiw jaiw 3033740 Aug 9 2024 pmfa-server-2.2.0.3-2408091517.rhel8.x86_64.rpm
-r-xr-xr-x. 1 jaiw jaiw 7480950 Aug 9 2024 pmfa-server-2.2.0.3-2408091517.rhel8.x86_64.sh
-r-xr-xr-x. 1 jaiw jaiw 5025391 Aug 13 2024 powersc-pscxpert-2.2.0.3-el8.x86_64.sh
-r-xr-xr-x. 1 jaiw jaiw 4983219 Aug 13 2024 powersc-pscxpert-2.2.0.3-el9.x86_64.sh
-rw-r--r--. 1 jaiw jaiw 1133720 Aug 13 2024 powersc-pscxpert-2.2.0.3-hmc9.x86_64.rpm
-r-xr-xr-x. 1 jaiw jaiw 15269551 Aug 13 2024 powersc-uiAgent-2.2.0.3-el8.x86_64.sh
-r-xr-xr-x. 1 jaiw jaiw 15257469 Aug 13 2024 powersc-uiAgent-2.2.0.3-el9.x86_64.sh
-rw-r--r--. 1 jaiw jaiw 8690388 Aug 13 2024 powersc-uiAgent-2.2.0.3-hmc9.x86_64.rpm
-r-xr-xr-x. 1 jaiw jaiw 76270737 Aug 13 2024 powersc-uiServer-2.2.0.3-el8.x86_64.sh
-r-xr-xr-x. 1 jaiw jaiw 74773577 Aug 13 2024 powersc-uiServer-2.2.0.3-el9.x86_64.sh
[jaiw@jai-powersc-server-1 x86_64]$
4. bash /path/to/powersc-pscxpert-2.2.0.3-el8.x86_64.sh
E.g.
jaiw@jai-powersc-server-1 x86_64]$ sudo sh powersc-pscxpert-2.2.0.3-el8.x86_64.sh x - created lock directory _sh3148964. International Program License Agreement Part 1 - General Terms BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, CLICKING ON AN "ACCEPT" BUTTON, OR OTHERWISE USING THE PROGRAM, LICENSEE AGREES TO THE TERMS OF THIS AGREEMENT. IF YOU ARE ACCEPTING THESE TERMS ON BEHALF OF LICENSEE, YOU REPRESENT THAT YOU HAVE FULL AUTHORITY TO BIND LICENSEE TO THESE TERMS. IF YOU DO NOT AGREE TO THESE TERMS OR DO NOT HAVE AUTHORITY: i) DO NOT DOWNLOAD, INSTALL, COPY, ACCESS, CLICK ON AN "ACCEPT" BUTTON, OR USE THE PROGRAM; AND ii) PROMPTLY RETURN THE UNUSED MEDIA, DOCUMENTATION, AND PROOF OF ENTITLEMENT TO THE PARTY FROM WHOM IT WAS OBTAINED FOR A Press Enter to continue viewing the license agreement, or enter "1" to accept the agreement, "2" to decline it, "3" to print it, or "99" to go back to the previous screen. 1 x - removed lock directory _sh3148964. Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:powersc-pscxpert-2.2.0.3-1.el8 ################################# [100%]
5. bash /path/to/powersc-uiServer-2.2.0.3-el8.x86_64.sh
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ sudo bash powersc-uiServer-2.2.0.3-el8.x86_64.sh x - created lock directory _sh3151143. x - removed lock directory _sh3151143. Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:powersc-uiServer-2.2.0.3-1.el8 ################################# [100%]
6. bash /path/to/powersc-uiAgent-2.2.0.3-el8.x86_64.sh
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ sudo bash powersc-uiAgent-2.2.0.3-el8.x86_64.sh x - created lock directory _sh3150180. x - removed lock directory _sh3150180. Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:powersc-uiAgent-2.2.0.3-1.el8 ################################# [100%]
- Accept the license agreement when prompted.
-
Verify installation using.
rpm -qa | grep powersc
E.g.[jaiw@jai-powersc-server-1 x86_64]$ rpm -qa | grep powerscpowersc-pscxpert-2.2.0.3-1.el8.x86_64
powersc-uiAgent-2.2.0.3-1.el8.x86_64
powersc-uiServer-2.2.0.3-1.el8.x86_64
powersc-xerces-c-3.2.4-4.el8.x86_64
Note: To reinstall the same version, uninstall the current one first using rpm -e.
-
Truststore Setup
Copy endpointTruststore.jks to each endpoint.
If using PowerVC, embed the truststore in the image.
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ sudo cp /etc/security/powersc/uiServer/endpointTruststore.jks /etc/security/powersc/uiAgent/
-
Security Certificates
Use /opt/powersc/uiServer/bin/generate_server_keystore_uiServer.sh to create:
serverKeystore.jks
serverTruststore.jks
endpointTruststore.jks
-
Start GUI Agent and Server (Linux Only)
To restart the PowerSC GUI Server on Linux:
systemctl stop powersc-uiServer.service
systemctl start powersc-uiServer.service
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ systemctl status powersc-uiServer.service ● powersc-uiServer.service - PowerSC UI Server Loaded: loaded (/usr/lib/systemd/system/powersc-uiServer.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2025-07-24 09:24:04 UTC; 1min 32s ago Main PID: 16229 (uiServer.sh) Tasks: 167 (limit: 22996) Memory: 455.2M CGroup: /system.slice/powersc-uiServer.service ├─16229 /bin/sh /opt/powersc/uiServer/bin/uiServer.sh └─16455 /opt/powersc/uiServer/bin/uiserver /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-2.el8.x86_64/jre /opt/powersc/uiServer/classes/pinpoint.blob -server -Xss1024k -Xmx2000m -Dcom.rocketsoft.logPrefix=/var/log/powersc/uiServer/ps>
jaiw@jai-powersc-server-1 x86_64]$ systemctl status powersc-uiAgent.service ● powersc-uiAgent.service - PowerSC UI Agent Loaded: loaded (/usr/lib/systemd/system/powersc-uiAgent.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2025-07-24 09:24:27 UTC; 57s ago Process: 16811 ExecStart=/opt/powersc/uiAgent/bin/uiAgent.sh (code=exited, status=130) Main PID: 16811 (code=exited, status=130)
-
Add the group to logon group list to grant access
E.g.
[root@jai-powersc-server-1 ~]# cd /opt/powersc/uiServer/bin/
[root@jai-powersc-server-1 bin]# pscuiserverctl set logonGroupList wheel logonGroupList=wheel
Access the Web UI using browser and entering Ui Server IP address
E.g. https://x.x.x.x/webclient/#/home
