This efforts is contributed by following authors

1. Satyamev Choudhary 
2. Jai Waghela

IBM PowerSC : Simplify Security and Compliance

Protect your mission-critical AIX®, IBM i, and Linux® environments with IBM® PowerSC— an integrated security and compliance solution built for IBM Power® Systems. Designed for hybrid cloud resilience, PowerSC helps enterprises automate compliance, detect threats in real time, and simplify audit readiness across regulated industries.

In today's enterprise environments, security and compliance are not optional—they're essential. IBM PowerSC Standard Edition is designed specifically for IBM Power Systems running AIX and Linux, offering a robust suite of tools to automate, monitor, and enforce security policies across virtualized environments.

Product page : https://www.ibm.com/products/powersc

IBM PowerSC Standard Edition – Linux Installation Steps

Prerequisites

Before installing PowerSC on Linux systems, ensure the following:

• Supported OS:
• SUSE Linux Enterprise Server 12 SP3 or later
• Red Hat Enterprise Linux Server 7.4 or later
• Must be running on IBM Power Systems
• System Requirements:
• Minimum 4GB RAM for PowerSC GUI Server
• Root access for installation
• Network connectivity via SSH to the collector
• Software Dependencies:
• sendmail daemon must be running
• GUI server listens on TCP port 443
• GUI agent listens on TCP port 11125
• Java >= 1.8.0
• Python3 must be installed

Installation Steps

PowerSC components for Linux are distributed as shell archive scripts (.sh). These include:

• powersc-pscxpert-1.2.0_latest-<distro>.ppc64le.sh – Compliance package
• powersc-uiAgent-1.2.0_latest-<distro>.ppc64le.sh – GUI Agent
• powersc-uiServer-1.2.0_latest-<distro>.ppc64le.sh – GUI Server

Installation Procedure

1. Login as root.
2. Extract the binaries and browse to directory specific to unix distro
   E.g.
   [jaiw@jai-powersc-server-1 x86_64]$ pwd

/home/jaiw/PSC_V2203/inst.images/rhel/x86_64

3. Run the shell script for the desired component:

jaiw@jai-powersc-server-1 x86_64]$ ll

total 213908

-rw-r--r--. 1 jaiw jaiw   104804 Aug  9  2024 pmfa-pambase-2.2.0.3-2408091527.rhel8.x86_64.rpm

-r-xr-xr-x. 1 jaiw jaiw  3445565 Aug  9  2024 pmfa-pambase-2.2.0.3-2408091527.rhel8.x86_64.sh

-rw-r--r--. 1 jaiw jaiw   105128 Aug  9  2024 pmfa-pamfallback-2.2.0.3-2408091527.rhel8.x86_64.rpm

-r-xr-xr-x. 1 jaiw jaiw  3446007 Aug  9  2024 pmfa-pamfallback-2.2.0.3-2408091527.rhel8.x86_64.sh

-rw-r--r--. 1 jaiw jaiw  3033740 Aug  9  2024 pmfa-server-2.2.0.3-2408091517.rhel8.x86_64.rpm

-r-xr-xr-x. 1 jaiw jaiw  7480950 Aug  9  2024 pmfa-server-2.2.0.3-2408091517.rhel8.x86_64.sh

-r-xr-xr-x. 1 jaiw jaiw  5025391 Aug 13  2024 powersc-pscxpert-2.2.0.3-el8.x86_64.sh

-r-xr-xr-x. 1 jaiw jaiw  4983219 Aug 13  2024 powersc-pscxpert-2.2.0.3-el9.x86_64.sh

-rw-r--r--. 1 jaiw jaiw  1133720 Aug 13  2024 powersc-pscxpert-2.2.0.3-hmc9.x86_64.rpm

-r-xr-xr-x. 1 jaiw jaiw 15269551 Aug 13  2024 powersc-uiAgent-2.2.0.3-el8.x86_64.sh

-r-xr-xr-x. 1 jaiw jaiw 15257469 Aug 13  2024 powersc-uiAgent-2.2.0.3-el9.x86_64.sh

-rw-r--r--. 1 jaiw jaiw  8690388 Aug 13  2024 powersc-uiAgent-2.2.0.3-hmc9.x86_64.rpm

-r-xr-xr-x. 1 jaiw jaiw 76270737 Aug 13  2024 powersc-uiServer-2.2.0.3-el8.x86_64.sh

-r-xr-xr-x. 1 jaiw jaiw 74773577 Aug 13  2024 powersc-uiServer-2.2.0.3-el9.x86_64.sh

[jaiw@jai-powersc-server-1 x86_64]$

4.     bash /path/to/powersc-pscxpert-2.2.0.3-el8.x86_64.sh
E.g.
jaiw@jai-powersc-server-1 x86_64]$ sudo sh powersc-pscxpert-2.2.0.3-el8.x86_64.sh x - created lock directory _sh3148964. International Program License Agreement Part 1 - General Terms BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, CLICKING ON AN "ACCEPT" BUTTON, OR OTHERWISE USING THE PROGRAM, LICENSEE AGREES TO THE TERMS OF THIS AGREEMENT. IF YOU ARE ACCEPTING THESE TERMS ON BEHALF OF LICENSEE, YOU REPRESENT THAT YOU HAVE FULL AUTHORITY TO BIND LICENSEE TO THESE TERMS. IF YOU DO NOT AGREE TO THESE TERMS OR DO NOT HAVE AUTHORITY: i) DO NOT DOWNLOAD, INSTALL, COPY, ACCESS, CLICK ON AN "ACCEPT" BUTTON, OR USE THE PROGRAM; AND ii) PROMPTLY RETURN THE UNUSED MEDIA, DOCUMENTATION, AND PROOF OF ENTITLEMENT TO THE PARTY FROM WHOM IT WAS OBTAINED FOR A Press Enter to continue viewing the license agreement, or enter "1" to accept the agreement, "2" to decline it, "3" to print it, or "99" to go back to the previous screen. 1 x - removed lock directory _sh3148964. Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:powersc-pscxpert-2.2.0.3-1.el8 ################################# [100%]

5.     bash /path/to/powersc-uiServer-2.2.0.3-el8.x86_64.sh
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ sudo bash powersc-uiServer-2.2.0.3-el8.x86_64.sh x - created lock directory _sh3151143. x - removed lock directory _sh3151143. Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:powersc-uiServer-2.2.0.3-1.el8 ################################# [100%]

6.   bash /path/to/powersc-uiAgent-2.2.0.3-el8.x86_64.sh
E.g.
[jaiw@jai-powersc-server-1 x86_64]$ sudo bash powersc-uiAgent-2.2.0.3-el8.x86_64.sh x - created lock directory _sh3150180. x - removed lock directory _sh3150180. Verifying... ################################# [100%] Preparing... ################################# [100%] Updating / installing... 1:powersc-uiAgent-2.2.0.3-1.el8 ################################# [100%]

7. Accept the license agreement when prompted.

8. Verify installation using.

   rpm -qa | grep powersc

   
   E.g.[jaiw@jai-powersc-server-1 x86_64]$ rpm -qa | grep powerscpowersc-pscxpert-2.2.0.3-1.el8.x86_64
   powersc-uiAgent-2.2.0.3-1.el8.x86_64
   powersc-uiServer-2.2.0.3-1.el8.x86_64
   powersc-xerces-c-3.2.4-4.el8.x86_64

    

   Note: To reinstall the same version, uninstall the current one first using rpm -e.

9. Truststore Setup

   Copy endpointTruststore.jks to each endpoint.

   If using PowerVC, embed the truststore in the image.
   E.g.
   [jaiw@jai-powersc-server-1 x86_64]$ sudo cp /etc/security/powersc/uiServer/endpointTruststore.jks /etc/security/powersc/uiAgent/

10. Security Certificates

    Use /opt/powersc/uiServer/bin/generate_server_keystore_uiServer.sh to create:

    serverKeystore.jks

    serverTruststore.jks

    endpointTruststore.jks

11. Start GUI Agent and Server (Linux Only)

    To restart the PowerSC GUI Server on Linux:

    systemctl stop powersc-uiServer.service

    systemctl start powersc-uiServer.service

    E.g.
    [jaiw@jai-powersc-server-1 x86_64]$ systemctl status powersc-uiServer.service ● powersc-uiServer.service - PowerSC UI Server Loaded: loaded (/usr/lib/systemd/system/powersc-uiServer.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2025-07-24 09:24:04 UTC; 1min 32s ago Main PID: 16229 (uiServer.sh) Tasks: 167 (limit: 22996) Memory: 455.2M CGroup: /system.slice/powersc-uiServer.service ├─16229 /bin/sh /opt/powersc/uiServer/bin/uiServer.sh └─16455 /opt/powersc/uiServer/bin/uiserver /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-2.el8.x86_64/jre /opt/powersc/uiServer/classes/pinpoint.blob -server -Xss1024k -Xmx2000m -Dcom.rocketsoft.logPrefix=/var/log/powersc/uiServer/ps>
    
    jaiw@jai-powersc-server-1 x86_64]$ systemctl status powersc-uiAgent.service ● powersc-uiAgent.service - PowerSC UI Agent Loaded: loaded (/usr/lib/systemd/system/powersc-uiAgent.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2025-07-24 09:24:27 UTC; 57s ago Process: 16811 ExecStart=/opt/powersc/uiAgent/bin/uiAgent.sh (code=exited, status=130) Main PID: 16811 (code=exited, status=130)

12.  Add the group to logon group list to grant access

    E.g.
    [root@jai-powersc-server-1 ~]# cd /opt/powersc/uiServer/bin/
    [root@jai-powersc-server-1 bin]# pscuiserverctl set logonGroupList wheel logonGroupList=wheel

Access the Web UI using browser and entering Ui Server IP address

E.g. https://x.x.x.x/webclient/#/home