1. Introduction
Sentinel Privilege Manager (SPM) is a fictional Endpoint Privilege Management platform that enables organizations to manage elevated privileges across enterprise endpoints.
This guide describes the installation and configuration process for deploying SPM in an enterprise environment.
1.1 Intended Audience
- System Administrators
- Security Administrators
- Endpoint Management Teams
- IT Operations Teams
2. Deployment Overview
A typical SPM deployment consists of a central management service and endpoint agents.
2.1 Core Components
| Component | Purpose |
|---|---|
| Web Console | Provides the administrative interface for managing SPM. |
| Management Service | Processes policies, endpoint communication, and management operations. |
| Endpoint Agent | Runs on managed devices and applies privilege policies. |
| Database | Stores configuration, policy, user, and activity information. |
3. System Requirements
Verify that the target environment meets the minimum requirements before beginning installation.
| Component | Minimum Requirement | Recommended |
|---|---|---|
| Operating System | Windows Server 2019 | Windows Server 2022 |
| Processor | 4 CPU cores | 8 CPU cores |
| Memory | 8 GB RAM | 16 GB RAM |
| Disk Space | 100 GB | 250 GB SSD |
| Database | Supported relational database | Dedicated database instance |
3.1 Supported Endpoint Operating Systems
- Windows 10
- Windows 11
- Windows Server 2019
- Windows Server 2022
- Supported macOS versions
- Supported Linux distributions
4. Prerequisites
Administrative Access
Ensure that you have administrator privileges on the target installation server.
Network Connectivity
Verify connectivity between the management server and required endpoints.
Database Access
Confirm that the required database instance is available and accessible.
Firewall Configuration
Ensure that required inbound and outbound communication is permitted.
4.1 Pre-Installation Checklist
- Installation server meets system requirements.
- Administrator credentials are available.
- Database connectivity has been verified.
- Network connectivity has been verified.
- Required firewall rules are configured.
- Installation package has been downloaded.
- Backup or rollback procedures are available.
5. Download the Installation Package
Obtain the SPM installation package from the organization's approved software repository.
5.1 Package Contents
| File | Purpose |
|---|---|
SPMInstaller.exe
|
Primary installation executable. |
SPMAgentSetup.msi
|
Endpoint agent installation package. |
configuration.json
|
Sample configuration file used during deployment. |
6. Installation
Follow the steps below to install the SPM management components.
Open the Installer
Navigate to the directory containing
SPMInstaller.exe.
Run as Administrator
Right-click the installer and select Run as administrator.
Accept the License Agreement
Review and accept the applicable license agreement.
Select Installation Location
Specify the directory where the SPM components should be installed.
Configure Components
Select the components required for the deployment.
Start Installation
Review the configuration and click Install.
Complete Installation
Wait for the installation to complete and click Finish.
7. Configuration
After installation, configure the management service and database connection.
7.1 Management Service Configuration
Open the SPM configuration file and specify the management service parameters.
{
"server": {
"host": "spm-server.example.local",
"port": 8443
},
"database": {
"host": "database.example.local",
"port": 5432,
"name": "spm"
},
"logging": {
"level": "INFO"
}
}
7.2 Configuration Parameters
| Parameter | Description | Example |
|---|---|---|
server.host
|
Hostname of the SPM management server. | spm-server.example.local |
server.port
|
Port used by the management service. | 8443 |
database.host
|
Hostname of the database server. | database.example.local |
database.port
|
Port used for database connectivity. | 5432 |
logging.level
|
Controls the level of application logging. | INFO |
8. Service Verification
Verify that the SPM management service is running after installation and configuration.
Open Windows Services
Open the Windows Services management console on the installation server.
Locate SPM Service
Locate the Sentinel Privilege Manager Management Service.
Verify Status
Confirm that the service status is Running.
9. Install the Endpoint Agent
The endpoint agent enables SPM to communicate with and manage endpoint devices.
9.1 Agent Installation
Copy the Agent Package
Copy SPMAgentSetup.msi
to the target endpoint.
Open an Elevated Command Prompt
Open Command Prompt with administrator privileges.
Run the Installer
Run the MSI package using the supported installation command.
msiexec /i SPMAgentSetup.msi /qn
10. Installation Validation
Complete the following checks after installing the server components and endpoint agent.
| Validation | Expected Result |
|---|---|
| Management Service | Service status is Running. |
| Web Console | Administration console loads successfully. |
| Database | Database connection is successful. |
| Endpoint Agent | Agent service is running. |
| Endpoint Registration | Endpoint appears in the SPM console. |
| Policy Communication | Endpoint receives the configured policy. |
11. Upgrade
Follow the organization's change management process before upgrading an existing SPM environment.
11.1 Pre-Upgrade Activities
- Review the release documentation.
- Verify system requirements.
- Back up the SPM database.
- Back up configuration files.
- Confirm rollback procedures.
- Notify affected stakeholders.
11.2 Upgrade Procedure
Stop Relevant Services
Stop the SPM services according to the approved change procedure.
Run the New Installer
Launch the installer for the target SPM version.
Apply Configuration
Verify that the existing configuration is retained or updated as required.
Start Services
Start the upgraded SPM services.
Validate the Environment
Verify console access, database connectivity, endpoint communication, and policy operation.
12. Uninstallation
12.1 Remove the Management Components
- Open Apps & Features in Windows.
- Locate Sentinel Privilege Manager.
- Select Uninstall.
- Follow the uninstallation wizard.
- Restart the server if required.
12.2 Remove the Endpoint Agent
Remove the endpoint agent from managed devices using the organization's approved software removal process.
13. Troubleshooting
| Issue | Possible Cause | Resolution |
|---|---|---|
| Installer does not start | Insufficient permissions. | Run the installer with administrator privileges. |
| Database connection fails | Incorrect connection information or network connectivity issue. | Verify database host, port, credentials, and connectivity. |
| Management service does not start | Invalid configuration or unavailable dependency. | Review configuration and application logs. |
| Endpoint does not appear | Agent cannot communicate with the management service. | Verify agent status, network connectivity, and server address. |
| Policy is not received | Endpoint is not synchronized or policy is incorrectly assigned. | Verify endpoint status and policy assignment. |
13.1 Log Locations
Application and agent logs can be reviewed when troubleshooting installation or communication issues.
C:\ProgramData\SentinelPM\Logs\
14. Deployment Checklist
Use this checklist to verify that the installation is ready for operational use.
- System requirements have been verified.
- Administrative access is available.
- Database connectivity has been verified.
- Firewall requirements have been configured.
- Management components have been installed.
- Management service is running.
- Web console is accessible.
- Endpoint agent has been installed.
- Endpoint appears in the console.
- Initial policy has been assigned.
- Endpoint communication has been validated.
- Backup and rollback procedures have been documented.
Document Information
| Document Type | Installation & Configuration Guide |
|---|---|
| Product | Sentinel Privilege Manager |
| Version | 3.2 |
| Audience | System, Security, and Endpoint Administrators |
| Status | Portfolio Sample |
| Author | Anshula Raina |