# Installing AccuTerm IO Server On Linux

Updated: 5/17/2021, 10:08:41 AM
Created: 5/17/2021, 10:08:41 AM
Last Updated By: Mike Street
Read Time: 4 minute(s)

# Info

You will need to make sure you have the appropriate root permissions to install AccuTerm IO on the server.

# Installation Steps

  1. Download the AccuTerm IO Server installation package from the Zumasys Downloads page. You can download the installer directly in Linux with the following commands.  Just cut and paste into your Linux console.
wget https://zdownload.blob.core.windows.net/accuterm/-AccuTerm-IO-Server/Linux/x64/
curl -O https://zdownload.blob.core.windows.net/accuterm/-AccuTerm-IO-Server/Linux/x64/
  1. Allow the install-accutermio file to be executable.
chmod +x install-accutermio-0.2.0.bin
  1. Run the installer.
  1. Press enter to start the installation process.

accuterm-8-installing-accuterm-web-server-package: welcome

  1. Specify the installation directory or press enter to accept the default path (/opt/accutermio).

accuterm-8-installing-accuterm-web-server-package: directory

  1. Specify the port you wish for AccuTerm IO to use or press enter to accept the default port (4380).

accuterm-8-installing-accuterm-web-server-package: port

  1. Setup the systemctl service for AccuTerm IO.

accuterm-8-installing-accuterm-web-server-package: service

  1. Update your firewall to allow access to your defined port (default 4380).

accuterm-8-installing-accuterm-web-server-package: firewall

  1. Confirm the installation details to proceed with the installation.

accuterm-8-installing-accuterm-web-server-package: summary

  1. After instlling the components, the installer will create a self-signed certificate for the AccuTerm IO Server.  You must supply a DNS name for your server.  If you do not use a DNS you can use an IP address instead.  Please read the section on Security to fully understand certificates and how to switch to a trusted certificate issued by a certificate authority.

accuterm-8-installing-accuterm-web-server-package: cert

  1. The installer will now create the self-signed certificate, add the firewall exception, install the systemd service and start up the AccuTerm IO service.

accuterm-8-installing-accuterm-web-server-package: finished

  1. AccuTerm IO Server is now installed.  Let's now test to make sure your workstation can talk to the server.  Open up Chrome or Firefox and open up the test status page. Enter your server DNS name or IP address and port number in the browser address bar to open the test page. If you are using a self-signed certificate, you will see a "privacy error" page in the browser:

accuterm-8-installing-accuterm-web-server-package: https-error

This error is because we are using a self-signed certificate.  To accept this certificate, click the Advanced Button and choose the Proceed to server (unsafe) link. The page should respond with a simple 1.  Please read below about Server Security to understand certificates and how to install a trusted certificate issued by a certificate authority and remove this error.  While using the self-signed certificate, each workstation that wishes to connect will need to go directly to the above page and choose to proceed.

Now the server is installed and running and you have accepted the self signed cert you need to build your users and profiles.  AccuTerm is actually launched from accuterm.io and your profiles are built at portal.zumasys.com

Getting Started

# Manage AccuTerm IO Server

AccuTerm IO is installed as a Linux systemctl service.

systemctl status accutermio
systemctl stop accutermio
systemctl start accutermio

# Run AccuTerm IO Server in debug mode

As root do

systemctl stop accutermio
cd /opt/accutermio
export DEBUG=express:*

# Configure AccuTerm IO Server as Jump Box

By default, AccuTerm IO will call the default Linux /bin/login program.  If you are wanting to connect to an AIX or Windows server from a Linux machine with AccuTerm IO server installed you can modify the /opt/accutermio/config.json.

        "port" : 4380,
        "ssl_cert" : "./keys/server_cert.pem",
        "ssl_key" : "./keys/server_key.pem",
        "static_dir" : "./assets",
        "heartbeat" : 60,
        "close_on_heart_failure" : true,
        "trust_proxy" : false,
        "command" : "/usr/bin/telnet",
        "command_args" : ["<ip of your telnet server", "23 - Or custom port for telnet"],
        "defaults" :
                "term" : "vt100",
                "cols" : 80,
                "rows" : 24

Now restart the AccutermIO service and it should now respond with the telnet prompt of your Pick Box.  This technique can also be used to replace /bin/login also with any other alternative login technique.  For example, you could use the following script to use SSH access instead.

# Notes on AccuTerm IO Server and Security

AccutermIO is a true web application and as such it relies on normal web certificates (https) for security.  Certificates can be either purchased from sites such as DigiCert or free ones can be obtained by ACME-based services such as Let's Encrypt.

In order to install a real certificate you will need:

  1. A true DNS entry for your server that can be resolved on the internet.
  2. Access to that DNS to add a special TXT record for authentication.
  3. Root access to the server where AccuTerm IO is installed to run the certificate installation program.

If you do not have #1 or #2 you can use a free DNS service to give you a DNS name for your server.

Free DNS service:  https://www.duckdns.org

ACME client to install CERT: https://github.com/Neilpang/acme.sh

ACME example with DuckDNS: https://github.com/Neilpang/acme.sh/wiki/dnsapi#27-use-duckdnsorg-api