Install the RDP Session transcoder

When you record RDP sessions flowing through the Okta Privileged Access gateway, the log files are stored in a binary .asa format that isn't user-friendly. You can convert these files to a more usable .mkv video format by using a transcoder.

Note:

The system requires at least 1GB of free RAM after accounting for the OS and other active apps. Okta recommends a minimum of 2GB of allocated memory. The requirements may increase based on the number of services running on the transcoding machine.

The transcoder is packaged separately from the Okta Privileged Access gateway, and must be installed on the following supported platforms:

Ubuntu 22.04
Ubuntu 20.04
RHEL 8, 9, and 10
Oracle Linux 10

Ubuntu

To install the Okta Privileged Access gateway:

Note:

Steps 1–4 are only required once. If you've already installed an Okta Privileged Access agent or gateway, you can skip steps 1–4.

Add the Okta Privileged Access repository key. curl -fsSL https://dist.scaleft.com/GPG-KEY-OktaPAM-2023 | gpg --dearmor | sudo tee /usr/share/keyrings/oktapam-2023-archive-keyring.gpg > /dev/null

Create a package resource list. Replace DISTRIBUTION with the appropriate distribution name such as Xenial, Jammy, or bullseye. The distribution names for supported platforms are provided in the following table. echo "deb [signed-by=/usr/share/keyrings/oktapam-2023-archive-keyring.gpg] https://dist.scaleft.com/repos/deb DISTRIBUTION okta" | sudo tee /etc/apt/sources.list.d/oktapam-stable.list

Platform	Version
Ubuntu	Ubuntu 16.04 Xenial Ubuntu 18.04 bionic Ubuntu 20.04 focal Ubuntu 22.04 Jammy
Debian	Debian 11 bullseye Debian 12 bookworm

Platform

Version

Ubuntu

Ubuntu 16.04 Xenial

Ubuntu 18.04 bionic

Ubuntu 20.04 focal

Ubuntu 22.04 Jammy

Debian

Debian 11 bullseye

Debian 12 bookworm

Update the list of available packages:
sudo apt-get update
Search for the Okta Privileged Access packages.
sudo apt-cache search scaleft
Install the transcoder.
sudo apt-get install scaleft-rdp-transcoder

RHEL 8

To install the Okta Privileged Access gateway:

Note:

Steps 2–4 are only required once. If you've already installed the Okta Privileged Access agent or gateway, you can skip steps 2–4.

Install the prerequisites. FFmpeg and other dependent packages aren't available within the default Red Hat repository. Therefore, the following two repositories must be added first.
- sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y
- sudo dnf install https://download1.rpmfusion.org/free/el/rpmfusion-free-release-8.noarch.rpm -y
Add the RPM key.
sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023
To access the artifacts create a /etc/yum.repos.d/oktapam-stable.repo file. Replace PLATFORM-KEY with the platform name. You must only include a major version of the OS. For example, 8 for RHEL 8 (don't include a minor version).
```
[oktapam-stable]
name=Okta PAM Stable - PLATFORM-KEY 8
baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/8/$basearch
gpgcheck=1
repo_gpgcheck=1
enabled=1
gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023
```

Run dnf update and accept the new GPG key.

Importing GPG key 0xB8966AE8:
 Userid     : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>"
 Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8
 From       : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

Note:

If you get 404 errors, make sure that the RHEL 8 version number only includes the major version.

Install the transcoder.
sudo dnf install scaleft-rdp-transcoder

RHEL 9

To install the Okta Privileged Access gateway:

Note:

Steps 2–4 are only required once. If you've already installed the Okta Privileged Access agent or gateway, you can skip steps 2–4.

Install the prerequisites. FFmpeg and other dependent packages aren't available within the default Red Hat repository. Therefore, the following two repositories must be added first.
- sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm -y
- sudo dnf install https://download1.rpmfusion.org/free/el/rpmfusion-free-release-9.noarch.rpm -y
- sudo crb enable
Add the RPM key.
sudo rpm --import https://dist.scaleft.com/GPG-KEY-OktaPAM-2023
To access the artifacts create a /etc/yum.repos.d/oktapam-stable.repo file. Replace PLATFORM-KEY with the platform name (rhel). Replace RELEASE-VERSION with the appropriate major version of the OS. For example, 9 for RHEL 9 (don't include minor version).
```
[oktapam-stable]
name=Okta PAM Stable - PLATFORM-KEY 9
baseurl=https://dist.scaleft.com/repos/rpm/stable/PLATFORM-KEY/9/$basearch
gpgcheck=1
repo_gpgcheck=1
enabled=1
gpgkey=https://dist.scaleft.com/GPG-KEY-OktaPAM-2023
```

Run dnf update and accept the new GPG key.

Importing GPG key 0xB8966AE8:
 Userid     : "Okta PAM/ASA Packager (PAM/ASA Package Signing Key) <security+pam-packages-2023@okta.com>"
 Fingerprint: A3A9 03C2 9B5C AF75 34B9 F393 1983 7E37 B896 6AE8
 From       : https://dist.scaleft.com/GPG-KEY-OktaPAM-2023

Note:

If you get 404 errors, make sure that the RHEL 9 version number only includes the major version.

Install the transcoder.
sudo dnf install scaleft-rdp-transcoder