# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# CherryBlossom -- Installation Guide

19 July, 2012

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12
…
- 20
- 21

SECRET//20350112
6 (U) CB Server Installation, Verification, and Configuration
(U) This section details how to install/upgrade, verify, and configure CB Server software.
6.1 (U) Installation
(U) This section discusses installation/configuration of CB Servers and
installation/upgrade of CB Server software. To install or upgrade the Cherry Tree/VPN
software on a CB server:
1. Open a “root” console to the CB Server (see 5.4)
2. From the root console, mount the CB Server (CherryTree/VPN) Software DVD
iso in the “tmp” directory (mount <iso_file> /tmp).
3. Follow the instructions in the /tmp/README_INSTALL file (it may be helpful to
print this document).
4. Verify the installation by following the steps in section 6.2.
5. Perform any appropriate server configuration as described in section 6.3.
6. Perform the test procedures of section 6.4.
6.2 (U) Verification
(U) To verify that the installation/upgrade is successful:
1. From the Icon terminal, open a browser and navigate to:
https://<CB CC Service IP>/CherryWeb
(see section 5.2 for the <CB CC Service IP>)
2. Enter the “Cherry Web Normal User” User and Password from section 5.3.
3. Verify that the CherryWeb Overview page displays properly.
4. From a “root” console/terminal to the Slave server (see section 5.3), run:
/usr/local/bin/check_cherrytree.sh
5. This script causes the Slave server to emulate a Flytrap beacon. In this case, the
Flytrap will display on Cherry Web View -> Flytraps as “77:77:77:77:77:77”.
Verify that the beacon was received at the proper time (On Cherry Web left menu
pane, click View -> Flytraps, then click on the 77:77:77:77:77:77 Flytrap link,
then scroll down to the Status table – each entry in this table is a Beacon and
includes the time the Beacon was received).
6. See section 6.4 for comprehensive test procedures performed at each server
installation/upgrade event.
(U) If the verification does not pass, refer to section 8 for troubleshooting, or contact
relevant staff from section 3.
6.3 (U) Configuration
(U) This section discusses configuration of CB Servers after an installation/upgrade
event.
SECRET//20350112
10

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12
…
- 20
- 21