update firewall, turn on selinux, download ISO and cert from remote source