Setup Guide for IBM Internet Security Systems Products Server Sensor for Windows 7.0 Installation

Transcription

1 Setup Guide for IBM Internet Security Systems Products Server Sensor for Windows 7.0 Installation 1

2 Index 1. Introduction 3 2. Objectives 3 3. Scope 3 4. Site Protector Installation and Components Update System requirements Installation and Configuration Components Update 7 5. Additional Information and Troubleshooting 10 2

3 1. Introduction The document was created by IBM Internet Security System Technical Support and is based on questions that are frequently asked by clients. It provides the basic steps to install, configure, maintain and troubleshoot IBM Internet security Systems products. 2. Objectives The objective of this document is to Provide the new user with the basic steps to perform an Installation of Real Secure Server Sensor 7.0 on a dedicated server with Internet access Provide the new user with the basic steps to perform updates for their Real Secure Server Sensor installation 3. Scope This document will guide the new user through the steps to perform an installation of RealSecure Server Sensor 7.0 on a Microsoft Windows operating system. This is only a setup guide that will help the customer become familiar with the Server Sensor's process of installing and upgrading itself. No additional configurations will be explored and only default settings will be used. For more information about Server Sensor 7.0 features, specific management requirements, technical details and more options please refer to the following guide: For more information about specific functionalities and its integration with other IBM Internet Security Systems products please refer to our product documentation at: 3

4 4. Server Sensor Installation and Update 4.1 System requirements Please visit the following document to see if your system meets the requirements for this installation: Installation Installation The following section describes the installation of RealSecure Server Sensor 7.0 on a Step 1 Run the RealSecureServerSensor70_SR4_X.exe file The following dialog box will appear. Click Next to continue with the InstallShield Wizard Figure a - Installation Wizard 4

5 Step 2 - License agreement The following dialog box will appear. Please read the EULA and click Next to accept the terms. Figure b - License agreement Step 3 Read Me for Server Sensor 7.0 setup that covers: - Description - Compatibility - Installing this release - Getting the latest Readme and Related Documentation - Customer Support - Reporting Product Issues - Tips At this step you will see the following box: Figure c - ReadMe text file 5

6 Step 4 Choosing Typical or Custom installation At this step you can select whether you would like a Typical or Custom installation. For this example we will be using the Typical installation, which is recommended for most users. The Custom option is used by more advanced users who need to configure which components need to be installed Figure d - Choosing setup type Step 5 Automatic Key Import Here select Allow Auto-Import. When you install a component you can automatically import an authentication key from the Console. When you select the auto-import option, the sensor receives the initial authentication key over a standard network connection initiated from the Console. The installation program imports only the Console s public keys. Unless you use the Deployment Manager to automatically distribute authentication keys, you must manually copy the public keys of other components, such as event collectors, to the sensors. 6

7 Figure e - Automatic Key Importation Step 6 Select the Public Key Administrators Do one of the following: Type the IP address of the Console computer, and then click Add. Type the name for the Console computer s Public Key Administrator, and then click Add. Use the format computername_username Click Next after adding all of your Key Administrators. NOTE: IBM ISS recommends that you add at least one key administrator at this time. If you do not add an administrator now, you must reinstall the component to set up a key administrator. Figure f - This is were you can input Key Administrators 7

8 Step 7 Review Settings Review all Server Sensor Settings then click Next Figure g Review install settings Step 8 - Private Key Archival Click Next at this screen after entering a Passphrase. Figure h - Private Key archival 8

9 Step 9 Finish After a successful installation you will have the final install shield window. Click Finish Figure i Finishing the setup process 4.3 Server Sensor Registration and Update License Requirements Before attempting to update any of the agent a license key is required. Please refer to your Sales Representative or contact isskeys@iss.net for information on how to get a license key. To upload a license key open the Site Protector Console and then go to Tools > Licenses > Agent/Module as shown in the following figure. Figure a - Licenses location 9

10 The following screen will appear. To add a license, click on Add and upload your new license. Repeat this process for all of your agents/sensors and features. Verify the status of your license next. Figure b - Adding a License NOTE: Before adding a new license please remove the *.xml extension of the key file Getting your Server Sensor Registered. Step 1 Once you have decided which group to place you Server Sensor in, right-click on the group and choose New and select Agent. Doing so will cause the New Agent Wizard to open. Type in the name of the Asset or the IP of the machine that has Server Sensor installed and click Add. Click Next once you see the Asset name and IP address appear in the listing. Figure a - New Agent Wizard 10

11 Step 2 Choose your Event Collector. From the pull down menu select the Event Collector that you want the sensor to report to. Make sure that Automatically Register Agent is selected. Click Next. Figure b - Choose the EventCollector Step 4 Finishing the Registration Process. Once the agent has been added, click Finish to complete the process. Figure c - Completing the Registration Process 11

12 At this point you should be able to see your Server Sensor in Agent view in the SiteProtector console. It may temporarily appear in Unknown status. Press F5 to refresh your console after a minute, your agent should now show that it is in Active status Update Process Step 1 - In order to update Server Sensor right click on the agent and select Update >Apply XPU. This should open the menu window as seen in figure 4.3.3a. Choosing Run Once will cause the update to run immediately and only one time. Click Next. Figure a - Scheduling an update 12

13 Step 2 Accept the End User License Agreement(EULA) by clicking Accept. Figure b - The End User License Agreement 13

14 Step 3 Select your updates, if there is a Service Pack available, install that prior to installing an X-Press Update(XPU). After you make your selection, click Finish. Figure c - Choosing the update 14

15 Step 4 Finishing the update process. Once the installation is finished you may click Closed. Figure d - Completing the update process At this point your agent may need additional updates, which can be obtained by repeating the above process. 15

16 5. Additional Information and Troubleshooting Here are additional resources for documentation data and known issues. All Server Sensor 7.0 documentation for all platforms: Known issues with Server Sensor 7.0 for Windows