Installing a QRadar data gateway

You connect to IBM® QRadar® on Cloud through a data gateway. Install the data gateway on a physical appliance, or on a virtual machine.

Before you begin

Ensure that your appliance meets the data gateway system requirements. See System requirements for data gateways.

Schedule a maintenance window for this task and ensure that users do not deploy changes while the data gateway is being added to your deployment.

Ensure that you have the following information:

The token for QRadar on Cloud.
The full host name of the console that you connect to through your gateway appliance.

About this task

Notes:

Data gateways must be installed one at a time. If you are installing more than one data gateway, wait until you complete installation of one before you install the next one.
You set a root password as part of the installation process. You cannot change this password until after the installation process is complete. The root password is also the gateway host password.

Procedure

Choose your installation method.
- If you are installing your data gateway on a physical appliance, begin the installation by using the following steps.
  1. On the QRadar Admin tab, click Hosted QRadar to download the ISO file.
  2. Create a bootable USB flash drive or DVD.
  3. Select the boot option for the QRadar ISO location: DVD or USB.
- If you are installing your data gateway on a virtual machine (VM), begin the installation by using the following steps.
  1. On the QRadar Admin tab, click Hosted QRadar to download the ISO file.
  2. Point to the ISO file from the DVD drive.
  3. Configure your VM boot menu to start from the DVD drive when you power it on.
  4. Select Install Red Hat Enterprise Linux 7.9.
- If you are installing your data gateway in Microsoft Azure, follow the instructions in Installing a QRadar data gateway on Microsoft Azure.
- If you are installing your data gateway in Amazon Web Services (AWS), follow the instructions in Installing a QRadar data gateway on Amazon Web Services from the marketplace image.
- If you are installing your data gateway in Google Cloud Platform, follow the instructions in Installing a QRadar data gateway on Google Cloud Platform.
- If you are installing your data gateway in IBM Cloud®, follow the instructions in Installing a QRadar data gateway in IBM Cloud.
- If you are installing your data gateway in IBM Cloud VPC, follow the instructions in Installing a QRadar data gateway in IBM Cloud VPC.
Power on the appliance.
To start the installation wizard, type root at the login prompt. If you are prompted for a password, type password.
Accept the End User License Agreement (EULA) that is displayed.

Tip: Press the Space bar key to advance through the document.
Use the QRadar on Cloud Self Serve app to generate a token for your data gateway and allowlist the data gateway's IP address. For more information, see Access management to the console.
Follow the instructions in the installation wizard.
1. In the Appliance Install window, select Data Gateway Appliance.
2. In the Data Gateway Appliance Assignment window, select Event Collector Gateway 7000.
3. In the Network Information Setup window, do not use an IP address in the 192.168.0.0/16 network range. You must use a static IP address. Do not change this IP address. Leave the Public IP field blank. Give each gateway a unique host name. The gateway host name cannot be the same as the console host name, and cannot be qradar.
4. In the Deployment Configuration window, enter the fully qualified domain name for the console, and the token for QRadar on Cloud.
5. In the Internet Access window, select A direct connection.
After you configure the installation parameters, a series of installation messages are displayed. The installation process can take several minutes.
After you receive your token, because the appliance restarted after the previous step, open the superuser shell again by typing the following command:
```
sudo su -
```
Exit the superuser shell by typing the following command:
```
exit
```
If an Interim Fix is available for your QRadar on Cloud environment, download the Interim Fix from Fix Central (https://www.ibm.com/support/fixcentral).

Tip: To see if an Interim Fix is available for your QRadar on Cloud environment, log in to the Console as a saas-admin user, go to the navigation menu () and click About.
To apply the Interim Fix on the data gateway, see the Release Notes for the Interim Fix that you want to install.

What to do next

After you install your Data Gateway, you cannot access it by using SSH. To enable the Data Gateway by using SSH, see Can a Data Gateway be accessed by using SSH? (https://www.ibm.com/support/pages/qradar-cloud-support-faq-and-common-questions)