Installing a QRadar appliance

Install a IBM® QRadar® Console or a managed host on a QRadar appliance or on your own appliance.

Software versions for all QRadar appliances in a deployment must be same version and fix level. Deployments that use different versions of software are not supported.

Before you begin

Ensure that the following requirements are met:

  • The required hardware is installed.
  • You have the required license key for your appliance.
  • A keyboard and monitor are connected by using the VGA connection.
  • If you want to configure bonded network interfaces, see Configuring bonded management interfaces.
  • If you are installing QRadar on a Unified Extensible Firmware Interface (UEFI) system, secure boot must be disabled.

Procedure

  1. Type root at the login prompt to launch the installation wizard. Type password if you are prompted for a password.
  2. Accept the End User License Agreement.
  3. Select the appliance type:
    • Appliance Install
    • High Availability Appliance
  4. If you selected High Availability Appliance complete the following steps:
    1. Select HA appliance (All models) 500 as the functionality.
    2. Select whether the high-availability (HA) appliance is a standby for a console or non-console appliance.
    3. Select Next.
  5. If you did not choose High Availability Appliance, select the appliance assignment, and then select Next.
  6. For the type of setup, select Normal Setup (default) or HA Recovery Setup, and set up the time.
  7. If you selected HA Recovery Setup, enter the cluster virtual IP address.
  8. Select the Internet Protocol version:
    • ipv4
    • ipv6
      If you selected ipv6, select manual or auto for the Configuration type.
      manual
      You must use a static IP address with a CIDR range.
      auto
      A static IP address with a CIDR range is generated with the Neighbor Discovery Protocol.
  9. Select the bonded interface setup, if required.
  10. Select the management interface.
  11. In the wizard, enter a fully qualified domain name in the Hostname field.
    Important:
    • The hostname must not contain only numbers.
    • The console and managed host (MH) cannot have the same hostname.
  12. In the IP address field, enter a static IP address, or use the assigned IP address.
  13. If you do not have an email server, enter localhost in the Email server name field.
  14. Enter a root password that meets the following criteria:
    • Contains at least 5 characters
    • Contains no spaces
    • Can include the following special characters: @, #, ^, and *.
  15. If you are installing a Console, enter an admin password that meets the following criteria:
    • Contains at least 8 characters
    • Contains at least one uppercase character
    • Contains at least one lowercase character
    • Contains at least one digit
    • Contains at least one special character: @, #, ^, or *
  16. Click Finish.
  17. Follow the instructions in the installation wizard to complete the installation.

    The installation process might take several minutes.

  18. If you are installing a Console, apply your license key.
    1. Log in to QRadar as the admin user:

      https://<IP_Address_QRadar>

    2. Click Login.
    3. On the navigation menu ( Navigation menu icon ), click Admin.
    4. In the navigation pane, click System Configuration.
    5. Click the System and License Management icon.
    6. From the Display list box, select Licenses, and upload your license key.
    7. Select the unallocated license and click Allocate System to License.
    8. From the list of systems, select a system, and click Allocate System to License.
  19. If you want to add managed hosts, see the IBM QRadar Administration Guide.

What to do next

Go to the (https://apps.xforce.ibmcloud.com/) to download Security applications for your installation. For more information, see the Content Management chapter in the IBM QRadar Administration Guide.