QRadar software installations

A software installation is a QRadar® installation on your hardware that uses a RHEL operating system that you provide. You must configure partitions and complete other RHEL preparation before a QRadar software installation.

Important:
  • Ensure that your hardware meets the system requirements for QRadar deployments. For more information about system requirements, see Prerequisites for installing QRadar on your hardware, and System requirements for virtual appliances.
  • You must acquire entitlement to a QRadar Software Node for a QRadar software installation. To acquire entitlement to a QRadar Software Node, contact your QRadar Sales Representative.
  • Install no software other than QRadar and RHEL on your hardware. Unapproved RPM installations can cause dependency errors when you upgrade QRadar software and can also cause performance issues in your deployment.
  • When you build a software appliance as an Event Processor and add it to your deployment, the appliance shows up in License management as an Event Processor/Flow Processor software appliance. However, the software appliance only functions as an Event Processor.
  • Do not update your operating system or packages before or after QRadar installation.
  • It is not possible to do a factory reset from the recovery partition when you do a software installation.
  • QRadar 7.5.0 Update Package 2 and later, can be installed using the Software Install process on a Unified Extensible Firmware Interface (UEFI) system with Secure Boot enabled or disabled. If Secure Boot is enabled, QRadar does not function properly until you enroll the public key and reboot the system. If Secure Boot is disabled, you can install the public key if you plan to use Secure Boot in the future. For more information, see Enabling secure boot.
Warning: Software installations do not come with the recovery partition available, and also these instructions do not apply.

Complete the following tasks in order: