IBM Security Verify Access Virtual Appliance

Quick Start Guide

Version 10.0.0

This guide describes the installation and initial configuration of the IBM® Security Verify Access virtual appliance.

Note:

IBM Security Verify Access Virtual Appliance 10.0.0 Licensed Materials - Property of IBM. © Copyright IBM Corp. 2020. U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM, the IBM logo, and ibm.com® are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at Copyright and trademark information (www.ibm.com/legal/copytrade.shtml).

About this task

Product overview

The IBM Security Verify Access virtual appliance helps organizations secure and manage user access and protect applications against fraudulent and unauthorized access.

Procedure

  1. Evaluate the system configuration

    Evaluate your hypervisor and browser versions based on the product requirements in the following website: http://www.ibm.com/software/reports/compatibility/clarity/index.html.

  2. Access the software
    If you download your product from Passport Advantage®, follow the instructions in the download document at https://www.ibm.com/support/pages/node/2403693. The download includes the IBM Security Verify Access virtual appliance firmware. It also includes an .iso image, a Virtual Hard Disk (VHD) file for XenServer, and a VHD file for Microsoft Azure.
  3. Gather network information
    Use either DHCP or a static IP address to manage the appliance for networking. For a static IP address, use the following list to record important information for configuring the appliance network:
    • Host name
    • Management IP address
    • Management Subnet Mask
    • Management Gateway
    • Management DNS server
    For DHCP, the appliance obtains a dynamically leased IP address from the local DHCP server when it is powered on. You can use DHCP discovery software to locate this IP address, or you can connect directly to the appliance console to manage the interface settings.
  4. Configure the virtual network
    Correctly configure the network before you install and run the virtual appliance. The appliance can use up to eight network devices. You must define and enable at least one device for the system to function properly.
  5. (Option 1) Install the firmware in a virtual machine environment other than XenServer and Microsoft Azure.
    1. Create a new virtual machine with the following minimum specifications:
      • Disk space requirement: 100 GB
      • Memory requirement: 4 GB
      • Virtual network devices: 1 (Maximum 8)
      • Virtual DVD/CD-ROM drive
    2. Configure the virtual machine to start from the supplied .iso file.
    3. Start the virtual machine. The firmware installer starts automatically.
    4. (Previously partitioned virtual disk only) Select a language from the list of available languages.
    5. (Previously partitioned virtual disk only) The system prompts you to install the firmware. Enter yes.
    6. (Previously partitioned virtual disk only) When the firmware installation is complete, the system prompts you to restart. The virtual machine restarts to the appliance console unconfigured login prompt. If a previously partitioned disk does not exist, the system automatically shuts down after the installation is complete.
  6. (Option 2) Install the appliance on a XenServer hypervisor by using XenCenter.
    1. In the XenCenter console, expand the XenCenter icon on the left.
    2. Right-click the attached hypervisor and select Import. In the Import Source window, click Browse and select the VHD image to be imported. Click Open and then Next.
    3. In the VM Definition window, specify the name, number of CPUs, and memory of the virtual machine and click Next. In most scenarios, assign the virtual machine at least one processor and 2 GB of memory. These settings can be adjusted after the virtual machine starts running.
    4. In the Location window, select the destination hypervisor from the drop-down list on the right and click Next.
    5. In the Storage window, select Place imported virtual disks onto specified target SRs and click Next.
    6. In the Networking window, select the network for the first management interface and click Next.
    7. In the OS Fixup Settings window, select Don't use Operating System Fixup and click Next.
    8. In the Transfer VM Settings window, specify the settings for your network environment and click Next. If DHCP is not available in the network, you must specify a valid IP address, subnet, and gateway.
    9. In the Finish window, click Finish. The import operation might by lengthy. You can click the Logs tab to check the progress of the import.
    10. Start the imported virtual machine. You must configure at least one network interface for the appliance to start. Sometimes the XenCenter must be restarted before the new virtual appliance can be started correctly.
  7. (Option 3) Install the appliance in a Microsoft Azure environment.
    1. Obtain the Azure-ready VHD file.
    2. Upload the Azure-ready VHD file to Microsoft Azure.
    3. Create an image from the uploaded VHD file.
    4. Deploy the image as a new virtual machine using Azure Portal or the command line.
  8. Get started
    1. Access the appliance console or the local management interface to start the wizard. To use the local management interface, browse to the IP address of the appliance. By default, when the virtual image starts, it attempts to obtain an IP address from the local DHCP server. You can use DHCP discovery software to obtain the allocated IP address.
    2. Log in as admin. The default password is admin.
    3. To secure the appliance, change the password immediately when prompted by the wizard.
    4. Use the Appliance Setup wizard to complete the initial configuration. The following list is a subset of the tasks:
      • Read and accept the License Agreement. For the local management interface, install the license file. You must have a license that is installed to download the firmware updates.
      • Set the appliance password.
      • Configure the networking, which includes the host name, management interface settings, and DNS configuration.
      • Configure the date and time settings.
    5. When you complete the basic configuration, a summary is displayed. For the local management interface, review the details on the Completion page and click Complete Setup. For the appliance console, follow the prompts to Accept the configuration.
    6. Download the activation key from your account on Passport Advantage at https://www.ibm.com/software/howtobuy/softwareandservices/passportadvantage.

What to do next

More information

See the IBM Knowledge Center at http://www.ibm.com/support/knowledgecenter/SSPREK/welcome