Quantcast
Channel: Ivanti User Community : All Content - Cloud Services Appliance
Viewing all articles
Browse latest Browse all 418

How to Configure a Gateway (Cloud Service Appliance) - Quick Guide

$
0
0

Prerequisites

 

Download and install the Cloud Service Appliance.  To download a pre-installed virtual machine CSA, follow this link:  Cloud Services Appliance From 4.4 Upgrade and New Installs

 

Description

 

This document is meant to validate the basic configuration of the Cloud Service Appliance. It takes into account most potential configuration issues. Please read step-by-step as that is how this document was created.

 

Here is a video of the process that includes core and agent side information: LANDESK - CSA - Installation and Configuration - YouTube

 

Note: With the Virtual CSA, you may see eth0 and eth1, or eth2 and eth3, etc… this is normal. The lowest numbered NIC is typically the external NIC.

Additional information: If you use two NICs, you may need to create a static route. Please see: How to: Setup a Persistent Static Route for the CSA

It is recommended to enter all text lowercase. Some fields won't even let you use uppercase characters.

Steps

  1. Click System > Configure date and time- Click Save to commit changes
  2. Click on System > Network Settings
  3. Remove any references to the 192.168.0.1 and 192.168.0.2
  4. Set IP, subnet, and gateway for your network on eth0
  5. Click add
    • If you are setting up dual NIC repeat steps 5 and 6 for eth1, else move on to 7
  6. Enter internal DNS server if applicable
  7. Click add
  8. Set the hostname and DNS suffix for your device
  9. Click save
  10. Click on the hostnames tab
  11. Remove any references to the 192.168.0.1 and 192.168.0.2
  12. We will want to add the core server(s) here
    • Take note of the format as it is different for different items
  13. Core IP, Core FQDN, Core Hostname (no caps) click add
  14. Ping license.landesk.com, patch.landesk.com and patchec.landesk.com to validate the IP addresses as they are always subject to change
  15. Enter  67.199.253.210, license.landesk.com, license.landesk.com click add
  16. Enter 67.199.253.64, patch.landesk.com, patch.landesk.com click add
  17. Enter 67.199.253.65, patchec.landesk.com, patchec.landesk.com click add
  18. Enter 185.115.118.64, patchemea.landesk.com, patchemea.landesk.com click add
  19. Click save
  20. Click on the security section
  21. Remove any subnets you use from the blocked list
    • Take note of the subnets and if they overlap your ranges
  22. Add the core IP to trusted list, even if you plan to disable the firewall it will ensure if for some reason it is turned back on your core will still connect
  23. Add the 67.199.253.64, 185.115.118.64, 67.199.253.65, and 67.199.253.210 IP's in the trusted. These are the LANDESK patch and license servers from previous steps
  24. Click save at the bottom
  25. Click on the users section. Make sure you know the service account password; we will need this to configure the core. It will only be used on the core server(s) in one location(Configure > Manage Gateway/Manage Cloud Service Appliances), so if you don't know it go ahead and reset it so you can have the correct password
  26. Click on the Gateway Service Section. In the additional Hostnames section, you will want anything the gateway can resolve to or from, FQDN, internal and external IP. DO NOT ADD SHORTNAMES
  27. Click Save
  28. Activate CSA- Click on Activate>Activate Now>Enter your Landesk License credentials.**This must be done over the internet for the first activation**
  29. Install Patches (See link for the order of operation in regards to 4.2 CSA)
  30. The next steps apply only to 4.3 and 4.4 CSA and only after the first time its patched
  31. Click Manage LDMG Certificates
  32. For self-signed certificates only, click Remove
  33. Click OK to verify you want to remove the certificate
  34. Repeat the process to remove the second certificate
  35. Click System
  36. Click Appliance
  37. Click Reboot
  38. Click OK to verify the reboot
  39. If this is a VM take a snapshot at this point as it will be your base configuration
  40. Access CSA via web browser http://CSAIP
  41. Click Cloud Service Appliance Console link
    • if you see this certificate prompt, click cancel until you get a username and password prompt
      cert.png
  42. Login with the admin user
  43. Click System > Backup and restore
  44. Click Backup Now
  45. Export backup
  46. Your CSA is now ready to have the core server connection configured

Viewing all articles
Browse latest Browse all 418

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>