3.3 Appliance Installation

The Change Guardian server appliance is a ready-to-run software appliance. The appliance combines a hardened SUSE Linux Enterprise Server (SLES) operating system and the Change Guardian server software integrated update service to provide an easy and seamless user experience that allows you to leverage existing investments. You can install the software appliance on a virtual environment.

To install the Change Guardian Server appliance image:

  1. Download the base appliance image to a local server from the Change Guardian 5.2 downloads page. The OVF file name is ChangeGuardian_SLES12SP3GM_5.1.0.0.x86_64-5064.3.1.ovf.tar.gz. The ISO file name is ChangeGuardian_SLES12SP3GM_5.1.0.0.x86_64-5064.3.1.preload.iso.

    IMPORTANT:To create a new instance of Change Guardian 5.2 appliance, you must first install the Change Guardian 5.1 appliance base image and then apply the latest product and operating system updates from the appliance channel.

  2. (Conditional) If you are using VMware, use the OVF template to complete the following steps:

    1. Extract the appliance image to your local server. If you are extracting to a Windows server, you need a program like 7-Zip or the latest version of WinRar.

      If you are extracting to a Linux server, use the following command:

      tar -zxvf <filename>

    2. For VMware, log in to the vSphere client and deploy the OVF template. For more information, see the VMware documentation.

  3. (Conditional) If you are using Microsoft Hyper-V (Hyper-V documentation) or installing direct to hardware, use the ISO image to complete the following steps:

    1. Burn the ISO file to a DVD or mount the image.

      NOTE:We do not support mounting the ISO image from a network share.

    2. Start or reboot your computer and check the BIOS configuration of your machine. Your BIOS should allow you to start from the CD/DVD drive and change the order of the media.

    3. (Conditional) If you have not mounted the image, boot the DVD.

  4. Power on the appliance server.

  5. Select the language and keyboard layout.

  6. Read and accept the SUSE End User License Agreement.

  7. Read and accept the Change Guardian End User License Agreement.

  8. Specify the hostname and domain name on the Hostname and Domain Name page, and verify that the Assign Hostname to Loopback IP option is selected.

    NOTE:Only select Change Hostname via DHCP if you do not have a static IP address reservation.

  9. Set the Hardware Clock to UTC, specify the time zone of the VM, and select Change to configure NTP date/time synchronization.

    If the time appears out of sync immediately after the installation, run the following commands to restart NTP:

    • service ntp stop

    • service ntp start

  10. Configure the following accounts:

    • appliance OS root account password

    • global admin password

      NOTE:While setting the admin password, only the following non-alphanumeric characters are allowed:` ! @ $ ^ _ { } [ ] \ : " , . / ?.

    • Change Guardian server cgadmin password

    • Deselect Use IP Address for event routing if you can resolve the Change Guardian server host name from all of your monitored servers.

  11. Configure the default email host using the following information:

    • SMTP Host – The full name, including domain name, of the email server from which you want to send email alerts. You must be able to resolve the specified hostname from the Change Guardian server.

    • SMTP Port – The remote SMTP port used to connect. The default is 25.

    • From – The return email address appearing on each email sent.

    • SMTP User Name (Optional) – The user name to use when connecting to the SMTP server.

    • SMTP Password (Optional) – The password that corresponds to the SMTP user name.

  12. Download the following file to the Change Guardian server: changeguardian_appliance_configuration_utility_5100-32.tar.gz from Micro Focus Downloads.

  13. Extract the file by running the following command: tar -xvf changeguardian_appliance_configuration_utility_5100-32.tar.gz.

  14. Use the cd command to change to the directory where you extracted the utility.

  15. To configure the appliance, run the following script:

    ./cg5100-appliance_configuration.sh

    This script configures the required packages to manage the appliance.

    WARNING:Do not run this script remotely as it involves network reconfiguration, which in turn might interrupt the configuration.

  16. Register your appliance for updates to receive updates for the appliance.

  17. To complete the appliance installation, apply the latest product and operating system updates from channel. For more information on applying updates, see Applying the Updates.

3.3.1 Registering the Appliance for Updates

You must register the Change Guardian appliance with the appliance update channel to receive Change Guardian and latest operating system updates. To register the appliance, you must first obtain your appliance registration code or the appliance activation key from the Customer Care Center.

Register Using Change Guardian Appliance Management Console

Use the following steps to register the appliance for updates:

  1. Log in to the Change Guardian Appliance Management Console as vaadmin or root.

  2. Click Home > Online Update > Register Now

  3. In the Email field, specify the email ID to which you want to receive updates.

  4. In the Activation Key field, enter the registration code.

  5. Click Register

  6. Verify whether updates are available.

Register Using Commands

Use the following steps to register the appliance for updates:

  1. Log in to the Change Guardian server as the root user.

  2. Clean up existing registrations.

    • For SLES (both 11 and 12) based clients, run the following command as root user:

      suse_register -E
  3. Specify the following command to register the server:

    • For SLES (both 11 and 12) based clients, run the following command as root user:

      suse_register -a regcode-change-guardian="<registration_code>" -a email="<email_ID>"

    Specify the email ID where you want to receive updates.

    SLES OS updates are also provided through the appliance update channel.

  4. Verify whether updates are available.

    For more information on applying updates, see Applying the Updates.