3.3 Appliance Installation

The Change Guardian server appliance is a ready-to-run software appliance. The appliance combines a hardened SUSE Linux Enterprise Server (SLES) operating system and the Change Guardian server software integrated update service to provide an easy and seamless user experience that allows you to leverage existing investments. You can install the software appliance on a virtual environment.

NOTE:Change Guardian 6.0 appliance installation is not supported on Hyper-V. Install Change Guardian 5.1 appliance in Hyper-V and then upgrade to Change Guardian 6.0 appliance.

Prerequisite: Ensure that the machine meets the hardware requirements. For hardware information, See System Requirements page.

To install:

  1. Download the base appliance image to a local server from the Change Guardian downloads page.

    The OVF file name is ChangeGuardian_SLES12SP5GM_6.0.0.0.x86_64-18.0.0.ovf.tar.gz.

    The ISO file name is ChangeGuardian_SLES12SP5GM_6.0.0.0.x86_64-18.0.0.preload.iso.

  2. (Conditional) If you are using VMware, use the OVF template to complete the following steps:

    1. Extract the appliance image to your local server.

      If you are extracting to a Windows server, you need a program, such as WinRar:

      If you are extracting to a Linux server, use the following command:

      tar -zxvf <filename>

    2. Log in to the vSphere client and deploy the OVF template. For more information, see the VMware documentation.

  3. (Conditional) If you are using Microsoft Hyper-V or installing direct to hardware, use the ISO image to complete the following steps:

    1. Burn the ISO file to a DVD or mount the image.

      NOTE:Change Guardian does not support mounting the ISO image from a network share.

    2. Start or reboot your computer and check the BIOS configuration of your machine. The BIOS should allow you to start from the CD/DVD drive and change the order of the media.

    3. (Conditional) If you have not mounted the image, boot the DVD.

  4. Power on the appliance server.

  5. Select the language and keyboard layout.

  6. Read and accept the SUSE End User License Agreement.

  7. Read and accept the Change Guardian End User License Agreement.

  8. Set the Hardware Clock to UTC, specify the time zone of the VM, and then select Change to configure NTP date/time synchronization.

    If the time appears out of sync immediately after the installation, run the following commands to restart NTP:

    • service ntp stop

    • service ntp start

  9. Configure the following:

    • Appliance OS root account password

    • global admin password

      NOTE:While setting the admin password, only the following non-alphanumeric characters are allowed:` ! @ $ ^ _ { } [ ] \ : " , . / ?.

    • Create a password for the cgadmin user.

    • Deselect Use IP Address for event routing if the Change Guardian server can resolve the hostname.

  10. (Optional) If you want to email reports, configure the default email host using the following information:

    • SMTP Host: The full name, including domain name, of the email server from which you want to send email alerts. Change Guardian server should be able to resolve the hostname.

    • SMTP Port: The remote SMTP port, where the default number is 25. Use port 587 for a secure connection.

    • From: The return email address.

    • SMTP User Name (Optional): The user name to connect to the SMTP server.

    • SMTP Password (Optional): The password that corresponds to the SMTP user name.

  11. To ensure that the appliance does not go into emergency mode, change the SCSI disk partition UUID.

  12. (Conditional) If javos service does not run after completing this step, reconfigure Change Guardian by using configure.sh.

3.3.1 Registering the Appliance for Updates

You must register the Change Guardian appliance with the appliance update channel to receive Change Guardian and latest operating system updates. To register the appliance, you must first obtain your appliance registration code or the appliance activation key from the Customer Care Center.

Register Using the Change Guardian Appliance Management Console

To register the appliance for updates:

  1. Log in to the Change Guardian Appliance Management Console as vaadmin or root.

  2. Click Home > Online Update > Register Now.

  3. In the Email field, specify the email ID to which you want to receive updates.

  4. In the Activation Key field, enter the registration code.

  5. Click Register.

  6. Verify whether updates are available.

Register Using Commands

Use the following steps to register the appliance using the command line:

  1. Log in to the Change Guardian Appliance Console as root: https://IP_Address_Change_Guardian_server:9443.

  2. Clean existing registrations for SLES (11 and 12) based clients:

    suse_register -E

  3. Register the server for SLES (11 and 12) based clients:

    suse_register -a regcode-change-guardian="<registration_code>" -a email="<email_ID>"

  4. Verify whether updates are available.