Installing the ESA on the Virtual Machine

1. Starting the installation

Ensure that the virtual machine is powered on before starting the installation process.

To install the ESA:

1. Select the virtual machine.

2. Click LAUNCH WEB CONSOLE.

2. Configuring Network Settings

After selecting the NIC for management, configure the network for the ESA. During the network configuration, the system tries to connect to a DHCP server to obtain the hostname, default gateway, and IP addresses for the ESA. If the DHCP is not available, then you can configure the network information manually.

To configure the network settings:

1. If the DHCP server is configured, then the screen containing the network information appears.

2. If the DHCP server is not available, then the Network Configuration Information screen appears.

3. Select Manual and press ENTER.

   1. Select DHCP / Static address to configure the DHCP / Static address for the ESA and choose Edit.

   2. Select Static address and choose Update.

   3. If you want to change the hostname of the ESA, then perform the following steps.

      1. Select Hostname and select Edit.
      2. Change the hostname and select OK.

   4. Select Management IP to configure the management IP address for the ESA and select Edit.

      1. Add the IP address assigned to the ethMNG interface. This IP address configures the ESA to use the Web UI.
      2. Enter the Netmask. The ethMNG interface must be connected to the LAN with this Netmask value.
      3. Select OK.

   5. Select Default Route to configure the default route for the ESA and select Edit.

      1. Enter the IP address for the default network traffic.
      2. Select Apply.

   6. Select Domain Name and select Edit.

      1. Enter the domain name. For example, protegrity.com.
      2. Select Apply.

   7. Select Name Servers and select Edit.

      1. Add the IP address of the name server.
      2. Select OK.

   8. To configure the NTP, then perform the following steps.

      1. Select Time Server (NTP), and press Edit.
      2. Add NTP time server on a TCP/IP network.
      3. Select Apply.

4. Select Apply.

   The network settings are configured.

3. Configuring Time Zone

After you configure the network settings, the Time Zone screen appears.

To set the Time Zone:

1. On the Time Zone screen, select the time zone.

2. Select Next.

   The time zone is configured.

4. Configuring the Nearest Location

After configuring the time zone, the Nearest Location screen appears.

To Set the Nearest Location:

1. On the Nearest Location screen, select the nearest location.

2. Select OK.
   The Initial Server Settings screen appears.
   This screen also allows you to update the default settings of date and time, keyboard manufacturer, keyboard model, and keyboard layout.

3. Edit the required settings. Select OK.

5. Updating the Date and Time

To Update the Date and Time:

1. Press SPACE and select Update date and time.

2. Press ENTER.

3. Select the date.

4. Select Set Date and press ENTER.

5. Set the time.

6. Click Set Time and press ENTER.

   The date and time settings are configured.

6. Configuring GRUB Settings

On the ESA, GRUB version 2 (GRUB2) is used for loading the kernel. If you want to protect the boot configurations, then you can secure it by enforcing a username and password combination for the GRUB menu.

During installation for the ESA on-premise, a screen to configure GRUB credentials appears. If you want to protect the boot configurations, then you can secure it by enforcing a username and password combination for the GRUB menu. While installing the ESA, the GRUB menu can be secured by creating a username and setting password as described in the following task.

To configure GRUB settings:

1. From the GRUB Credentials page, press the SPACEBAR to select Enable.

   By default the Disable is selected. If you continue to choose Disable, then the security for the GRUB menu is disabled. It is recommended to enable GRUB to secure the ESA.

   You can enable this feature from the CLI Manager after the installation is completed. On the CLI Manager, navigate to Administration > GRUB Credential Settings to enable the GRUB settings.

   For more information about GRUB, refer to the section Securing the GRand Unified Bootloader (GRUB).

2. Select OK.

3. Enter a username in the Username text box.

   The requirements for the Username are as follows:

   • It should contain a minimum of three and maximum of 16 characters.
   • It should not contain numbers and special characters

4. Enter a password in the Password and Re-type Password text boxes.

   The requirements for the Password are as follows:

   • It must contain at least eight characters.
   • It must contain a combination of alphabets, numbers, and printable characters.

5. Select OK and press ENTER.

   A message Credentials for the GRUB menu has been set successfully appears.

6. Select OK.

7. Setting up Users and Passwords

Only authorized users can access the ESA. The Protegrity Data Security Platform defines a list of roles for each user who can access the ESA. These are system users and LDAP administrative users who have specific roles and permissions. When you install the ESA, the default users configured are as follows:

• root: Super user with access to all commands and files.
• admin: User with administrative privileges to perform all operations.
• viewer: User who can view, but does not have edit permissions.
• local_admin: Local administrator that can be used when the admin user is not accessible.

After completing the server settings, the Users Passwords screen appears that allows you set the passwords for the users.

To set the LDAP user passwords:

1. Add the passwords of the users.

   Ensure that the passwords for the users comply with the password polices.

   For more information about the password policies, refer Password Policy Configuration

2. Select Apply.

   The user passwords are set.

8. Licensing

After the ESA components are installed, the Temporary License screen appears. This screen takes time. It is recommended to wait for few minutes before proceeding.

After the ESA is installed, you must apply for a valid license within 30 days.

For more information about licenses, refer Licensing.

9. Installing Products

In the final steps of installing the ESA, select the components to install.

To select products to install:

1. Press space to select and install the required products.

2. Click OK.

   The selected products are installed.
   After installation is completed, the Welcome to Protegrity Appliance screen appears.

3. Select Continue to view the CLI Login screen.