IBM Security Access Manager Virtual Appliance

Version 9.0
IBM®

Quick Start Guide

This guide describes the installation and initial configuration of the IBM Security Access Manager virtual
appliance.
National Language Version: To obtain the Quick Start Guide in other languages, print the language-specific PDF file from the
installation media.

Product overview
The IBM® Security Access Manager virtual appliance helps organizations secure and manage user access and protect
applications against fraudulent and unauthorized access.

1 Step 1: Evaluate the system configuration

Evaluate your hypervisor and browser versions based on the product requirements in the following wesbsite:
http://www.ibm.com/support/docview.wss?uid=swg21883395.

2 Step 2: Access the software

If you download your product from Passport Advantage®, follow the instructions in the download document at
http://www.ibm.com/support/docview.wss?uid=swg24039866. The download includes the IBM Security Access Manager
virtual appliance firmware. It also includes either an .iso image or a Virtual Hard Disk (VHD) file. Use the VHD for the
XenServer hypervisor and the .iso for other supported hypervisors.

3 Step 3: Gather network information

You can use either DHCP or a static IP address to manage the appliance for networking. For a static IP address, use the
following list to record important information for configuring the appliance network:
v Host name
v Management IP address
v Management Subnet Mask
v Management Gateway
v Management DNS server
For DHCP, the appliance obtains a dynamically leased IP address from the local DHCP server when it is powered on. You
can use DHCP discovery software to locate this IP address, or you can connect directly to the appliance console to
manage the interface settings.

4 Step 4: Configure the virtual network

You must correctly configure the network before you install and run the virtual appliance. The appliance can use up to
eight network devices. You must define and enable at least one device for the system to function properly. The remaining
seven devices are application interfaces; you must configure at least one of them.

5 Step 5: (Option 1) Install the firmware in a virtual machine environment other than the XenServer
hypervisor
1. Create a new virtual machine with the following minimum specifications:
v Disk space requirement: 100 GB
v Memory requirement: 4 GB
v Virtual network devices: 1 (Maximum 8)
v Virtual DVD/CD-ROM drive
2. Configure the virtual machine to start from the supplied .iso file.
3. Start the virtual machine. The firmware installer starts automatically.
4. (Previously partitioned virtual disk only) Select a language from the list of available languages.
5. (Previously partitioned virtual disk only) The system prompts you to install the firmware. Enter yes.
6. (Previously partitioned virtual disk only) When the firmware installation is complete, the system prompts you to
restart. The virtual machine restarts to the appliance console unconfigured login prompt.
 6 Step 6: (Option 2) Install the appliance on a XenServer hypervisor by using XenCenter
1. In the XenCenter console, expand the XenCenter icon on the left.
2. Right-click the attached hypervisor and select Import. In the Import Source window, click Browse and select the VHD
image to be imported. Click Open and then Next.
3. In the VM Definition window, specify the name, number of CPUs, and memory of the virtual machine and click Next.
In most scenarios, assign the virtual machine at least one processor and 2 GB of memory. These settings can be
adjusted after the virtual machine starts running.
4. In the Location window, select the destination hypervisor from the drop-down list on the right and click Next.
5. In the Storage window, select Place imported virtual disks onto specified target SRs and click Next.
6. In the Networking window, select the network for the first management interface and click Next.
7. In the OS Fixup Settings window, select Don't use Operating System Fixup and click Next.
8. In the Transfer VM Settings window, specify the settings for your network environment and click Next. If DHCP is not
available in the network, you must specify a valid IP address, subnet, and gateway.
9. In the Finish window, click Finish. The import operation might by lengthy. You can click the Logs tab to check the
progress of the import.
10. When the import is complete, run the following commands on the XenServer console to set the image to
paravirtualized mode:
xe vm-list (to get the uuid for the VM)
xe vm-param-set uuid=<vm uuid> HVM-boot-policy=""
xe vm-param-set uuid=<vm uuid> PV-bootloader=pygrub
xe vm-disk-list (to get the uuid for the disk - VBD entry)
xe vbd-param-set uuid=<disk uuid> bootable=true
11. Start the imported virtual machine. You must configure at least one network interface for the appliance to start.
Sometimes the XenCenter must be restarted before the new virtual appliance can be started correctly.

Note: To install the appliance using XenAPI or xe command line, see the IBM Knowledge Center at
http://www.ibm.com/support/knowledgecenter/SSPREK/welcome.

7 Step 7: Get started

1. Access the appliance console or the local management interface to start the wizard. To use the local management
interface, browse to the IP address of the appliance. By default, when the virtual image starts, it attempts to obtain an
IP address from the local DHCP server. You can use DHCP discovery software to obtain the allocated IP address.
2. Log in as admin. The default password is admin.
3. To secure the appliance, change the password immediately when prompted by the wizard.
4. Use the Appliance Setup wizard to complete the initial configuration. The following list is a subset of the tasks:
v Read and accept the License Agreement. For the local management interface, install the license file. You must have
a license that is installed to download the firmware updates.
v Set the appliance password.
v Configure the networking, which includes the host name, management interface settings, and DNS configuration.
v Configure the date and time settings.
5. When you complete the basic configuration, a summary is displayed. For the local management interface, review the
details on the Completion page and click Complete Setup. For the appliance console, follow the prompts to Accept the
configuration.
6. Download the activation key from your account on Passport Advantage at https://www.ibm.com/software/howtobuy/
softwareandservices/passportadvantage.

More information
See the IBM Knowledge Center at http://www.ibm.com/support/knowledgecenter/SSPREK/welcome
?

IBM Security Access Manager Virtual Appliance 9.0 Licensed Materials - Property of IBM. © Copyright IBM Corp. 2015. U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract
with IBM Corp.

IBM, the IBM logo, and ibm.com® are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other
companies. A current list of IBM trademarks is available on the web at “Copyright and trademark information” (www.ibm.com/legal/copytrade.shtml).

Part Number: CN5A8ML

Printed in Ireland