Installing JSA on a Virtual Machine
Create a virtual machine. For more information, see Creating Your Virtual Machine.
The software installation menu will not be visible in the installation wizard by default. If you want to do JSA software installation, refer to JSA Software only Installations.
After you create your virtual machine, you must install the JSA software on the virtual machine.
- FIPS mode only: On the Red Hat Enterprise Linux 7.9 start menu, click Tab to edit the vmlinuz line.
-
FIPS mode only: Add
qradar.fips=1
to thevmlinuz
line and click Enter.The result might look similar to this example:vmlinuz initrd=initrd.img inst.stage2=hd:LABEl=QRadar-2020_11_0_20201210153453 quiet inst.text inst.gpt inst.ks=hd:LABEL=QRadar-2020_11_0_20201210153452console=ttyS0,9600 console=tty1 qradar.fips=1
- Log in to the virtual machine by typing root for the user name.
The user name is case-sensitive.
- Accept the End User License Agreement.
Tip:
Press the Spacebar key to advance through the document.
-
Select the appliance type:
-
Appliance Install (purchased as an appliance)
-
High Availability Appliance
-
App Host Appliance
-
Log Analytics Appliance
Note:You can select the appliance type based on the intended appliance functionality.
-
- If you selected an appliance for high-availability (HA), select whether the appliance is a console.
- If you selected an appliance for Log Analytics Appliance, select LA (Log Analytics "All-In-One" or Console 8099).
- For the type of setup, select Normal Setup (default) or HA Recovery Setup, and select Next.
- The Date/Time Setup page appears. Enter the current date in the Current Date (YYYY/MM/DD) field in the format displayed. A date is also displayed for your reference. Enter the time in 24-hour format in the 24h Clock Time (HH:MM: SS) field. Alternatively, you can enter the name or the IP address of the time server to which the time can be synced in the Time Server field. After entering the date and time details, select Next.
- The Select Continent/Area page appears. Select the Time Zone Continent or Area as required and select Next. The default value is America.
- The Time Zone Selection page appears. Select the Time Zone City or Region as required and select Next. The default value is New York.
- If you selected HA Recovery Setup, enter the cluster virtual IP address.
- Select the Internet Protocol version:
Select ipv4 or ipv6.
- If you selected ipv6, select manual or auto for the Configuration type.
- Select the bonded interface setup.
- Select the management interface.
Note:
If the interface has a link (cable connected), a plus sign (+) is displayed before the description.
-
In the Network Information Setup window, configure the following
network settings and select Next.
-
Hostname: Enter a fully qualified domain name as the system hostname
-
IP Address: Enter the IP address of the system
-
Network Mask: Enter the network mask for the system
-
Gateway: Enter the default gateway of the system
-
Primary DNS: Enter the primary DNS server address
-
Secondary DNS: (Optional) Type the secondary DNS server address
-
Public IP: (Optional) Enter the Public IP address of the server
Note:If you are configuring this host as a primary host for a high availability (HA) cluster, and you selected Yes for auto-configure, you must record the automatically-generated IP address. The generated IP address is entered during HA configuration. For more information, see the Juniper Secure Analytics High Availability Guide.
-
-
If you are installing a Console, enter an admin
password that meets the following criteria:
-
Contains at least 8 characters
-
Contains at least one uppercase character
-
Contains at least one lowercase character
-
Contains at least one digit
-
Contains at least one special character: @, #, ^, or *.
-
-
Enter
root
password that meets the following criteria:
-
Contains at least 5 characters
-
Contains no spaces
-
Can include the following special characters: @, #, ^, and *.
-
-
Click Next.
The installation process might take several minutes. When the installation is complete, if you are installing a JSA Console, proceed to step 21. If you are installing a managed host, proceed to Adding Your Virtual Appliance to Your Deployment.
- Apply
your license key.
-
Log in to JSA.
The default user name is admin. The password is the password of the admin user account that you set during installation.
Click Login To JSA.
Click the Admin tab.
In the navigation pane, click System Configuration.
Click the System and License Management icon.
From the Display list box, select Licenses, and upload your license key.
Select the unallocated license and click Allocate System to License.
From the list of systems, select a system, and click Allocate System to License.
-
Click Deploy License Changes.
-
-
FIPS mode only: Verify that FIPS mode is enabled by typing the
following command.
/opt/qradar/bin/myver -fips
The output is 'true' on a FIPS mode enabled system and 'false' when FIPS mode is not enabled.
If the result is false, try to reinstall with FIPS mode enabled.