Deploying and install configuration using VMware vSphere
This section covers.
Deploying the virtual machine
The following steps walk you through deploying the PAM UI Server within a VMware vSphere infrastructure.
-
Within your existing VMware infrastructure, right-click an inventory object and select
Deploy OVF Template
. -
The Deploy OVF Template wizard opens. On the Select an OVF template page, specify the location of the OVA template and click
NEXT
. -
On the Select a name and folder page, enter the unique name the PAM UI Server will be identified by, select a deployment location and click
NEXT
. -
On the Select a compute resource page, select a resource on which to run the deployed PAM UI Server template and click
NEXT
. -
On the Review details page, verify the OVF template details and click
NEXT
. -
On the License agreements page, read the Osirium end-user license agreement. Accept and click
NEXT
. -
On the Select storage page, define where and how to store the PAM UI Server files that will be deployed through the OVA template and click
NEXT
. -
On the Select networks page, select a network the PAM UI Server will be accessible from and click
NEXT
. -
On the Ready to complete page, review the settings selected and click
FINISH
. Wait while the server is created.
Network Configuration Settings
To setup the network configuration on the PAM UI Server:
-
Once the PAM UI Server has finished deploying, right-click and select
Power On
. Wait while the server is booted.Warning
DO NOT turn off the PAM UI Server during the boot stage as this may cause the machine to become corrupted.
-
Within VMware vSphere open the Console window of the deployed PAM UI Server.
-
At the command type
sudo netconf
and press ENTER. -
Within the Configure Networking screen, configure the following server settings. Press TAB to navigate between the fields.
- IP Address: Enter the IP Address which will be used to connect to the PAM UI Server.
- Netmask: Enter the network mask.
- Default Gateway: Enter the network default gateway IP address.
- Domain Name Servers: Enter the network DNS IP address. Enter multiple servers as a comma separated list.
- Search Domains: Enter the domain to be used as part of a domain search list. Can be left empty.
-
When completed TAB down to the
Save
button and press ENTER. The network configuration is saved and you are navigated to a confirmation screen. -
When prompted select
Save
and press ENTER. -
You MUST reboot before continuing. At the command prompt type
sudo reboot
to apply the configuration. Wait while the system is rebooted.
SSH Access Configuration
SSH access configuration is required to allow administrators to SSH onto the PAM UI Server.
When the first SSH connection is made to the PAM UI Server a private key is set. The server will generate a unique username for this initial connection which will be deleted once the initial setup has been completed.
Note
Additional keys can be added after setup.
Adding the first SSH public key
-
Generate an RSA key pair using your preferred method.
Note
Instructions for generating an RSA key pair using PuTTY can be found here.
-
Open the Console window of the PAM UI Server.
-
At the command prompt type
sshconf
and press ENTER. This will display a one-time username that you will use to setup the SSH key for the support user account.Note
The setup-xxxxxxxx username displayed will be unique to each PAM UI Server install.
-
Open PuTTY or your preferred SSH tool and enter the IP address of the PAM UI Server.
-
Next under Connection -> Data enter the one-time username displayed by 'sshconf' in the Auto-login username field.
-
Next under Connection -> SSH -> Auth -> Credentials, click
Browse...
and select the private key file (.ppk file) that you created at the start (i.e. pam_ui_support.ppk). -
Click
Open
to connect. -
As this is the first time you are connecting you will see a fingerprint alert box, accept the fingerprint.
-
The connection window will now only remain open for a few seconds and then disappear. PuTTY may display an error on disconnect. This is okay and expected.
-
This connection has now set the SSH key of the 'support' user for the PAM UI Server.
-
Now to SSH to the PAM UI Server open PuTTY, set the IP address, set the private key file (.ppk file) but now set the auto-login username to be 'support' (without the quotes).
-
Click
Open
and you will be connected to the PAM UI Server. -
You are now ready to configure your PAM UI Server. See System configuration of the PAM UI Server.