Virtual appliance: Install a sensor

Compatible with VMware ESX/ESXi 5.x and later.
  • Verify you've met all the network requirements
  • Verify you've met all the deployment requirements
  • Verify your VMware system meets all the hardware and software requirements
  • Verify your virtual appliance is a complete VMware image with a Linux OS
  • Have experience working with your VMware
  • Have experience working with Linux systems
  • Have root or admin permissions to install the sensor
  • Have necessary permissions in CertCentral

See Discovery workflow and permissions and Sensor installation requirements.

Install sensor

Download the sensor from your CertCentral account

  1. In CertCentral, in the sidebar menu, click Discovery > Manage Discovery.

  2. On the Scan page, click Add sensor.

  3. On the Set up a sensor page, under step 1 Download a discovery sensor in the Virtual appliance section, click Download.

  4. Save the .ova file to your VMware computer, making sure to note the location.

Deploy the virtual appliance

  1. On your vSphere Client, open the Deploy OVF Template (in the top menu, click File > Deploy OVF Template).

  2. Use the Deploy OVF Template wizard to deploy the appliance.

  3. On the Source page, under Deploy from a file or URL, click Browse to find the sensor .ova file.

  4. On the OVF Template Details page, the template details will appear.

  5. On the End User License Agreement page, read through the agreement and click Accept.

  6. On the Name and Location page, in the Name box enter a name for the deployed image. Under Inventory Location, specify a location for the image.

  7. On the Specify a Specific Host page, under Host Name, select the ESX server where you want to deploy the image.

  8. On the Storage page, select a storage destination for the virtual machine files.

  9. On the Disk Format page, select the format for storing the virtual disks.

  10. On the Network Mapping page, select the network you want the deployed image to use.

  11. On the Properties page, enter and confirm the password for the CLI “admin” User Password and for the CLI Privilege Mode Password.

  12. On the Ready to Complete page, click Finish to deploy the virtual appliance.

Configure the virtual appliance

  1. Select the newly deployed appliance and click Power on the virtual machine.

  2. Go to the Console.

  3. If prompted, change the password for the root user and ccuser.

  4. If the virtual appliance can’t find a DHCP server, you must run the assignIpHostname tool to assign a static IP before you continue to the next step.

    Run the assignIpHostname tool:

    1. Sign in as ccuser and then switch to the root user.
      For example:
      [ccuser@localhost]$ su -
      Password: *************
    2. Run the assignIpHostname command and follow the prompts.
      [root@localhost]# assignIpHostname
      Enter the network mode (D=DHC{P,S=STATIC):
      S

Make sure to provide the IP address and the hostname.

  1. Set up the SSH connection to the virtual appliance as the ccuser, then switch to the root user.

  2. The sensor is installed to /opt/digicert/.

Sensor activation note:
You can activate the sensor now or later. However, you must activate the sensor before you can use it to set up a scan. If you choose to activate the sensor later, see Linux: Activate a sensor.

Activate the sensor

  1. Go to the installation directory and run start.sh, making sure you have root or admin permissions on the server.

    For example:

    cd ccsensor
    ./start.sh

    Where ccsensor is the installation directory.

  2. When asked to proceed with authentication, type y and enter your CertCentral username and password.

  3. Select the division you want to assign the sensor to.

    If you don't have divisions, we return the name of the organization for your account.

  4. When asked, enter a sensor name.

What's next

You're ready to set up and run a scan using this sensor. See Set up and run a scan.

If you're using multiple sensors, you may want to rename the sensors to make tracking/identifying them easier. See Rename the sensor.