Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.

 

 

 

 

Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM Quick Start and Deployment Guide > Activate the virtual appliance > Secure your LEM appliance

Secure your LEM appliance

Table of contents
No headers
Created by Caroline Juszczak, last modified by Caroline Juszczak on Aug 05, 2016

Views: 5 Votes: 0 Revisions: 1

After you install your license, complete your appliance configuration by executing the Activate command in the Appliance menu. This process will help you secure your LEM appliance from unauthorized users.

Be sure to run the Activate command and configure your appliance after boot-up. Otherwise, you may experience unexpected results with your appliance.

During the activation procedure, you can:  

  • Configure a static IP address
  • Configure a secure password
  • Lock down web port 8080 and redirect access to port 80 for increased security
  • Verify your network configurations
  • Change your hostname (if desired)
  • Restrict access to the Reports applications
  • Export a certificate to use the optional LEM Desktop Console

If you plan to use the LEM Desktop Console powered by Adobe AIR Runtime instead of the LEM Console, import the virtual appliance CA SSL certificate to the certificate store during the activation. When the activation is completed, the LEM Console connects with the virtual appliance using secure communications on port 8443.

SolarWinds recommends configuring a static IP address for your LEM appliance. If you run DHCP and your IP address changes during the evaluation period, your deployed agents may be disconnected and require additional troubleshooting to resolve.

To ensure secure communications between the desktop software and the virtual appliance, the SSL certificate is automatically exported from the virtual appliance when the activation is completed.

  1. Open a command line interface.

    In VMware, click the Console tab.

    In Hyper-V Manager, open a PowerShell window.

    You can also use PuTTY to activate the appliance. Log in using the appliance IP address and port 32022 or 22.

  2. Log in to the appliance.

    1. At the login as prompt, type cmc and press Enter.
    2. At the password prompt, type your password and press Enter.

      The default password is password.

      The cmc> prompt opens with a list of available commands.

      File:Success_Center/Reusable_content_-_InfoDev/LEM/LEMQuickStart/090/020/lem_qsg_putty_log_in4_392x234.png

  3. Configure the appliance with a static IP address.
    1. At the cmc> prompt, type appliance and press Enter.

      The prompt changes to cmc::acm#, indicating you are in the appliance configuration menu.

    2. At the cmc::acm# prompt, type activate and press Enter.
    3. Enter and validate a cmc password.
    4. When prompted, select Yes to configure a static IP address for your appliance.

    5. At the cmc::acm# prompt, type netconfig and press Enter.
    6. At the prompt, type static and press Enter.

    7. Follow the steps on your screen to configure the Manager Appliance network parameters.

      Be sure to enter a value for each prompt. Leaving blank entries results in a faulty network configuration that requires you to rerun netconfig.

    8. Record the IP address assigned to your appliance. You will use this IP address to log in to the LEM Console.
  4. When prompted, select Yes to specify a hostname or No to accept the default hostname.

    To specify a hostname, use the following guidelines:

    • Use the standard hostname naming conventions.
    • Use hostname labels that only contain the ASCII letters a through z (in a case-insensitive manner), the digits 0 through 9, and the hyphen (-).
    • Do not use hostnames that start with a digit or a hyphen or end with a hyphen.
    • Do not include symbols, punctuation characters, or white spaces.
  5. When prompted, select Yes to specify a list of IP addresses that can access reports. This is the recommended setting.
  6. Confirm your network configuration.

    At the cmc::acm# prompt, enter viewnetconfig, press Enter, and review your network configuration.

 

 
Last modified
08:58, 5 Aug 2016

Tags

Classifications

Public