Quick Guide - Gateway (Cloud Service Appliance) Configuration

Version 33

    Verified Product Versions

    LANDESK Management Suite 9.5LANDESK Management Suite 9.6LANDESK Management Suite 2016.xLANDESK Endpoint Manager 2017.x



    Download and install the Cloud Service Appliance.  To download a pre-installed virtual machine CSA, follow this link:

    Cloud Services Appliance From 4.4 Upgrade and New Installs




    This document is meant to validate basic configuration of the Cloud Service Appliance. It takes into account most all potential configuration issues. Please read step-by-step as that is how this document was created.


    Here is a video of the process that includes core and agent side information: LANDESK - CSA - Installation and Configuration - YouTube



    Note: With the Virtual CSA, you may see eth0 and eth1, or eth2 and eth3, etc… this is normal. The lowest numbered NIC is typically the external NIC.

    Additional information: If you use two NICs, you may need to create a static route. Please see: Cloud Services Appliance - How To Add a Persistent Static Route


    It is recommended to enter all text lowercase.Some fields won't even let you use uppercase characters.



    1. Click System > Configure date and time- Click Save to commit changes
    2. Click on System > Network Settings
    3. Remove any references to the and
    4. Set IP, subnet, and gateway for your network on eth0
    5. Click add
      1. If you are setting up dual NIC repeat steps 5 and 6 for eth1, else move on to 7
    6. Enter internal DNS server if applicable
    7. Click add
    8. Set the hostname and DNS suffix for your device
    9. Click save
    10. Click on the hostnames tab
    11. Remove any references to the and
    12. We will want to add the core server(s) here
      1. Take note of the format as it is different for different items
    13. Core IP, Core FQDN, Core Hostname (no caps) click add
    14. Ping license.landesk.com, patch.landesk.com and patchec.landesk.com to validate the IP addresses as they are always subject to change
    15. Enter, license.landesk.com, license.landesk.com click add
    16. Enter, patch.landesk.com, patch.landesk.com click add
    17. Enter, patchec.landesk.com, patchec.landesk.com click add
    18. Enter, patchemea.landesk.com, patchemea.landesk.com click add
    19. Click save
    20. Click on the security section
    21. Remove any subnets you use from the blocked list
      1. Take note of the subnets and if they overlap your ranges
    22. Add the core IP to trusted list, even if you plan to disable the firewall it will ensure if for some reason it is turned back on your core will still connect
    23. Add the,,, and IP's in the trusted. These are the LANDESK patch and license servers from previous steps
    24. Click save at the bottom
    25. Click on the users section. Make sure you know the service account password; we will need this to configure the core. It will only be used on the core server(s) in one location(Configure > Manage Gateway/Manage Cloud Service Appliances), so if you don't know it go ahead and reset it so you can have the correct password
    26. Click on the Gateway Service Section. In the additional Hostnames section you will want anything the gateway can resolve to or from, FQDN, internal and external IP. DO NOT ADD SHORTNAMES
    27. Click Save
    28. Activate CSA- Click on Activate>Activate Now>Enter your Landesk License credentials.**This must be done over internet for the first activation**
    29. Install Patches (See link for order of operation in regards to 4.2 CSA)
      1. Best Known Method for Configuring LANDESK Cloud Service Appliance (former Management Gateway) version 4.2 and newer
    30. The next steps apply only to 4.3 and 4.4 CSA and only after the first time its patched
    31. Click Manage LDMG Certificates
    32. For self-signed certificates only, click Remove
    33. Click OK to verify you want to remove the certificate
    34. Repeat process to remove the second certificate
    35. Click System
    36. Click Appliance
    37. Click Reboot
    38. Click OK to verify the reboot
    39. If this is a VM take a snapshot at this point as it will be your base configuration
    40. Access CSA via web browser http://CSAIP
    41. Click Cloud Service Appliance Console link
      1. if you see this certificate prompt, click cancel until you get a username and password prompt
    42. Login with the admin user
    43. Click System > Backup and restore
    44. Click Backup Now
    45. Export backup
    46. Your CSA is now ready to have the core server connection configured