How to Configure a Gateway (Cloud Service Appliance) - Quick Guide

Version 35

    Verified Product Versions

    Endpoint Manager 9.5Endpoint Manager 9.6Endpoint Manager 2016.xEndpoint Manager 2017.x



    Download and install the Cloud Service Appliance.  To download a pre-installed virtual machine CSA, follow this link:  Cloud Services Appliance From 4.4 Upgrade and New Installs




    This document is meant to validate the basic configuration of the Cloud Service Appliance. It takes into account most potential configuration issues. Please read step-by-step as that is how this document was created.


    Here is a video of the process that includes core and agent side information: LANDESK - CSA - Installation and Configuration - YouTube


    Note: With the Virtual CSA, you may see eth0 and eth1, or eth2 and eth3, etc… this is normal. The highest numbered NIC is typically the external NIC.

    Additional information: If you use two NICs, you may need to create a static route. Please see: How to Setup a Persistent Static Route for the CSA

    It is recommended to enter all text in lowercase letters. Some fields won't even let you use uppercase characters.


    1. Click System > Configure date and time- Click Save to commit changes
    2. Click on System > Network Settings
    3. Remove any references to the and
    4. Set IP, subnet, and gateway for your network on eth0
    5. Click add
      • If you are setting up dual NIC repeat steps 5 and 6 for eth1, else move on to 7
    6. Enter internal DNS server if applicable
    7. Click add
    8. Set the hostname and DNS suffix for your device
    9. Click save
    10. Click on the hostnames tab
    11. Remove any references to the and
    12. We will want to add the core server(s) here
      • Take note of the format as it is different for different items
    13. Core IP, Core FQDN, Core Hostname (no caps) click add
    14. Ping, and to validate the IP addresses as they are always subject to change
    15. Enter,, click add
    16. Enter,, click add
    17. Enter,, click add
    18. Enter,, click add
    19. Click save
    20. Click on the security section
    21. Remove any subnets you use from the blocked list
      • Take note of the subnets and if they overlap your ranges
    22. Add the core IP to trusted list, even if you plan to disable the firewall it will ensure if for some reason it is turned back on your core will still connect
    23. Add the,,, and IP's in the trusted. These are the LANDESK patch and license servers from previous steps
    24. Click save at the bottom
    25. Click on the users section. Make sure you know the service account password; we will need this to configure the core. It will only be used on the core server(s) in one location(Configure > Manage Gateway/Manage Cloud Service Appliances), so if you don't know it go ahead and reset it so you can have the correct password
    26. Click on the Gateway Service Section. In the additional Hostnames section, you will want anything the gateway can resolve to or from, FQDN, internal and external IP. DO NOT ADD SHORTNAMES
    27. Click Save
    28. Activate CSA- Click on Activate>Activate Now>Enter your Landesk License credentials.**This must be done over the internet for the first activation**
    29. Install Patches (See link for the order of operation in regards to 4.2 CSA)
    30. The next steps apply only to 4.3 and 4.4 CSA and only after the first time its patched
    31. Click Manage LDMG Certificates
    32. For self-signed certificates only, click Remove
    33. Click OK to verify you want to remove the certificate
    34. Repeat the process to remove the second certificate
    35. Click System
    36. Click Appliance
    37. Click Reboot
    38. Click OK to verify the reboot
    39. If this is a VM take a snapshot at this point as it will be your base configuration
    40. Access CSA via web browser http://CSAIP
    41. Click Cloud Service Appliance Console link
      • if you see this certificate prompt, click cancel until you get a username and password prompt
    42. Login with the admin user
    43. Click System > Backup and restore
    44. Click Backup Now
    45. Export backup
    46. Your CSA is now ready to have the core server connection configured