Quick Guide - Gateway (Cloud Service Appliance) Configuration

Version 33

    Verified Product Versions

    Endpoint Manager 9.5Endpoint Manager 9.6Endpoint Manager 2016.xEndpoint Manager 2017.x

    Prerequisites:

     

    Download and install the Cloud Service Appliance.  To download a pre-installed virtual machine CSA, follow this link:

    Cloud Services Appliance From 4.4 Upgrade and New Installs

     

    Description:

     

    This document is meant to validate basic configuration of the Cloud Service Appliance. It takes into account most all potential configuration issues. Please read step-by-step as that is how this document was created.

     

    Here is a video of the process that includes core and agent side information: LANDESK - CSA - Installation and Configuration - YouTube

     

     

    Note: With the Virtual CSA, you may see eth0 and eth1, or eth2 and eth3, etc… this is normal. The lowest numbered NIC is typically the external NIC.

    Additional information: If you use two NICs, you may need to create a static route. Please see: How to: Setup a Persistent Static Route for the CSA

     

    It is recommended to enter all text lowercase.Some fields won't even let you use uppercase characters.

     

    Steps:

    1. Click System > Configure date and time- Click Save to commit changes
    2. Click on System > Network Settings
    3. Remove any references to the 192.168.0.1 and 192.168.0.2
    4. Set IP, subnet, and gateway for your network on eth0
    5. Click add
      1. If you are setting up dual NIC repeat steps 5 and 6 for eth1, else move on to 7
    6. Enter internal DNS server if applicable
    7. Click add
    8. Set the hostname and DNS suffix for your device
    9. Click save
    10. Click on the hostnames tab
    11. Remove any references to the 192.168.0.1 and 192.168.0.2
    12. We will want to add the core server(s) here
      1. Take note of the format as it is different for different items
    13. Core IP, Core FQDN, Core Hostname (no caps) click add
    14. Ping license.landesk.com, patch.landesk.com and patchec.landesk.com to validate the IP addresses as they are always subject to change
    15. Enter  67.199.253.210, license.landesk.com, license.landesk.com click add
    16. Enter 67.199.253.64, patch.landesk.com, patch.landesk.com click add
    17. Enter 67.199.253.65, patchec.landesk.com, patchec.landesk.com click add
    18. Enter 185.115.118.64, patchemea.landesk.com, patchemea.landesk.com click add
    19. Click save
    20. Click on the security section
    21. Remove any subnets you use from the blocked list
      1. Take note of the subnets and if they overlap your ranges
    22. Add the core IP to trusted list, even if you plan to disable the firewall it will ensure if for some reason it is turned back on your core will still connect
    23. Add the 67.199.253.64, 185.115.118.64, 67.199.253.65, and 67.199.253.210 IP's in the trusted. These are the LANDESK patch and license servers from previous steps
    24. Click save at the bottom
    25. Click on the users section. Make sure you know the service account password; we will need this to configure the core. It will only be used on the core server(s) in one location(Configure > Manage Gateway/Manage Cloud Service Appliances), so if you don't know it go ahead and reset it so you can have the correct password
    26. Click on the Gateway Service Section. In the additional Hostnames section you will want anything the gateway can resolve to or from, FQDN, internal and external IP. DO NOT ADD SHORTNAMES
    27. Click Save
    28. Activate CSA- Click on Activate>Activate Now>Enter your Landesk License credentials.**This must be done over internet for the first activation**
    29. Install Patches (See link for order of operation in regards to 4.2 CSA)
      1. Best Known Method for Configuring LANDESK Cloud Service Appliance (former Management Gateway) version 4.2 and newer
    30. The next steps apply only to 4.3 and 4.4 CSA and only after the first time its patched
    31. Click Manage LDMG Certificates
    32. For self-signed certificates only, click Remove
    33. Click OK to verify you want to remove the certificate
    34. Repeat process to remove the second certificate
    35. Click System
    36. Click Appliance
    37. Click Reboot
    38. Click OK to verify the reboot
    39. If this is a VM take a snapshot at this point as it will be your base configuration
    40. Access CSA via web browser http://CSAIP
    41. Click Cloud Service Appliance Console link
      1. if you see this certificate prompt, click cancel until you get a username and password prompt
        cert.png
    42. Login with the admin user
    43. Click System > Backup and restore
    44. Click Backup Now
    45. Export backup
    46. Your CSA is now ready to have the core server connection configured