
vShield Quick Start Guide
24 VMware, Inc.
Install vShield Component Licenses
YoumustinstalllicensesforvShieldEdge,vShieldApp,andvShieldEndpointbeforeinstallingthese
components.YoucaninstalltheselicensesaftervShieldManagerinstallationiscompletebyusingthevSphere
Client.
To install vShield licenses
1FromavSphereClienthostthatisconnectedtoavCenterServersystem,selectHome>Licensing.
2Forthe
reportview,selectAsset.
3Right‐clickavShieldassetandselectChangelicensekey.
4 SelectAssignanewlicensekeyandclickEnterKey.
5Enterthelicensekey,enteranoptionallabelforthekey,andclickOK.
6ClickOK.
7RepeatthesestepsforeachvShieldcomponentforwhichyouhavealicense.
Prepare All ESX Hosts
YoushouldprepareallESXhostsinyourvCenterenvironmentforvShieldadd‐onfunctionality.
ThefollowinginformationisrequiredforESXhostpreparation:
OneIPaddressforthemanagement(MGMT)portofeachvShieldAppvirtualappliance.EachIPaddress
shouldbereachablefromthevShieldManagerandsitontheManagementnetworkusedforvCenterand
ESXhostmanagementinterfaces.
LocalornetworkstoragetoplacethevShieldAppandPortGroupIsolationdisks.
vShieldvirtualappliancesincludeVMwareTools.DonotattempttoalterorupgradetheVMwareTools
softwareonavShieldvirtualappliance.
To prepare an ESX host for vShield add-on functionality
1LogintothevSphereClient.
2 SelectanESXhostfromtheinventorytree.
3Click
thevShieldtab.
4Acceptthesecuritycertificate.
5ClickInstallforthevShieldAppservice.
Youwillbeabletoinstallallthreeservicesonthenextscreen.
6UndervShieldApp,enterthefollowinginformation.
CAUTIONDonotinstallvShieldZones/AppontheESXhostwherevCenterServerisrunning.
Field Action
Datastore SelectthedatastoreonwhichtostorethevShieldAppvirtualmachinefiles.
ManagementPortGroup SelecttheportgrouptohostthevShieldApp’smanagementinterface.This
portgroupmustbeabletoreachthevShieldManager’sportgroup.
IPAddress TypetheIPaddresstoassigntothevShieldApp’s
managementinterface.
Netmask TypetheIPsubnetmaskassociatedwiththeassignedIPaddress.
DefaultGateway TypetheIPaddressofthedefaultnetworkgateway.
Comentarios a estos manuales