CCE Installation on Azure Cloud

The application runs smoothly on Azure as long as the hardware requirements are met and the installation and configuration are done properly as described in subsequent sections of this document.

Objective and Scope

The scope of this document is to detail the steps to install OTM on Azure cloud. It is meant to be used by the customer (Enterprise or MSSP) for their own purpose. Partners may also use it for their demo environment.

Please note that the OTM has two installation components, APE and CCE. But the scope of this document is limited to the instructions of installation of CCE only on Azure cloud for now.

Installation Pre-requisites

To get the OTM deployed on the Azure cloud, a customer needs:

Server setup package
install.sh Package
CCE package

All the above tar packages can be downloaded prior to the installation process using the dropbox links provided later in this article.

Microsoft Azure Cloud Platform

Microsoft Azure (formerly Windows Azure) is a cloud computing service created by Microsoft for building, testing, deploying, and managing applications and services through a global network of Microsoft-managed datacenters. It provides software as a service (SaaS), platform as a service (PaaS) and infrastructure as a service (IaaS) and supports many different programming languages, tools and frameworks, including both Microsoft-specific and third-party software and systems.

Seceon aiSIEM, being a containerized platform is compatible with a variety of installation environments. It has been commercially deployed and is running successfully on physical servers, AWS instances and Virtual machines (VMs) on ESXi servers, KVMs etc. For Azure also, a VM has to be created and then used for the aiSIEM Installation.

Installation Process For APE on an Azure VM

Step1: Login to your Microsoft Azure Dashboard:

Step 2: Create VM

Go to the list on the right side of the dashboard and select “Virtual Machines”

On the “Virtual Machines” screen, select “+Add” option and select the “Virtual machine”.

Fill in the details as asked in the “Create virtual machine” form, using the information:

Click on the dropdown of the “Image” option and then click on “See all images”.

Search “Centos” in the search box.

Now click on the “Select” button of “CentOS-based (Rogue Wave Software)”

Now select CentOS-based 7.9 Gen1 Image from the list,

To select the size click on see all sizes.

Now select any VM size with 2 CPUs and 4 GiB RAM and click on select.

Now select the Authentication type as Password and give username and password.

Now click on Next: Disk.

Now select the OS disk type Standard SSD.

Now click on Next:Networking → Next:Management → Next:Advantage → Next:Tags → Next:Review+Create

Now Click on the “Create” button to create the VM. When your deployment is complete “go to resource”.
Now stot the VM by clicking on “Stop” → “OK”

Now go on the Disk and Click on the first Disk name.

Now Go on “Size+Performance” select 256 GB and click on Resize.

Now go on the Overview and “Disk size” 256 GiB.

Now click on the VM name which you will see above on the path and then go into “Disk” and click on the “Refresh” button. Now here you will see OS disks are 256 GiB.

Now click on the “Overview” and Start the VM after that copy the public IP.

Now SSH using this Public IP and give the Username and Password.

Now do df -h and you will see 256 GB allocated to root.

Step 3: Setup the CCE Machine.

Now download the server setup package using the below command.

wget -c https://www.dropbox.com/s/0k0oh0aiaa0sewe/seceon-server-setup-7.0.2.tar.gz

Now go into the Root using the following command.
```
sudo su
```

Now untar the server-setup package using the tar -xvzf <package name> command.

[CCE-Test@ayush-test ~]$ sudo su
[root@ayush-test CCE-Test]# tar -xvzf seceon-server-setup-7.0.2.tar.gz
seceon-server-setup-7.0.2/
seceon-server-setup-7.0.2/debug-tools.tar.gz
seceon-server-setup-7.0.2/seceon-pkg.tar.gz
seceon-server-setup-7.0.2/mount_disk.sh
seceon-server-setup-7.0.2/setup-docker-logrotate.sh
seceon-server-setup-7.0.2/otmdoc
seceon-server-setup-7.0.2/configure-seceonrepo.sh
seceon-server-setup-7.0.2/seceon-setup.sh
seceon-server-setup-7.0.2/docker.tar.gz
seceon-server-setup-7.0.2/yum-utils.tar.gz
seceon-server-setup-7.0.2/docker-py.tar.gz
seceon-server-setup-7.0.2/ansible.tar.gz
seceon-server-setup-7.0.2/setup-direct-lvm-minimal.sh
seceon-server-setup-7.0.2/mount_kdisk.sh
seceon-server-setup-7.0.2/seceon_tech_support
seceon-server-setup-7.0.2/setup-direct-lvm.sh
[root@ayush-test CCE-Test]#

Now go into the package using the cd command, do ls and install the package using ./seceon-setup.sh command

[root@ayush-test CCE-Test]# cd seceon-server-setup-7.0.2/
[root@ayush-test seceon-server-setup-7.0.2]# ls
ansible.tar.gz           mount_disk.sh      seceon_tech_support
configure-seceonrepo.sh  mount_kdisk.sh     setup-direct-lvm-minimal.sh
debug-tools.tar.gz       otmdoc             setup-direct-lvm.sh
docker-py.tar.gz         seceon-pkg.tar.gz  setup-docker-logrotate.sh
docker.tar.gz            seceon-setup.sh    yum-utils.tar.gz
[root@ayush-test seceon-server-setup-7.0.2]# ./seceon-setup.sh

Now reboot the VM using reboot command.
```
reboot
```
Now login in to this machine with username- seceon and password - seceon. After that run df -h and check the disk.

Now download cce-globel-config and install. sh file using the wget -c command.

 wget -c https://www.dropbox.com/s/ysq1gzb7l7j6nrp/cce-global-config.yml
wget -c https://www.dropbox.com/s/kjkkn9jqjh3mi0g/install.sh

Make these files executable using the below command.
```
chmod 775 cce-global-config.yml install.sh
```

Step 4: Install the CCE package

Download the CCE package.

wget -c https://www.dropbox.com/s/gl1oad171hf63et/seceon-cce-7.0.1-1158.tar.gz

Go into the screen mode using the screen command and install the CCE package using the below command.
```
./install.sh -c
```
After APE installation is complete check all containers are up using the below command.
```
otmdoc -m
```