How do I install a Scanner Appliance in AWS?

The image is distributed as an Amazon Machine Image (AMI) and allows our customers to easily set up a Scanner Appliance within their AWS environment.

To install a new Scanner Appliance, simply follow these step-by-step instructions.

Preparation for the Scanner Appliance in Security Center

• NTP servers: NTP servers are limited to a maximum of 4.
• Token: Token from Security Center > Scanner Appliance section.

{
 "ntpservers": ["xxx.xxx.xxx.xxx","xxx.xxx.xxx.xxx"],
 "token": "nnnnnn"
}

{
	"ntpservers": ["xxx.xxx.xxx.xxx","xxx.xxx.xxx.xxx"],
	"token": "nnnnnn",
	"api_base_url": "https://onprem.address:8004",
	"nvt_base_url": "https://onprem.address:8007",
	"apt_base_url": "http://onprem.address:8044",
	"trust_certificates": "1"
}

If using a valid certificate, the "trust_certificates" line should be removed.

When adding Scanner Appliance for OnPrem:
The TLS certificate hostname on the OnPrem must be the same as the api-url. If it's not, the registration will fail.

This config will be later added to the EC2 User data before booting the Instance (Scanner Appliance Image) in AWS. Do that while adding the Instance in AWS on the step called "3. Configure Instance" to the User data at the bottom.

This can be added to running instances later as well by clicking Instances-> (Right click on the right Instance) -> Instance Settings -> Edit User Data -> Current User data. 

The instance is required to be rebooted after the change.

Steps to set up Scanner Appliance in AWS

1. Share the following information to support by submitting this form:
   • AWS Account ID (12-digit account number)
   • AWS Region
2. Wait for confirmation from Support that the Scanner Appliance AMI is shared with your account and region.
3. Confirm in your AWS account that you can access the shared AMI.
4.  Go to Connect instance click Connect, and wait for the console UI to show up.
   
   

    

Steps to configure the Scanner Appliance:

1. In the Appliance console UI, choose:

1. 1. Configuration > Network and press enter. Now you need to fill out the following values manually and save by pressing F11 (Fn+F11).

1. 1. 1. IPv4 address
      2. IPv4 network
      3. IPv4 gateway
      4. IPv4 dns-nameservers
      5. IPv6 address
      6. IPv6 network
      7. IPv6 gateway
      8. IPv6 dns-nameservers
         
   2. Then choose the option Probe registration, input the Scanner Appliance token (located under the Scanner Appliance section in Security Center) and press F11 (Fn+F11) to confirm the registration.
      
      
2. Reboot the Appliance.
3. In Security Center, you can check the activation to make sure the scanner was registered correctly.
4. Done!