How to configure a scanner appliance for on-prem deployments?

If you want to install a new Scanner Appliance for local scanning, simply follow these step-by-step instructions.

Preparing the images

1. Login to Security Center.
2. Click Scanner appliance > Add appliance.
3. Click On-Premise.
4. Click Get Started.
5. Add the name of the Scanner Appliance, and download the image for the chosen virtualization environment.
6. Click Next twice.
7. You should see the screen with the scanner name and appliance token. Please write down the appliance token.
8. Install the virtualization image on your virtualization platform and start it.
   Important: The system requirements must be set before booting the Scanner Appliance for the first time.

Configuring the VM

1. When the appliance boots, you will see on its screen a Holm Security Probe Configurator menu with four options:
   
   1. Configuration
   2. Probe Registration
   3. Status
   4. Reboot
2. Choose Configuration > Endpoints > On-prem in the main menu and press Enter.
   The listed endpoints are the following:
   
   a. API
   b. NVT (download feed)
   c. APT (note the use of HTTP and not HTTPS)
   d. SSH (optional: only required for NAT mode. See below for more information)
   
   The endpoints can be found in the Web administration user interface of the on-prem system under the General section. (port 8001)
   Make sure the protocol and port are correct before saving.
   Use Tab and Press OK/Save or F11 (Fn+F11)
3. It will ask you to trust the certificate if the endpoint server uses a self-signed certificate. Confirm that you want to trust it.
4. NOTE: This option is displayed only if the endpoints are reachable.
5. Confirm and proceed with rebooting the Scanner Appliance.
   
6. Choose Configuration > Network and press Enter. Now, you need to fill out the following values manually:
   1. IPv4 address
   2. IPv4 network
   3. IPv4 gateway
   4. IPv4 DNS-nameservers
   5. IPv6 address
   6. IPv6 network
   7. IPv6 gateway
   8. IPv6 DNS-nameservers
7. You are only required to configure one protocol. Press F11 (Fn+F11) when you are done, and you will be returned to the main menu, and the interface will be reconfigured.
   
   Note that if you are using a MacBook, you can save the settings by clicking Actions in the top right menu of the UI console, then Guest OS > Send keys > F11.
   
8. Make sure you have the correct firewall settings. The appliance must be able to communicate with the core machine on its endpoints. 
9. Choose option Probe registration, input the token you wrote down in step 7, and press F11 (Fn+F11).
10. You are now ready to start the registration procedure. Click Register. The Scanner Appliance sends registration requests and retrieves configuration responses from the platform. You should see a confirmation that the probe has been successfully registered and configured. Click OK to get back to the main menu.
11. You can check the activation in the Security Center to ensure the scanner was registered correctly.
12. Done!