TPAM or Safeguard Installation on VM's

Hi Sushant,

TPAM is not available on Vmware but only in a form of a hardware appliance. Our new solution for PAM is One Identity Safeguard (which is available in VM format for SPP and SPS).

SPA (Analytics) is part of SPS and does not require a separate instance but is a feature that can be enabled within SPS itself.

SPP System Requirements and appliance specifications:
support.oneidentity.com/.../2

SPP VM Setup:
support.oneidentity.com/.../3

SPS VM Setup:
support.oneidentity.com/.../5

If you require Professional Services assistance with a solution design and deployment, you may contact your One Identity sales or account representative or submit a request to engage Professional Services team here: https://support.oneidentity.com/professional-services-product-select

Thanks!

Hello Tawfiq,

Can you suggest one thing for Software Setup & Hardware?

I downloaded VM files for SPS & SPP, I am getting below 2 files.

1. Safeguard-for-Privileged-Sessions-and-Analytics-Virtual-Appliance_64.iso (It's a ISO image for SPS)

2. Safeguard-for-Privileged-Passwords-Virtual-Appliance-VMware_211.ova (It's a OVA file for SPP)

My Question is :- Difference between ISO & OVA files? It seems both are different image file.  How OVA file works as a image file or Software Setup?

Also for Hardware Appliance installation what is difference between SPS T1,T4,T10, Appliance 3000 & 3500. All these are different appliance models? is it?

Thanks,
Sushant

Hi Sushant,

ISO Image can be used to install \ deploy the SPS software on a machine running Ubuntu OS. You can load the ISO image in VMware machine running Ubuntu and then boot from CD.

OVA file is the Virtual appliance for SPP because this is a hardened appliance with no access to the OS layer so this can be deployed in VMware as a complete Virtual Machine so no software install required here.

For SPS hardware, yes that is correct, these are different hardware models dependent on the deployment requirement as these have different specifications. For details on the hardware specifications, please refer to the links below:

https://support.oneidentity.com/kb/267892/hardware-specifications-for-mbx-appliances

https://support.oneidentity.com/kb/307171/3000-and-3500-hardware-specifications

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/5.0.10/sizing-guide-for-sps-version-5.0-or-later

Thanks!

Thank you so much Tawfiq. I got it finally :-)

Hi Tawfiq/Clint,

1 more clarification. Can you please answer it?

1. Can we install SPS in Linux also instead of Ubantu?

2. Can we install these products on Azure instances?

Thanks,

Sushant

Hello Sushant,

1. SPS isn't technically installed on Ubuntu, it is a self contained install. So when you install from the ISO the operating system is part of the install. 

2. Both SPP and SPS are in the Azure marketplace to make it easier to deploy. 

Leigh Grant

Thank Leigh,

So for SPP we don't need any Operating System. Like Windows 10 or Server 2016 to install, as mentioned by Tawfiq it's a complete VM package.

Because I found on your portal , we need below requirement to install SPP:-

Operating system: Windows 10 Enterprise LTSC including dynamic disks. If you are using KMS, the KMS server needs to be able to validate Windows 10 Enterprise LTSC.

·         Supported VMs:

·         Microsoft Hyper-V (VHDX)

·         VMware vSphere with vSphere Hypervisor (ESXi) version 6.5 or higher

·         VMWare Workstation version 6.5 or higher

·         Minimum resources recommended: 4 CPUs, 10GB RAM, and a 60GB disk

Tawfiq comment:-

"OVA file is the Virtual appliance for SPP because this is a hardened appliance with no access to the OS layer so this can be deployed in VMware as a complete Virtual Machine so no software install required here."

PLease suggest, don't we need any Operating system to install it on VM. I hope for SPP & SPS both are compelate package and comes with OS also.

Thanks,

Sushant

SPP is a self contained file but it is built upon Windows and that requires a Microsoft license. The documentation found here explains that further. So Tawfiq is absolutely correct. 

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/2.11/administration-guide/65#TOPIC-1350294

Leigh Grant

Hey Leigh,

So which OS is required for SPP? will it work on Windows Server 2012 or 2k16?

Thanks,

Sushant

You do not need to supply a server O/S to deploy SPP. Just an MS server license.

As has been mentioned in this thread the OVA file is a pre-built SPP VM that can be imported into multiple Hypervisors. Emphasis on pre-built. It includes the hardened O/S and the SPP application code.

All you have to supply is am MS license for each VM you deploy. Without an MS license the VM will not work.

Safeguard can only be deployed as a hardened appliance. Think black box solution here where the server element of the black box is licensed with the server hardware that is shipped. With the VM you again get a pre-built Virtual Black box but rather than have to supply a unique MS license with each VM, a universal OVA file is supplied and the licensing of the MS server element is left to you. 

It is not Cyberark if that is what you are confusing build requirements with.

Tim

Yes exactly:-) It's not CyberArk that's why little bit confusing.

Okay Thanks very much Tim.

Yes exactly:-) It's not CyberArk that's why little bit confusing.

Okay Thanks very much Tim.