Home > Partners > Trend Micro > Documentation > Trend Micro SecureCloud

Trend Micro SecureCloud

The "Trend Micro SecureCloud Agent Installers - Win & Linux" ServerTemplate contains RightScripts that will install the SecureCloud agent on either a Windows or Linux platform. You can use the RightScripts to encrypt your data in supported cloud providers. SecureCloud authenticates the virtual server identity and integrity based on customizable rules set by the administrator.  Encryption key management is provided via SaaS hosted by Trend Micro or it can be deployed in your own datacenter

Table of Contents

Getting Started

Prerequisites

Before you can use the RightScripts to install the SecureCloud Agent on a server or provision encrypted data storage, you must sign up for the SecureCloud service and create a new device (Amazon EBS volume) to encrypt.  It's also assumed that you already have a basic understanding of RightScale concepts and have experience launching servers with ServerTemplates.

Access the Components

You can either import the "Trend Micro SecureCloud Agent Installers - Win & Linux" Toolbox ServerTemplate from the MultiCloud Marketplace, which will import and give you access to both RightScripts, or you can import one of the RightScripts individually.  If you are logged into the RightScale Dashboard, go to Design -> MultiCloud Marketplace.  Use the keyword search and filters to find the components.  "Trend Micro" will be the publisher of these RightScale components.

Run the SecureCloud RightScript

Once you've imported the SecureCloud components you'll be able to add the appropriate Linux/Windows RightScript to one of your private ServerTemplates.  If you already have a running server instance, you can also use the 'Any Script' option to run the appropriate SecureCloud script on-demand.  See details below for proper script execution and configuration.

 

Description and Inputs

The 'Toolbox' ServerTemplate contains the following RightScripts that will install a Secure Agent on a server.  The following scripts are designed to be used as either Boot or Operational Scripts.  If you want the SecureCloud Agent to be installed during the boot phase when a server is launched, at the script at the bottom of your ServerTemplate's Boot Script list.  

Boot Scripts

RightScript:  Trend Micro SecureCloud Agent Installer - Linux

Description:  Installs Trend Micro SecureCloud and provisions encrypted storage on Linux platform.

Required Inputs and Default Settings:

  • AWS_ACCESS_KEY_ID - Amazon credential. See FAQ 13.  
  • AWS_SECRET_ACCESS_KEY - Amazon credential. See FAQ 13.
  • DEVICES_CONF - Configuration of the device to be provisioned. This value must be entered as text in the following format:
    • {id=< volume ID>}{mountpoint=[<linux mount point>]}{filesystem=[ext3, xfs]}{access=[readWrite, readOnly]}{os=linux}{kmtype=LUKS}{keysize=[126,192,256]}
      • id - Enter the ID of the Amazon EBS volume that will be attached to the server.  (e.g. vol-a123456)
      • mountpoint - Enter the device name where the encrypted volume will be mounted on the server. (e.g. /mnt/encrypted_mount)
      • filesystem - The file system format for the encrypted volume. (e.g. ext3 or xfs)
      • access - The access type on the mounted, encrypted volume. (e.g. readWrite or readOnly)
      • os - The type of operating system.  For Linux-based servers, use 'linux' for this input.  (e.g. linux)
      • kmtype - The type of kernel module. For Linux-based servers, use 'LUKS' for this input.  (e.g. LUKS)
    • Example: id=vol-08f09465,mountpoint=/mnt/test,filesystem=ext3,access=readWrite,os=linux,kmtype=LUKS,keysize=128
    • If you have multiple devices, you can use semicolons to join multiple strings.  Example: id=vol-xxxxxx,mountpoint=/mnt/xxx,os=linux,filesystem=ext3,kmtype=LUKS,keysize=128;id=vol-yyyyyy,mountpoint=/mnt/yyy,os=linux,filesystem=ext2,kmtype=LUKS,keysize=128
  • PACKAGE_NAME- File name of the appropriate agent installer that's attached to the script.  Click on the RightScript's Attachments tab to view the attached file.  Enter this value as text.  (e.g. scagent-1.2.0.1061-1.ub9_amd64.deb)
  • PROV_PASSWORD - Enter your Provisioning Password, which can be obtained from the SecureCloud management UI.  You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.
  • SC_ACCOUNT_ID - Enter your SecureCloud Account ID, which can be obtained from the SecureCloud management UI.   You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.

 

RightScript:  Trend Micro SecureCloud Agent Installer - Windows

Description:  Installs Trend Micro SecureCloud and provisions encrypted storage on a Windows platform.

Required Inputs and Default Settings:

  • AWS_ACCESS_KEY_ID - Amazon credential. See FAQ 13
  • AWS_SECRET_ACCESS_KEY - Amazon credential. See FAQ 13.
  • DEVICES_CONF - Configuration of the device to be provisioned. This value must be entered as text in the following format:
    • {id=< volume ID>}{mountpoint=[a-z]}{filesystem=[ntfs,fat32]}{access=[readWrite, readOnly]}{os=windows}{kmtype=None}{keysize=[126,192,256]}
      • id - Enter the ID of the Amazon EBS volume that will be attached to the server.  (e.g. vol-a123456)
      • mountpoint - Enter the drive letter where the encrypted volume will be mounted on the server. (e.g. J)
      • filesystem - The file system format for the encrypted volume. (e.g. ntfs or fat32)
      • access - The access type on the mounted, encrypted volume. (e.g. readWrite or readOnly)
      • os - The type of operating system.  For Windows-based servers, use 'windows' for this input.  (e.g. windows)
      • kmtype - The type of kernel module. For Windows-based servers, use 'None' for this input.  (e.g. LUKS)
    • Example: id=vol-08f09465,mountpoint=J,filesystem=ntfs,access=readWrite,os=windows,kmtype=None,keysize=128
  • PACKAGE_NAME - File name of the appropriate agent installer that's attached to the script.  Click on the RightScript's Attachments tab to view the attached file.  Enter this value as text and be sure to include the file extension.  (e.g. SecureCloudAgentSilentSetup_Release_Win32_en_1.2.0_1061.exe)
  • PROV_PASSWORD - Enter your Provisioning Password, which can be obtained from the SecureCloud management UI.  You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.
  • SC_ACCOUNT_ID - Enter your SecureCloud Account ID, which can be obtained from the SecureCloud management UI.   You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.
You must to post a comment.
Last Modified
23:44, 16 May 2013

Page Rating

Was this article helpful?

Tags

This page has no custom tags set.

Announcements

UCP Migration

Glossary | 用語용어 Site Map | Site Help Community Corporate Site Get Support Dashboard Login
Doc Feedback Product Feedback Resources MultiCloud Marketplace Forums

Dashboard Status


© 2006-2014 RightScale, Inc. All rights reserved.
RightScale is a registered trademark of RightScale, Inc. All other products and services may be trademarks or servicemarks of their respective owners.