Trend Micro SecureCloud

Prerequisites

Before you can use the RightScripts to install the SecureCloud Agent on a server or provision encrypted data storage, you must sign up for the SecureCloud service and create a new device (Amazon EBS volume) to encrypt.  It's also assumed that you already have a basic understanding of RightScale concepts and have experience launching servers with ServerTemplates.

• You can sign up for a 60 day free trial here: http://forms.trendmicro.com/index.ph...&productID=125   
• Create a new device to encrypt.  See the SecureCloud Runtime Agent Readme for detailed instructions.  You will need to create the EBS volume in the cloud/region where the SecureCloud server will be launched (or is currently running) since you can only attach a volume to a server located in the same cloud/region.

Access the Components

You can either import the "Trend Micro SecureCloud Agent Installers - Win & Linux" Toolbox ServerTemplate from the MultiCloud Marketplace, which will import and give you access to both RightScripts, or you can import one of the RightScripts individually.  If you are logged into the RightScale Dashboard, go to Design -> MultiCloud Marketplace.  Use the keyword search and filters to find the components.  "Trend Micro" will be the publisher of these RightScale components.

Run the SecureCloud RightScript

Once you've imported the SecureCloud components you'll be able to add the appropriate Linux/Windows RightScript to one of your private ServerTemplates.  If you already have a running server instance, you can also use the 'Any Script' option to run the appropriate SecureCloud script on-demand.  See details below for proper script execution and configuration.

Boot Scripts

RightScript:  Trend Micro SecureCloud Agent Installer - Linux

Description:  Installs Trend Micro SecureCloud and provisions encrypted storage on Linux platform.

Required Inputs and Default Settings:

• AWS_ACCESS_KEY_ID - Amazon credential. See FAQ 13.  
• AWS_SECRET_ACCESS_KEY - Amazon credential. See FAQ 13.
• DEVICES_CONF - Configuration of the device to be provisioned. This value must be entered as text in the following format:
  • {id=< volume ID>}{mountpoint=[<linux mount point>]}{filesystem=[ext3, xfs]}{access=[readWrite, readOnly]}{os=linux}{kmtype=LUKS}{keysize=[126,192,256]}
    • id - Enter the ID of the Amazon EBS volume that will be attached to the server.  (e.g. vol-a123456)
    • mountpoint - Enter the device name where the encrypted volume will be mounted on the server. (e.g. /mnt/encrypted_mount)
    • filesystem - The file system format for the encrypted volume. (e.g. ext3 or xfs)
    • access - The access type on the mounted, encrypted volume. (e.g. readWrite or readOnly)
    • os - The type of operating system.  For Linux-based servers, use 'linux' for this input.  (e.g. linux)
    • kmtype - The type of kernel module. For Linux-based servers, use 'LUKS' for this input.  (e.g. LUKS)
  • Example: id=vol-08f09465,mountpoint=/mnt/test,filesystem=ext3,access=readWrite,os=linux,kmtype=LUKS,keysize=128
  • If you have multiple devices, you can use semicolons to join multiple strings.  Example: id=vol-xxxxxx,mountpoint=/mnt/xxx,os=linux,filesystem=ext3,kmtype=LUKS,keysize=128;id=vol-yyyyyy,mountpoint=/mnt/yyy,os=linux,filesystem=ext2,kmtype=LUKS,keysize=128
• PACKAGE_NAME- File name of the appropriate agent installer that's attached to the script.  Click on the RightScript's Attachments tab to view the attached file.  Enter this value as text.  (e.g. scagent-1.2.0.1061-1.ub9_amd64.deb)
• PROV_PASSWORD - Enter your Provisioning Password, which can be obtained from the SecureCloud management UI.  You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.
• SC_ACCOUNT_ID - Enter your SecureCloud Account ID, which can be obtained from the SecureCloud management UI.   You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.

RightScript:  Trend Micro SecureCloud Agent Installer - Windows

Description:  Installs Trend Micro SecureCloud and provisions encrypted storage on a Windows platform.

Required Inputs and Default Settings:

• AWS_ACCESS_KEY_ID - Amazon credential. See FAQ 13. 
• AWS_SECRET_ACCESS_KEY - Amazon credential. See FAQ 13.
• DEVICES_CONF - Configuration of the device to be provisioned. This value must be entered as text in the following format:
  • {id=< volume ID>}{mountpoint=[a-z]}{filesystem=[ntfs,fat32]}{access=[readWrite, readOnly]}{os=windows}{kmtype=None}{keysize=[126,192,256]}
    • id - Enter the ID of the Amazon EBS volume that will be attached to the server.  (e.g. vol-a123456)
    • mountpoint - Enter the drive letter where the encrypted volume will be mounted on the server. (e.g. J)
    • filesystem - The file system format for the encrypted volume. (e.g. ntfs or fat32)
    • access - The access type on the mounted, encrypted volume. (e.g. readWrite or readOnly)
    • os - The type of operating system.  For Windows-based servers, use 'windows' for this input.  (e.g. windows)
    • kmtype - The type of kernel module. For Windows-based servers, use 'None' for this input.  (e.g. LUKS)
  • Example: id=vol-08f09465,mountpoint=J,filesystem=ntfs,access=readWrite,os=windows,kmtype=None,keysize=128
• PACKAGE_NAME - File name of the appropriate agent installer that's attached to the script.  Click on the RightScript's Attachments tab to view the attached file.  Enter this value as text and be sure to include the file extension.  (e.g. SecureCloudAgentSilentSetup_Release_Win32_en_1.2.0_1061.exe)
• PROV_PASSWORD - Enter your Provisioning Password, which can be obtained from the SecureCloud management UI.  You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.
• SC_ACCOUNT_ID - Enter your SecureCloud Account ID, which can be obtained from the SecureCloud management UI.   You can either enter these values as text or use Credentials if you wish to hide the value.  See Create a New Credential.