App Control includes server and agent components. You install the server software on standard Windows-Server-based computers, and it can be run on a virtual machine.
The server installation procedure handles all operating system configuration except for IIS. For IIS configuration, follow the information in the App Control Web Server Platform: Support Server topic in the respective Server Operating Environment Requirements for the release.
You can install agent software on server, desktop, and laptop computers, and on POS (point-of-sale) systems. It may be installed on Windows, Mac, and Linux systems that meet the requirements in the Server Operating Environment Requirements document for this release and the relevant Agent Operating Environment Requirements document on VMware Docs. The agent provides security rules to endpoint computers and enables connected systems to interact with the App Control Server for ongoing management.
- Installing App Control agents on containers is not supported.
- Agent installers are created through a two-step process:
- Agent installer and rule packages are available on the Release Information and Downloads page and must be uploaded to the App Control Server.
- Once the installer package is on your server, separate downloadable agent installers are created dynamically for each security policy configured on your server.
Instructions for uploading agent packages and installing agents are in the VMware Carbon Black App Control Agent Installation Guide.
An App Control Server installation follows these summary steps:
Step 1: Determine your appropriate hardware and database configuration.
The App Control Server and its database may be set up on a single system. Depending upon your own preferences and the number of clients you will manage with App Control, you may require a dedicated system for a database server and/or for a Syslog server. You also may install the server and agents in a virtualized environment. See the Server Operating Environment Requirements document to determine the right choices for your environment.
Step 2: Procure the required hardware for the App Control Server.
Step 3: Install Windows Server, IIS, and .NET on the App Control Server hardware.
Use a clean, US English Windows Server installation with all the latest patches from Microsoft. Then install the Internet Information Services (IIS) version supplied with your Windows Server, using the configuration described in the Server Operating Environment Requirements for this release.
Also, make sure that Microsoft .NET Framework 4.8 is installed with the default settings and the latest patches.
Step 4 - option 1: Install your own licensed copy of SQL Server (US English) on the same system before you install App Control.
Follow the SQL Server configuration instructions in the Server Operating Environment Requirements and VMware Carbon Black App Control SQL Server Configuration documents. In particular, note whether the number of endpoints you plan to manage requires the use of option 2. The SQL Server must be a US English version.
- or -
Step 4 - option 2: To use a remote database server, procure the hardware, operating system, and your own licensed copy of SQL Server, then prepare the system.
Connect the SQL Server hardware to the App Control Server hardware by a minimum latency, gigabit backbone. The SQL Server must be a US English version.
Step 5: Install and configure the App Control Server software.
The installation procedure is described in this document. Configuration is described in VMware Carbon Black App Control User Guide .
Step 6: Upload the App Control rule and agent installer packages to the server and install agents on endpoints.
See VMware Carbon Black App Control Agent Installation Guide and VMware Carbon Black App Control Rules Installer Guide for these procedures.
