App Control includes server and agent components. You install the server software on standard Windows-Server-based computers, and it can be run on a virtual machine.
The server installation procedure handles all operating system configuration except for IIS, for which you must follow the configuration in the Operating Environment Requirements for this release.
You can install agent software on server, desktop, and laptop computers, and on POS (point-of-sale) systems; it may be installed on Windows, Mac, and Linux systems that meet the requirements in the Operating Environment Requirements document for this release and the relevant listings in Carbon Black sensors & Carbon Black App Control agents on the User Exchange. The agent provides security rules to endpoint computers and enables connected systems to interact with the App Control Server for ongoing management.
- Installing App Control agents on containers is not supported.
- Agent installers are created through a two-step process:
- Agent installer and rule packages are available on the Carbon Black User Exchange and must be uploaded to the App Control Server.
- Once the installer package is on your server, separate downloadable agent installers are created dynamically for each security policy configured on your server.
Instructions for uploading agent packages and installing agents appear both in the “Managing Computers” chapter of the VMware Carbon Black App Control User Guide guide (online help and PDF versions).
An App Control Server installation follows these summary steps:
Step 1: Determine your appropriate hardware and database configuration.
The App Control Server and its database may be set up on a single system. Depending upon your own preferences and the number of clients you will manage with App Control, you may require a dedicated system for a database server and/or for a Syslog server. You also may install the server and agents in a virtualized environment. See the Operating Environment Requirements document to determine the right choices for your environment.
Step 2: Procure the required hardware for the App Control Server.
Step 3: Install Windows Server, IIS, and .NET on the App Control Server hardware.
Use a clean, US English Windows Server installation with all the latest patches from Microsoft. Then install the Internet Information Services (IIS) version supplied with your Windows Server, using the configuration described in the Operating Environment Requirements for this release.
Also, make sure that Microsoft .NET Framework 4.8 is installed with the default settings and the latest patches.
Step 4 - option 1: Install your own licensed copy of SQL Server (US English) on the same system before you install App Control.
Follow the SQL Server configuration instructions in the Operating Environment Requirements and VMware Carbon Black App Control SQL Server Configuration documents. In particular, note whether the number of endpoints you plan to manage requires the use of option 2. The SQL Server must be a US English version.
- or -
Step 4 - option 2: To use a remote database server, procure the hardware, operating system, and your own licensed copy of SQL Server, then prepare the system.
Connect the SQL Server hardware to the App Control Server hardware by a minimum latency, gigabit backbone. The SQL Server must be a US English version.
Step 5: Install and configure the App Control Server software.
The installation procedure is described in this document. Configuration is described in VMware Carbon Black App Control User Guide (in console help and PDF versions).
Step 6: Upload the App Control rule and agent installer packages to the server and install agents on endpoints.
See VMware Carbon Black App Control User Guide (in console help and PDF versions) for these procedures.
