This topic explains how to deploy optional BOSH Add-ons.

Overview on Deploying BOSH Add-ons

BOSH Add-ons are optional platform extensions that you deploy with BOSH rather than installing them as VMware Tanzu Operations Manager (Ops Manager) tiles.

VMware recommends installing BOSH Add-ons immediately after deploying BOSH and Ops Manager, before you use Ops Manager to add tiles to the platform.

BOSH Add-ons from VMware include IPsec, ClamAV, and File Integrity Monitoring, which enhance VMware Tanzu Application Service for VMs (TAS for VMs) platform security and security logging.

Open-source BOSH Add-ons include a syslog forwarder, a custom SSH login banner, and a tool for adding SSH users.

For an overview of the BOSH deployment process, see [Deploying Software with BOSH](deploy-bosh-om.html#bosh in Deploying BOSH and Ops Manager).

Contents

  • IPsec: Secures data transmissions inside TAS for VMs following IPSec standards.

  • Anti-Virus: Logs TAS for VMs internal antivirus protection activity, to demonstrate to auditors that it complies with industry standards and government regulations.

  • File Integrity Monitoring (FIM): Logs TAS for VMs internal file integrity monitoring activity, to demonstrate to auditors that it complies with industry standards and government regulations.

check-circle-line exclamation-circle-line close-line
Scroll to top icon