Documentation update

   

To provide a better user experience, we have now created a separate documentation space for BMC Helix Automation Console (previously called BMC Helix Vulnerability Management).
Users of BMC Helix Automation Console can find the latest documentation at BMC Helix Automation Console. .

Installing silently

In a silent installation, you run the installation program from a command line. When you execute a silent installation, you specify an input file with all  TrueSight Automation Console installation settings. 

Warning

TrueSight Automation Console is delivered to customers bundled as a set of Docker Containers. The Docker Containers and the software installed on them should not be taken out of Automation Console or used separately. Installing additional third-party software or updating existing software packages in the Docker Containers is not permitted, unless explicitly authorized by BMC Software.

Build numbers

If you have multiple images of the Stack Manager tool available on the host, BMC recommends that you provide the exact version and build number depending on the version that you want to install. 

VersionBuild number
21.02.011603
21.021415

Installing the Stack Manager tool

  1. Open a terminal and SSH into the host where you have set up the local registry, and run the following command to install the Stack Manager tool. 

    docker run -it --rm --network=host 127.0.0.1:5000/bmcsoftware/truesight-stack-manager

    Here, 127.0.0.1:5000 is the host:port of the local registry that contains the Automation Console images.  
    You are prompted to specify a location to install the product.  

    Note

    If you have any images of Stack Manager in your environment, ensure that you use the exact version and build number for installing the latest Stack Manager tool.

    Example
    docker run -it --rm --network=host <hostname>:<port>/bmcsoftware/truesight-stack-manager:21.02.00.1415
  2. Enter a username and password. 

    Note

    You can use a root or a non-root user. If using a non-root user, ensure that the user has read and write permissions to the installation directory and is a part of the docker user group on the host.

  3. Enter a location or continue with the default /opt/bmc location. The Stack Manager tool is installed at the specified location. 

    Tip

    To see the commands typically used during installation and other help, run this command:

    <stackmanager-install-dir>/stackmanager --help

    You can now continue with installing the database and the application.

Installing silently

You use the Stack Manager tool to create an inputs file, then install the database, and then the application. 

  1. Open a terminal and SSH into the host where you have installed the Stack Manager tool and run the following command to create the input file. 

    ./stackmanager  inputs-file create

    You are asked for the inputs required for the installation. 

  2. To create an inputs file, provide the following information required for installing Automation Console. 

     Input file for the Automation Console
    FieldDescriptionDefault value
    TrueSight application directory

    Specifies the directory where the Automation Console application will be installed

    /opt/bmc/truesight
    Docker network subnet prefix

    Docker network subnet prefix is composed of one to two octets separated by a dot. Each octet is a number between 0 and 255 (excluding 0 and 255). Leading zero in an octet is not allowed. The chosen docker network subnet prefix must not conflict with docker registry host IP. Examples: 192.168, 10.

    -
    Application port number

    Specifies the port number for the Automation Console application server

    9443
    Hostname or IP address of the PostgreSQL database serverSpecifies the fully qualified domain name (FQDN) or IP address of the host where the default PostgreSQL database will be installed. For production environment, use an external PostgreSQL database.No default value. User must specify a value.
    PostgreSQL database port numberSpecifies the port number for the PostgreSQL database5432
    PostgreSQL Admin usernameSpecifies the database administrator usernamepostgres
    PostgreSQL Admin passwordSpecifies the password that matches the username-
    PostgreSQL usernameSpecifies the username for a non-administrative usertsac_database_user
    PostgreSQL passwordSpecifies the password that matches the username-
    PostgreSQL tablespace directorySpecifies the directory of the system tablespace on the PostgreSQL server/var/lib/postgresql/data/tsac_tablespace

    Automation Console port number

    Specifies the port number to be used for the Automation Console

    10443

    TrueSight Server Automation host name

    Specifies the hostname where Server Automation is installed, in an FQDN format

    -

    Server Automation port number

    Specifies the port number where Server Automation is installed.

    -

    Server Automation protocol

    Specifies the protocol used by Server Automation

    https

    Server Automation admin role

    Specifies the administrative role name for Server Automation

    BLAdmins

    Service Account user name of TrueSight Server Automation user

    Specifies the username with permissions to access Server Automation

    BLAdmin

    Password for the TrueSight Server Automation Service Account user

    Specifies the password for the username-

    Role name for the TrueSight Server Automation Service Account user

    Specifies the Server Automation role to which the user belongs

    BLAdmins

    Login authentication type for the TrueSight Server Automation Service Account user

    Specifies the authentication method. Valid values: SRP, Domain Authentication

    Currently, only Secure Remote Password (SRP) and Domain Authentication methods are supported.

    Valid values: SRP, Domain

    SRP

    Do you want to configure support for RSSO authentication (y/n)

    If using BMC Remedy Single Sign-On for TrueSight Server Automation, specify y.

    If not, specify n.

    -

    Enter the RSSO Server URL

    If specified y in the previous field, enter the BMC Remedy Single Sign-On URL in a fully-qualified domain name format.-

    TrueSight Network Automation host name

    Fully-qualified domain name or IP address of TrueSight Network Automation


    TrueSight Network Automation port number

    Specifies the port number where TrueSight Network Automation is installed.

    443

    TrueSight Network Automation protocol

    Specifies the protocol used by TrueSight Network Automation.

    http, https (default)

    TrueSight Network Automation realm name

    Specifies the TrueSight Network Automation realm name.

    Default

    TrueSight Network Automation Service Account user name

    Specifies the TrueSight Network Automation role to which the user belongs.

    sysadmin

    TrueSight Network Automation password for the Service Account user 

    Specifies the password that matches the username.
  3. To verify whether the inputs file is created successfully, run the following command: 

    ./stackmanager  inputs-file show

    Enter the location where the file is created. Default location is /opt/bmc/truesight.
    The following figure shows a sample inputs_file.yml file.

     Sample inputs_file.yml for the database
    products:
      docker_registry:
        hostname: localhost:5000
      nw:
        addressPool: '194'
      postgres:
        port: '5432'
        admin:
          name: postgres
          password: <password>
     Sample inputs.yml file for installing TSSA and TSNA connectors

    Applicable for 21.02.01 only.

    products:
      connector:
        connector_type: '3'
      docker_registry:
        hostname: localhost:5000
      nw:
        addressPool: '192'
      postgres:
        port: '5432'
        admin:
          name: postgres
          password: <password>
      rsso:
        support_rsso: n
        rsso_url: None
      tsna-connector:
        workerID: tsna-connector
        fqUserSuffix: defaulttenant.tsna
        host: tsnaserver.domain.com
        port: '443'
        protocol: https
        adminRole: Default
        serviceUser: sysadmin
        serviceUserPassword: <password>
        serviceUserRole: Default
      tssa-connector:
        workerID: tssa-connector
        fqUserSuffix: defaulttenant.tssa
        host: tssaappserver.domain.com
        port: '9843'
        protocol: https
        adminRole: BLAdmins
        serviceUser: BLAdmin
        serviceUserPassword: <password>
        serviceUserRole: BLAdmins
        serviceUserAuthType: SRP
      tssp:
        config:
          posport: '10443'
        db:
          name: tsac_database
          hostname: tsacdb.domain.com
          port: '5432'
          admin:
            name: postgres
            password: <password>
      tsvm:
        db:
          name: tsac_database
          hostname: tsacdb.domain.com
          port: '5432'
          admin:
            name: postgres
            password: <password>
          user:
            name: tsac_database_user
            password: <password>
          tablespaces:
            tablespace: tsac_tablespace
            directory: /var/lib/postgresql/data/tsac_tablespace
            data: tsac_database_user_dat
            index: tsac_database_user_idx
        es:
          hostname: localhost
          port: '9200'
          username: admin
          password: ici9LP5NVwmsYciCzH7bXu4+PrkbZKZ8RC6ktNJi5HTeRXrxH0w85Q==
    
    
    
     Sample inputs.yml file for the application
    products:
      docker_registry:
        hostname: localhost:5000
      infra:
        config:
          wmport: '9443'
      nw:
        addressPool: '193'
      tssa-connector:
        wmport: '9443'
        workerID: tssa-connector
        fqUserSuffix: defaulttenant.tssa
        host: 172.12.123.123
        port: '9843'
        protocol: https
        adminRole: BLAdmins
        serviceUser: BLAdmin
        serviceUserPassword: <password>
        serviceUserRole: BLAdmins
        serviceUserAuthType: SRP
      tssp:
        db:
          name: tsac_database
          hostname: host.com
          port: '5432'
          admin:
            name: postgres
            password: <password>
        es:
          hostname: localhost
          port: '9200'
          username: admin
          password: <password>
      tsvm:
        db:
          name: tsac_database
          hostname: host.com
          port: '5432'
          admin:
            name: postgres
            password: <password>
          user:
            name: tsac_database_user
            password: <password>
          tablespaces:
            tablespace: tsac_tablespace
            directory: /var/lib/postgresql/data/tsac_tablespace
            data: tsac_database_user_dat
            index: tsac_database_user_idx
        es:
          hostname: localhost
          port: '9200'
          username: admin
          password: <password>
    
     Sample inputs.yml file with Remedy SSO inputs
    products:
      docker_registry:
        hostname: localhost:5000
      infra:
        config:
          wmport: '9443'
      nw:
        addressPool: '182'
      postgres:
        port: '5432'
        admin:
          name: postgres
          password: <password>
      tssa-connector:
        wmport: '9443'
        workerID: tssa-connector
        fqUserSuffix: defaulttenant.tssa
        host: <hostname.com>
        port: '9843'
        protocol: https
        adminRole: BLAdmins
        serviceUser: BLAdmin
        serviceUserPassword: <password>
        serviceUserRole: BLAdmins
        serviceUserAuthType: SRP
      tssp:
        config:
          wmport: '9443'
          posport: '10443'
        db:
          name: tsac_database
          hostname: <hostname.com>
          port: '5432'
          admin:
            name: postgres
            password: <password>
        es:
          hostname: localhost
          port: '9200'
          username: admin
          password: <password>
        rsso:
          support_rsso: y
          rsso_url: https://<FQDN_hostname>:<portnumber>/rsso
      tsvm:
        config:
          wmport: '9443'
        db:
          name: tsac_database
          hostname: <hostname.com>
          port: '5432'
          admin:
            name: postgres
            password: <password>
          user:
            name: tsac_database_user
            password: <password>
          tablespaces:
            tablespace: tsac_tablespace
            directory: /var/lib/postgresql/data/tsac_tablespace
            data: tsac_database_user_dat
            index: tsac_database_user_idx
        es:
          hostname: localhost
          port: '9200'
          username: admin
          password: <password>
     Sample inputs.yml file for installing the TSNA connector

    Applicable for 21.02.01 only

    products:
      connector:
        connector_type: '2'
      docker_registry:
        hostname: localhost:5000
      nw:
        addressPool: '193'
      postgres:
        port: '5432'
        admin:
          name: postgres
          password: <password>
      rsso:
        support_rsso: n
        rsso_url: None
      tsna-connector:
        workerID: tsna-connector
        fqUserSuffix: defaulttenant.tsna
        host: tsnaserver.domain.com
        port: '443'
        protocol: https
        adminRole: Default
        serviceUser: sysadmin
        serviceUserPassword: <password>
        serviceUserRole: Default
      tssa-connector:
        workerID: tssa-connector
        fqUserSuffix: None
        host: None
        port: '9843'
        protocol: https
        adminRole: None
        serviceUser: None
        serviceUserPassword: None
        serviceUserRole: None
        serviceUserAuthType: SRP
      tssp:
        config:
          posport: '10443'
        db:
          name: tsac_database
          hostname: tsacdb.domain.com
          port: '5432'
          admin:
            name: postgres
            password: <password>
      tsvm:
        db:
          name: tsac_database
          hostname: tsacdb.domain.com
          port: '5432'
          admin:
            name: postgres
            password: <password>
          user:
            name: tsac_database_user
            password: <password>
          tablespaces:
            tablespace: tsac_tablespace
            directory: /var/lib/postgresql/data/tsac_tablespace
            data: tsac_database_user_dat
            index: tsac_database_user_idx
        es:
          hostname: localhost
          port: '9200'
          username: admin
          password: <password>
    
    
    
  4. To install the database silently, run the following command: 

    ./stackmanager install --silent --deployment database

    Stack Manager uses the inputs provided in the inputs file and installs the database. 

  5. To verify whether the database is installed successfully, run the following command: 

    ./stackmanager status --deployment database
  6. To install the application silently, run the following command:

    ./stackmanager install --silent --deployment tsac+

    Stack Manager uses the inputs provided in the inputs file, verifies whether the database is installed, and installs the application.

  7. To verify whether the application is installed successfully, run the following command: 

    ./stackmanager status --deployment application

    The services, container names, versions, and their status is displayed. 

    Example for 21.02.01
    Name        Container Name               Version    Status
    ----        --------------               -------    ------
    PostgreSQL  database-infra-ext-postgres  12-alpine  running
    
    Components status for application:
    
    Name                                            Container Name                               Version      Status
    ----                                            --------------                               -------      ------
    Catalog service                     truesight-app-catalog-service                          21.02.01.903   running
    Connector Service                   truesight-connectors-service                           21.02.01.1380  running
    Data Refresh Worker                 truesight-app-drw                                      21.02.01.215   running
    Discovery OnPrem Connector          truesight-common-discovery-onprem-connector            21.02.01.137   running
    Exceptions-service                  truesight-common-exceptions-service                    21.02.01.472   running
    ITIL Service                        truesight-common-itil                                  21.02.01.378   running
    Identity Management Service         truesight-identitymanagement-service                   21.02.00.1005  running
    Login service                       truesight-common-login                                 21.02.01.865   running
    Nginx                               truesight-app-nginx                                    21.02.01.941   running
    Organization Service                truesight-organization-service                         21.02.01.289   running
    Patch Manager portal                truesight-app-patch-manager-portal                     21.02.01.9672  running
    Patch Manager service               truesight-app-patch-manager-core                       21.02.01.1380  running
    Platform Portal                     truesight-platform-portal                              21.02.01.1349  running
    Policy service                      truesight-app-policy-service                           21.02.01.1427  running
    Redis                               truesight-infra-ext-redis                              21.02.01.436   running
    Redis-common                        truesight-infra-ext-redis-common                       21.02.01.436   running
    Resource service                    truesight-common-resource-service                      21.02.01.675   running
    TSNA Connector						truesight-common-tsna-connector						   21.02.01.385   running	
    TSO Connector                       truesight-common-tso-connector                         21.02.01.289   running
    TSSA Connector                      truesight-common-tssa-connector                        21.02.01.564   running
    Tenant Onboarding Utility           truesight-common-tenant-onboarding-utility             21.02.01.183   running
    Users Service                       truesight-users-service                                21.02.01.353   running
    configurations-service              truesight-configurations-service                       21.02.01.67    running
    rsso-portal                         truesight-rsso-portal                                  21.02.01.143   running
    workmanager-service                 truesight-workmanager-service                          21.02.01.439   running

    Example for 21.02
    Name        Container Name               Version    Status
    ----        --------------               -------    ------
    PostgreSQL  database-infra-ext-postgres  12-alpine  running
    
    Components status for application:
    
    Name                                            Container Name                               Version      Status
    ----                                            --------------                               -------      ------
    Catalog service                     truesight-app-catalog-service                          21.02.00.872   running
    Connector Service                   truesight-connectors-service                           21.02.00.1345  running
    Data Refresh Worker                 truesight-app-drw                                      21.02.00.188   running
    Discovery OnPrem Connector          truesight-common-discovery-onprem-connector            21.02.00.113   running
    Exceptions-service                  truesight-common-exceptions-service                    21.02.00.445   running
    ITIL Service                        truesight-common-itil                                  21.02.00.326   running
    Identity Management Service         truesight-identitymanagement-service                   21.02.00.1005  running
    Login service                       truesight-common-login                                 21.02.00.817   running
    Nginx                               truesight-app-nginx                                    21.02.00.927   running
    Organization Service                truesight-organization-service                         21.02.00.265   running
    Patch Manager portal                truesight-app-patch-manager-portal                     21.02.00.9547  running
    Patch Manager service               truesight-app-patch-manager-core                       21.02.00.1319  running
    Platform Portal                     truesight-platform-portal                              21.02.00.1315  running
    Policy service                      truesight-app-policy-service                           21.02.00.1360  running
    Redis                               truesight-infra-ext-redis                              21.02.00.435   running
    Redis-common                        truesight-infra-ext-redis-common                       21.02.00.435   running
    Resource service                    truesight-common-resource-service                      21.02.00.648   running
    TSO Connector                       truesight-common-tso-connector                         21.02.00.233   running
    TSSA Connector                      truesight-common-tssa-connector                        21.02.00.551   running
    Tenant Onboarding Utility           truesight-common-tenant-onboarding-utility             21.02.00.155   running
    Users Service                       truesight-users-service                                21.02.00.336   running
    configurations-service              truesight-configurations-service                       21.02.00.49    running
    rsso-portal                         truesight-rsso-portal                                  21.02.00.132   running
    workmanager-service                 truesight-workmanager-service                          21.02.00.421   running

Where to go from here

Now that you have installed the product successfully, administrators can start setting up the application for your patch and vulnerability management needs. You can start using the features based on your role and requirements. 

Was this page helpful? Yes No Submitting... Thank you

Comments