Copy iVM Profiles onto Multiple Appliances

Products

Content Analysis Software - CA

Issue/Introduction

Rather than making the same manual customizations to IntelliVM (IVM) profiles on multiple Content Analysis appliances, you can create a "golden image" profile on one appliance and then duplicate it onto other Content Analysis appliances in the network. This method saves time and ensures that all appliances have the same profiles.

Content Analysis offers two ways to duplicate IVM profiles onto multiple appliances. Both methods require that you first prepare an export package of the profile you want to clone.

Option 1: Import the export package and Windows base image directly. See "Import Directly from Another Content Analysis Appliance" on the next page.
Option 2: Use an intermediate server to host the export package and Windows image. See "Download from a Web Server" on page 111.

This operation requires that you enter CLI commands on each Content Analysis appliance (source and target systems). It uses remote APIs to pull a profile export package and Windows base image off of a remote system and place it on the current (target) system.

CAS#ma-actions profiles imports import remote_host 203.0.113.17 vme_id 05E8VHWCJXMN6BZT29J9SV3M1R api_key ******

By importing a profile, you confirm that you have purchased the appropriate Microsoft license (and quantity) for the applicable Windows Operating System. Do you agree? [yes,no] yes

400 Client Error: Bad Request for url: http://localhost:9080/rapi/system/vm/profiles/pull

Resolution

Import Directly from Another Content Analysis Appliance

The diagram below illustrates the process of preparing an export package on a source Content Analysis appliance and then importing it on the target appliance.

On the source Content Analysis appliance, customize the IVM profile until you have the golden master you want to duplicate on other appliances. See "Add and Customize IVM Profiles" on page 97.
Access the command-line interface of the source Content Analysis appliance.
Prepare an export package of the profile.

Example: ma-actions profiles exports export profile_ids 1

Record the export ID associated with the package. Use the ma-actions profiles exports status command to find the ID.
Generate an API key and save the value in a text file; you will reference this key value when importing the base image and IVM profile.

Example: ma-actions api-key create user apiuser role write-only

Look up the ID number of the Windows base image you want to import on the target appliance; you will reference this ID when importing the image.
Access the CLI of a target Content Analysis appliance.
Import the Windows base image from the source Content Analysis appliance.

Example: ma-actions bases imports import remote_host 203.0.113.17 vmb_id 1 api_key ******

Import the export package.

Example: ma-actions profiles imports import remote_host 203.0.113.17 vme_id

05E8VHWCJXMN6BZT29J9SV3M1R api_key ******

Repeat Steps 7–9 for each target appliance.

Download from a Web Server

The diagram below illustrates an alternative way to import a Windows base image and export package: by putting the them on a web server and then pulling them off the server and onto the target Content Analysis appliance. Use this method if the direct method described above does not work properly.

On the source Content Analysis appliance, customize the IVM profile until you have the golden master you want to duplicate on other appliances. See "Add and Customize IVM Profiles" on page 97.
Access the command-line interface of the source Content Analysis appliance.
Prepare an export package of the profile.

Example: ma-actions profiles exports export profile_ids 1

Record the export ID associated with the package. Use the ma-actions profiles exports status command to find the ID.
Generate an API key and save the value in a text file.

Example: ma-actions api-key create user apiuser role write-only

Download the export package to an external system via RAPI. Use the curl command from an external system:

curl -k -H "X-API-TOKEN:<API-key>" https://<CA-

IP>:8082/rapi/system/vm/profiles/export/<export-id>/bin > <filename> For example, enter the following command from an external server:

curl -k -H "X-API-TOKEN:7a49af86645e4e3a9f24608636135f64" https://203.0.113.17:8082/rapi/system/vm/profiles/export/05E8VHWCJXMN6BZT29J9SV3M1R/bin > windows-7-64-bit.export.qcow2.bundle

In the above example, 7a49af86645e4e3a9f24608636135f64 is the API key you saved in Step 5, 203.0.113.17 is the IP address of the Content Analysis appliance containing the export package,

05E8VHWCJXMN6BZT29J9SV3M1R is the export ID you recorded in Step 4, and windows-7-64bit.export.qcow2.bundle is the export filename.

Download the Windows base image to an external system via RAPI. Use the curl command from an external system:

curl -k -OJ -H "X-API-TOKEN:<API-key>" https://<CA-IP>:8082/rapi/system/vm/bases/<vmb_ id>/bin

For example, enter the following command from an external server:

curl -k -OJ -H "X-API-TOKEN:7a49af86645e4e3a9f24608636135f64" https://203.0.113.17:8082/rapi/system/vm/bases/1/bin

In the above example, 7a49af86645e4e3a9f24608636135f64 is the API key you saved in Step 5, 203.0.113.17 is the IP address of the Content Analysis appliance containing the base image, and the base image ID is 1.

Place the export package and base image on a web server the target Content Analysis appliances can access. (This step may not be necessary if the external system where you downloaded the package in Step 6 is a web server.)
Access the CLI of a target Content Analysis appliance.
Import the base image from the web server. For example:

ma-actions bases imports download url https://myserver.com/bases/filename

Alternatively, you can use the Content Analysis web UI to import a base image. See "Add Windows Base Image" on page 95.

Import the profile export package from the web server. For example:

ma-actions profiles imports download url https://myserver.com/profiles/windows-7-64bit.export.qcow2.bundle

Repeat Steps 9–11 for each target appliance.