Manual Setup By Installers

Where to download installers?

Please see details at Artifacts location

Prerequisite

Before running the setup, please check [Central Hub] Recommended System Configuration to install all required dependencies.

Setup order requirement

Please follow installation steps in order to complete the system setup properly:

Order no.

Service

Notes

1

Redis, RabbitMQ, PostgreSQL and File Server (NAS)

  • Could be setup in parallel in any order among them.

  • Make sure they are all fully functional and accessible before proceeding to the next setup order #2.

2

First MetaDefender Core instance in the shared DB mode.

  • A valid license must be provisioned and activated.

  • In case of MetaDefender Core upgrade scenario, make sure all other MetaDefender Core instances' service are stopped while upgrading this first MetaDefender Core instance.

  • Make sure they are all fully functional and accessible.

  • Heath check constraints to be reviewed and confirmed. In the Central Hub model, MetaDefender Core will not consume any processing tasks from the central queue while staying unheathy via the heath check.

3

The Hub instance, and any other MetaDefender Core instances in the shared DB mode.

  • Could be setup in parallel in any order among them.

  • Make sure it is fully functional and accessible.

1. Redis caching server

Windows

  1. Check [Central Hub] Recommended System Configuration to install all required dependencies e.g. Microsoft Visual C++ Redistributable (direct download link: https://aka.ms/vs/17/release/vc_redist.x64.exe).

  2. Download Redis installer for Windows, and run it as administrator privilege.

  3. Open Redis configuration file <path to Redis installation folder>\redis.windows-service.conf in the edit mode.

  4. Comment out the bind setting:

... # The following line should be commented # bind 127.0.0.1 ...
  1. Set protected mode option to no:

... # The following line should be uncommented protected-mode no ...
  1. Add firewall exception rule to allow both inbound and outbound connections:

  • TCP

  • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

  1. Restart service.

Linux

  1. Check [Central Hub] Recommended System Configuration to install all required dependencies.

  2. Download Redis installer for Windows on the OPSWAT portal, and run:

Debian / Ubuntu:

apt -y install <Redis installer>.deb

Red Hat / CentOS:

yum -y install <Redis installer>.rpm
  1. Open Redis configuration file <path to Redis installation folder>/redis.conf in the edit mode.

  2. Comment out the bind setting:

... # The following line should be commented # bind 127.0.0.1 ...
  1. Set protected mode option to no:

... # The following line should be uncommented protected-mode no ...
  1. Add firewall exception rule to allow both inbound and outbound connections:

  • TCP

  • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

  1. Restart service.

2. RabbitMQ messaging broker

Windows

  1. Install Erlang dependency: Download the latest installer at https://www.erlang.org/downloads, then follow the instructions to install Erlang.

  2. Install RabbitMQ:

  1. Add RabbitMQ user and set user permission:

  • Open command line (CLI) as administration, and change working directory to <RabbitMQ installation folder>/rabbitmq_server-<version>/sbin

  • Run these commands one by another one:

rabbitmqctl.bat add_user <username> <password> rabbitmqctl.bat set_permissions -p / <username> "." "." "." rabbitmqctl.bat set_user_tags <username> administrator
  1. Add firewall exception rule to allow both inbound and outbound connections:

  • TCP

  • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

  1. Enable RabbitMQ Management UI (optional):

  • Open command line (CLI) as administration, and change working directory to <RabbitMQ installation folder>/rabbitmq_server-<version>/sbin

  • Run following command:

rabbitmq-plugins.bat enable rabbitmq_management
  • Add firewall exception rule for port 15672 to access RabbitMQ Management UI.

Linux

  1. Install Erlang dependency: Download the latest Erlang package on Linux at https://www.erlang-solutions.com/downloads/, then follow the instructions to install Erlang and its dependencies.

  2. Install RabbitMQ:

sudo rpm -Uvh --nodeps rabbitmq-server-<rabbitmq version>.el8.noarch.rpm
sudo dpkg -i rabbitmq-server_<rabbitmq version>_all.deb
  1. Add RabbitMQ user and set user permission:

  • Run these commands one by another one as root privilege:

rabbitmqctl add_user <username> <password> rabbitmqctl set_permissions -p / <username> "." "." "." rabbitmqctl set_user_tags <username> administrator
  1. Add firewall exception rule to allow both inbound and outbound connections:

    • TCP

    • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

  2. Enable RabbitMQ Management UI (optional):

  • Run following command:

rabbitmq-plugins enable rabbitmq_management
  • Add firewall exception rule for port 15672 to access RabbitMQ Management UI.

3. PostgreSQL DB server

Windows

  1. Download and install PostgreSQL server version 12.x for Windows x64 at https://www.enterprisedb.com/downloads/postgres-postgresql-downloads

  2. Follow steps to open database connections: Open Connection On PostgreSQL Server

  3. Add firewall exception rule to allow both inbound and outbound connections:

    • TCP

    • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

  4. Restart PostgreSQL server.

Linux

  1. Download and install PostgreSQL server version 12.x for Windows x64 at https://www.enterprisedb.com/downloads/postgres-postgresql-downloads

  2. Follow steps to open database connections: Open Connection On PostgreSQL Server

  3. Add firewall exception rule to allow both inbound and outbound connections:

    • TCP

    • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

  4. Restart PostgreSQL server.

4. File storage server (NAS)

Windows

  1. Check [Central Hub] Recommended System Configuration to install all required dependencies e.g. Microsoft Visual C++ Redistributable (direct download link: https://aka.ms/vs/17/release/vc_redist.x64.exe).

  2. Use OpenSSL or equivalent tool (e.g. ssh-keygen) to generate RSA private key and certificate in X509 format at a location where NAS service can access.

  3. Complete NAS configuration - MetaDefender Core NAS (File Storage Server)

  4. Download and run NAS installer as administrator privilege.

  5. Add firewall exception rule to allow both inbound and outbound connections:

    • TCP

    • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

Linux

  1. Check [Central Hub] Recommended System Configuration to install all required dependencies.

  2. Use OpenSSL or equivalent tool (e.g. ssh-keygen) to generate RSA private key and certificate in X509 format at a location where NAS service can access.

  3. Complete NAS configuration - MetaDefender Core NAS (File Storage Server)

  4. Download and run NAS installer as root privilege:

  • Debian / Ubuntu:

sudo apt install <nas_installation_package>.deb
  • Red Hat / CentOS:

sudo yum install <nas_installation_package>.rpm
  1. Add firewall exception rule to allow both inbound and outbound connections:

    • TCP

    • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

4. MetaDefender Core

  1. Complete MetaDefender Core ignition file for Central Hub deployment setup prepration - MetaDefender Core

  2. Install MetaDefender Core - Installation

  3. Configure health check policy - Health Check API Configuration

  4. Add firewall exception rule to allow both inbound and outbound connections:

    • TCP

    • Ports: 5432 (PostgreSQL), 5672 (RabbitMQ), 6379 (Redis), 8888 (File Storage NAS)

5. Hub

Windows

  1. Check [Central Hub] Recommended System Configuration to install all required dependencies e.g. Microsoft Visual C++ Redistributable (direct download link: https://aka.ms/vs/17/release/vc_redist.x64.exe).

  2. Complete Hub configuration file for Central Hub deployment setup prepration - MetaDefender Core Hub (Hub)

  3. Download and run the Hub installer as administration privilege.

Linux

  1. Check [Central Hub] Recommended System Configuration to install all required dependencies.

  2. Complete Hub configuration file for Central Hub deployment setup prepration - MetaDefender Core Hub (Hub)

  3. Download and run the Hub installer as root privilege:

  • Debian / Ubuntu:

sudo apt install ./<hub_installation_package>.deb
  • Red Hat / CentOS:

sudo yum install <hub_installation_package>.rpm