IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IGI on AWS??

    Posted Tue January 22, 2019 01:05 AM
    Hi All,
    Anyone setup IGI on AWS? Would appreciate any insight, guidelines for setting up IGI on AWS EC2?
    I am few doubts like how the DB part if configured, can the AWS DB service used for this?

    Thanks in advance.

    ------------------------------
    Sanjay Sutar
    ------------------------------


  • 2.  RE: IGI on AWS??

    Posted Fri February 01, 2019 01:38 PM

    Not sure if you have seen this already, but we definitely have had some clients running IGI in AWS before.  Here are some instructions from the Knowledge Center:

    https://www.ibm.com/support/knowledgecenter/en/SSGHJR_5.2.4/com.ibm.igi.doc/installing/cpt/cpt_amazon_ec2.html





    ------------------------------
    Jason Keenaghan
    Director of Offering Management
    IBM
    ------------------------------



  • 3.  RE: IGI on AWS??

    Posted Mon February 04, 2019 04:27 AM
    Thanks for your reply.
    Yes, I am referring the link. The only initial trouble that i faced was to locate the EC2 CLI. As when i was searching for it, i was directed to AWS CLI which is different than AWS EC2 CLI. Finally i found it at below link;

    http://s3.amazonaws.com/ec2-downloads/ec2-api-tools.zip

    Now i am trying to figure out the kernel ID required while registering the snapshot as per IBM knowledge center (step#5 while creating AMI).



    ------------------------------
    Sanjay Sutar
    ------------------------------



  • 4.  RE: IGI on AWS??

    Posted Wed February 27, 2019 09:11 PM
    IGI 5.2.5 is now available, and has made things simpler in that IGI no longer needs an LDAP server in order for you to use any of IGI's brokerage adapters.

    ------------------------------
    Carl Hovi
    IBM
    ------------------------------



  • 5.  RE: IGI on AWS??

    Posted Thu February 28, 2019 12:57 AM
    Thanks Carl for your response.
    Does this mean LDAP now shipped in the IGI 5.2.5 appliance and we still can configure external LDAP if required for PROD environment?
    Sorry for late update from my side, i managed to create AMI and IGI instance on AWS and also another EC2 instance hosting DB and LDAP. I am able to complete the configuration through LMI console but once i reboot the IGI appliance i cannot reach the DB/LDAP server from IGI. (tools ping doesnt work for public IP of DB/LDAP server). And as mentioned i could reach the DB/LDAP server and could complete the configuration successfully but seems lost connectivity once IGI appliance is rebooted. 
    Following are settings on IGI appliance:
    - 3 network interface (each assigned elastic/static public IP)
    - M1 interface configured automatically
    - First application interface configured with second network interface
    - DB and LDAP configured successfully hosted on other EC2 instance
    - No DNS server configured
    - DB/LDAP looks good and i can connect to them from my machine (using their public IP)

    Any pointer for this issue is appreciated. Thank you in advance.


    ------------------------------
    Sanjay Sutar
    ------------------------------