IBM Support

IEM OS Deployment/Bare Metal Air-Gapped Network

Technote (FAQ)


Question

Setup OS Deployment and Bare Metal Imaging site in an Air-Gapped Network

Answer


To setup the OS Deployment and Bare Metal Imaging site in an air-gapped environment, you need to manually download and cache specific files on the machines where the IBM BigFix Console is installed as well as on the IBM BigFix Server. To set up your environment, you must perform the following steps:

1. Obtain OS Deployment and Bare Metal Imaging Site content

You must use the Make Mirror Archive utility, to download the OS Deployment and Bare Metal Imaging external site content from an internet connected machine. This utility requires the external site masthead file and cannot be run on the BigFix Server.
For details and for a complete set of configuration steps, see the following section of the BigFix OSD documentation: Setting up OS Deployment in an air-gapped network .

2. Pre-cache OS Deployment and Bare Metal Imaging Site downloads

To pre-cache the OS Deployment site files, you must obtain the OS Deployment and Bare Metal Imaging site masthead file, and create a cache folder for the pre-cached SHA1 files on an internet connected machine. Download and run the BES Download Cacher utility available at the following link: TEM Download Cacher . The utility copies files in the cache folder you specified. You must then transfer these files to the SHA1 download cache on the BigFix Server. The default location of the download cache is:
...\Program files (x86)\BigFix Enterprise\BES Server\wwwrootbes\bfmirror\downloads\sha1.
For details see: Setting up OS Deployment in an air-gapped network .

3. Pre-cache additional files on the IBM BigFix Server:

Important: The OS deployment and Bare Metal Imaging site requires the Upload Maintenance Service (UMS) on the BigFix Server. This service must be installed and running to manage and maintain files correctly. You can install this service from the BES Support site, using the "Install BES Server Plugin Service" Fixlet.

You must pre-cache additional files on the server. The following files must be downloaded to the SHA1 download cache on the BigFix Server.

The default location of the download cache is: ...\Program files (x86)\BigFix Enterprise\BES Server\wwwrootbes\bfmirror\downloads\sha1

If you want to install the latest Bare Metal OS Deployment Server version from the network using the corresponding button in the Bare Metal Server Manager dashboard, you must also pre-cache the following:
http://software.bigfix.com/download/osd/bmserver.zip

The downloaded files must be renamed to their SHA1 before you copy them to the SHA1 folder.

If you are installing the BigFix Client during a Linux System provisioning, or performing a Windows Bare Metal deployment, you must pre-cache the selected Client installation packages (see the TEMImageCatalog.xml file).

Note: You can use the relevance debugger (QnA debugger) to find the sha1 of each of these files by using the following relevance expression:
(name of it, sha1 of it) of files of folder "c:\AirgapOSD"
where c:\AirgapOSD is the folder to which you downloaded the files on the internet connected machine.

4. Download additional files to the machines where the BigFix Console is installed:

The following files must be downloaded and placed within %USERPROFILE%\OSDeployment on the console machines. This step also applies if your console machines are behind a proxy.

Document information

More support for: IBM BigFix family

Software version: Version Independent

Operating system(s): Windows

Reference #: 1616689

Modified date: 09 September 2016