ESM 11.6.x Hardware Guide

Appliance setup

Inspect packaging and appliance

 
1. Inspect the packaging for damage.
 
2. After unpacking the product, inspect the appliance for damage.

Install rail set and chassis (Generation 6)

 
1. Install the inner rails on the chassis.    
        
   1. Locate the inner rails and attach them to the sides of the chassis.
        
   2. Slide the inner rails forward until they click into place.
        
   3. Verify the inner rails are securely attached.
      
    
 
2. Install the outer rails in the rack.    
        
   1. Align the outer rails with the rack posts.
        
   2. Secure the outer rails to the rack posts using the provided screws.
        
   3. Verify the outer rails are level and secure.
      
    
 
3. Install the chassis in the rack.    
        
   1. With two people, lift the chassis and align the inner rails with the outer rails.
        
   2. Slide the chassis into the rack until it is fully seated.
        
   3. Secure the chassis to the rack using the captive screws on the front panel.
      
    
 
4. Connect the cables as described in the network ports section.

Install rail set and chassis (Generation 5.5/5)

 
1. Install the rails.    
        
   1. Attach the front brackets to the front rack posts.
        
   2. Attach the rear brackets to the rear rack posts.
        
   3. Slide the intermediate rail member into the outer rail.
        
   4. Lock the ball retainer on each intermediate rail member.
        
   5. Verify all rail components are securely attached.
      
    
 
2. Install the chassis.    
        
   1. With two people, lift the chassis.
        
   2. Align the chassis with the inner rails.
        
   3. Slide the chassis into the rack.
        
   4. Verify the chassis is fully seated.
        
   5. Secure the chassis to the rack.
        
   6. Verify all connections are secure.
      
    

Remove the chassis

 
1. Power off the appliance and disconnect all cables.
 
2. Remove the captive screws securing the chassis to the rack front panel.
 
3. With two people, slide the chassis out of the rack.
 
4. Place the chassis on a stable flat surface.

Generation 6 Hardware - Network ports

Trellix ESM

 
1. Power supply
 
2. VGA video
 
3. USB port
 
4. COM port

Port connections

HA connections

 
1. Connect the HA cable from the HA port on the primary appliance.
 
2. Connect the other end of the HA cable to the HA port on the secondary appliance.
 
3. Verify the HA link is established in the management interface.

Generation 5.5 Hardware - Network ports

Trellix ESM

 
• Management 1
 
• Management 2
 
• VGA video
 
• Data (not used)
 
• MGMT

1U chassis

1U chassis HA connections

 
1. Connect the HA cable to the HA port on the primary ESM.
 
2. Connect the other end of the HA cable to the HA port on the secondary ESM.
 
3. Verify the HA link LED is active.

2U chassis

2U chassis HA connections

 
1. Connect HA cable from primary ESM HA port.
 
2. Connect HA cable to secondary ESM HA port.
 
3. Connect management cable from primary ESM Management 1 port.
 
4. Connect management cable to secondary ESM Management 1 port.
 
5. Connect data cables to the appropriate data ports.
 
6. Connect the IPMI cable if out-of-band management is required.
 
7. Connect power cables to both power supplies.
 
8. Verify all connections before powering on.

Generation 5 Hardware - Network ports

Trellix ESM

 
• Management 1
 
• Management 2
 
• VGA video
 
• Data (not used)
 
• IPMI

1U chassis

1U chassis HA connections

 
1. Connect the HA cable to the HA port on the primary ESM.
 
2. Connect the other end of the HA cable to the HA port on the secondary ESM.
 
3. Connect management cables.
 
4. Connect data cables.
 
5. Connect IPMI cables if required.
 
6. Verify all connections before powering on.

2U chassis

2U chassis HA connections

 
1. Connect the HA cable to the HA port on the primary ESM.
 
2. Connect the other end of the HA cable to the HA port on the secondary ESM.
 
3. Connect management cables.
 
4. Connect data cables.
 
5. Connect IPMI cables if required.
 
6. Verify all connections before powering on.

Connect power and start appliances

 
1. Connect the power cords to the power supplies on the rear of the appliance.
 
2. Connect the power cords to the power source.
 
3. Press the power button to start the appliance.

Generation 6 LEDs

Power supply status LED

External RJ45 NIC Port LED

System Status LED

Drive Activity and Status LED

Power button

BMC Boot or Reset Status LED indicators

Generation 5 LEDs

Power supply status LED

External RJ45 NIC Port LED

System Status LED

Drive Activity and Status LED

Power or Sleep button

BMC Boot or Reset Status LED indicators

Install Trellix Direct Attached Storage (DAS) appliance

 
1. Power off the Trellix ESM appliance.
 
2. Mount the DAS appliance in the rack below the ESM appliance.
 
3. Connect the Mini SAS HD cable from port 1 of the ESM appliance to port 1 of the DAS appliance.
 
4. Connect the power cable to the DAS appliance.
 
5. Connect the power cable to the power source.
 
6. Power on the DAS appliance.
 
7. Power on the ESM appliance.
 
8. Log in to the ESM management interface.
 
9. Verify that the DAS appliance is recognized by the ESM.

Install qLogic 2460 or 2562 Storage Area Network (SAN) adapters

 
• Verify the system is powered off before installing the adapter.
 
• Ensure you have the correct adapter model for your system.

 
1. Power off the ESM appliance.
 
2. Install the qLogic adapter into the appropriate PCIe slot.
 
3. Secure the adapter with the retaining screw.
 
4. Connect the fiber cables to the adapter ports.
 
5. Power on the appliance and verify the adapter is recognized.

Reset a Trellix SIEM appliance

 
• Hardware failure requiring replacement
 
• Forgotten administrator password
 
• Corrupted operating system
 
• Returning a device to factory defaults

 
1. Insert the recovery USB drive into the appliance USB port.    
        
   1. Power on the appliance.
        
   2. Press F11 at the boot screen to enter the boot menu.
        
   3. Select the USB drive as the boot device.
        
   4. At the prompt, type -usb and press Enter.
        
   5. Follow the on-screen instructions to complete the reset.
        
   6. Remove the USB drive when prompted.
      
    
 
2. After the reset completes, the appliance restarts automatically.    
        
   1. Wait for the appliance to fully boot.
        
   2. Log in using the default credentials.
        
   3. Reconfigure the appliance as needed.
        
   4. Restore data from backup if available.
        
   5. Verify the appliance is operating normally.
        
   6. Contact Trellix Support to confirm the reset was successful.
      
    

Replace a Trellix SIEM appliance

 
1. Back up all data and configuration from the existing appliance.
 
2. Power off the existing appliance and disconnect all cables.
 
3. Remove the existing appliance from the rack.    
        
   Note:

   For some types of rails, you might need to remove a stud from the side of the chassis.

      
    
 
4. Install the new appliance in the rack.
 
5. Connect all cables to the new appliance.
 
6. Power on the new appliance and restore the configuration from backup.

Replace Trellix Direct Attached Storage (DAS) appliance

 
1. Back up all data from the DAS appliance.
 
2. Power off the ESM appliance.
 
3. Power off the DAS appliance.
 
4. Disconnect all cables from the DAS appliance.
 
5. Remove the DAS appliance from the rack.
 
6. Install the new DAS appliance in the rack.
 
7. Connect all cables to the new DAS appliance.
 
8. Power on the DAS appliance.
 
9. Power on the ESM appliance and verify the new DAS is recognized.

Configure the IPMI interface on the HA Receiver

 
1. Log in to the HA Receiver management interface.
 
2. Navigate to the IPMI configuration section.
 
3. Select either DHCP or Manual configuration.
 
4. Configure the IPMI interface settings.                                                        

   Setting	DHCP	Manual
   IP Address	Assigned automatically	Enter static IP address
   Subnet Mask	Assigned automatically	Enter subnet mask

    

Change Password on the HA receiver

 
1. Connect to the HA Receiver via SSH or console.
 
2. Run the following command to list users:    

   ERCHA2-ERC-2650 ~ # ipmitool user list 3

    
 
3. Change the password for the appropriate user.                                                                                

   ID	Name	Callin	Link Auth	IPMI Msg	Channel Priv Limit
   1	anonymous	false	false	false	NO ACCESS
   2	root	false	true	true	ADMINISTRATOR
   3	admin	false	true	true	ADMINISTRATOR
   4	(empty)	false	false	false	NO ACCESS
   5	(empty)	false	false	false	NO ACCESS

    

Configure appliance network connections

Configure the network interface for Trellix SIEM appliance

 
1. Log in to the appliance console.
 
2. Access the terminal configuration menu.
 
3. Select Network Configuration.
 
4. Enter the IP address, subnet mask, and default gateway.
 
5. Enter the DNS server addresses.
 
6. Save the configuration.
 
7. Verify network connectivity.

Update the BIOS on Trellix SIEM Gen5.5 2U appliances

 
1. Download the BIOS update file from the Trellix Support portal.
 
2. Copy the BIOS update file to the appliance.
 
3. Apply the BIOS update.    
        
   1. Log in to the appliance as root.
        
   2. Navigate to the directory containing the BIOS update files.
        
   3. Verify the files are present at the root level.
        
   4. Run the BIOS update script.
        
   5. Wait for the update to complete.
        
   6. Do not interrupt the update process.
        
   7. Note any messages displayed during the update.
      
    
 
4. Restart the appliance to apply the BIOS update.    
        
   1. Initiate a system restart.
        
   2. Enter the BIOS setup during POST if required.
        
   3. Verify the new BIOS version is shown.
        
   4. Configure BIOS settings as needed.
        
   5. Save and exit the BIOS setup.
        
   6. Wait for the system to boot completely.
        
   7. Verify the appliance is operating normally after the update.
      
    

Appliance certifications and specifications

SuperMicro-based platforms

DAS

Intel-based platforms