Creating a Central Management virtual machine using the private products listing in marketplace

This topic describes how to create a Central Management System virtual machine using the Private Products listing in Marketplace.

Prerequisite: Ensure the Azure Requirements are met.

To create a Central Management System virtual machine:

In the Azure portal, navigate to the Marketplace.
In the left pane, under My Marketplace, click Private products.
Type Trellix in the search field and select the Trellix Central Management System listing.
Click Create.
Select the tabs at the top of the Create a virtual machine page that opens, and configure settings as described in the following sections.
Note
Settings that are not required for a Trellix virtual appliance are not covered in these sections. You can accept the default values for the other settings, or specify values that are appropriate for your environment.

Basics

The Basics page contains the following sections.

Project details

Make sure the correct Subscription and Resource group are selected.

Instance details

Enter a Virtual machine name.
Make sure the correct Region is selected.
Make sure the correct Image is selected.
Select the virtual machine Size based on your requirements. The specifications are displayed when you make your selection.
Note
For a list of the sizes supported for asvirtual machine, see Central Management System Model and Sizes.

Administrator account

You can use this section to configure an SSH key to authenticate the initial admin user in the appliance CLI.

The Username will be ignored during the first CLI login attempt, because the first login user is always "admin." You can create additional admin user accounts later from the appliance Web UI or CLI.
If you enter a Password, it cannot be used when you initially log in to the virtual appliance from the Azure console or an SSH session. You must log in to the Azure console using "admin" as the username and "admin" as the password, and then immediately change the password. You can then log in to the virtual appliance CLI in an SSH session, and run the configuration jump-start wizard. You can optionally change the password again in the wizard. You can then configure SSH public keys from the virtual appliance Web UI or CLI.
If you enter an SSH public key, you will be unable to log into the Azure console, but you can use the key to log in to the virtual appliance CLI in an SSH session. After you run the configuration jump-start wizard and set a password, you can use that password to log in to the Azure console.

Important

You cannot change the SSH key from the Azure portal after the virtual machine is created. You must use the virtual appliance Web UI or CLI to change it.

Inbound port rules

Select Allow selected ports for Public inbound ports.
Select HTTPS (443) and SSH (22) for Select inbound ports.

Networking

Make sure the correct Virtual network and Subnet are selected.
Accept the default Public IP, unless you plan to deploy the virtual machine in a VPN or behind a NAT device.
Click Advanced for NIC network security group.
Select the correct security group for Configure network security group.
Make sure Accelerated networking is Off.

Review + create

Click Create after the validation passes and you confirm the information on the page.