Remotely Install the Original System Image on a RSA Hardware Appliance

For disaster recovery, perform this procedure to install an RSA Authentication Manager 8.2 SP1 or later system image on an RSA SecurID Appliance that is based upon the RSA PowerEdge Server.

For a list of the Authentication Manager versions that you can restore, see Installable System Images for Hardware Appliance Models .

You can only perform this procedure on the hardware appliance. This operation is not supported on the virtual appliance.

This operation restores the original settings on the hardware appliance. All data associated with the RSA Authentication Manager instance is permanently deleted, including log files, backup files, and configured settings, such as network settings.

Before you begin

  • Make sure that you have deployed an iDRAC. For instructions, see "Configuring Remote Access to the RSA Authentication Manager Hardware Appliance" on RSA Link at https://community.rsa.com/docs/DOC-67160.

    Download the required ISO file, such as rsa-am-hardware-appliance-8.6.0.0.0.iso, from https://my.rsa.com, and save the ISO file to a location that is accessible to the iDRAC.

  • (Optional) If the Operations Console is available for the primary or replica instance that is configured on the hardware appliance, you can download a text file that contains the current network settings:

    1. On the primary or replica instance, log on to the Operations Console.

    2. Click Administration > Network > Appliance Network Settings.

    3. Under Download Network Settings, click Download network settings.

    4. Save the FQDN_backupOfNetworkSettings.txt file in an external, secure location.

      You can refer to this file when you configure the network settings on the restored appliance.

  • Transfer any files that you want to save, such as log files or backup files, from the hardware appliance to an external, secure location.

    To log on to the appliance operating system, you must use the rsaadmin operating system password, and you must enable SSH. For instructions, see Enable Secure Shell on the Appliance.

Procedure

  1. Log on to iDRAC with your username and password.

  2. Select the Console/Media tab, and click Launch Virtual Console

  3. Select the ISO file that contains the original hardware appliance system image.

    On an RSA SecurID Appliance 130 that is based upon the RSA PowerEdge R230, an RSA SecurID Appliance 250 that is based upon the RSA PowerEdge R630, or an RSA SecurID Appliance 350 that is based upon the RSA PowerEdge R640, do the following:

    1. Click Connect Virtual Media.
    2. After the menu updates, click Virtual Media > Map CD/DVD.
    3. Select the ISO file, and click Map Device.
    4. Click Virtual Media, and click the name of the ISO image.
    5. Press CTRL + ALT + DELETE to reboot the hardware appliance.

    On an RSA SecurID Appliance 230 that is based upon the RSA PowerEdge R240, do the following:

    1. Click Virtual Media > Connect Virtual Media.
    2. After the menu updates, click Virtual Media > Map CD/DVD.
    3. Select the ISO file, and click Map Device.
    4. Press CTRL + ALT + DELETE to reboot the hardware appliance.

    By default, the BIOS reboots the hardware appliance from the ISO file. If the settings were changed, press F11: BIOS Boot Manager, select One-shot BIOS Boot menu, and Virtual Optical Drive. The hardware appliance reboots automatically.

  4. In the installer boot menu, use the down-arrow key to select Install RSA Authentication Manager, and press ENTER.

    RSA Authentication Manager installs.

  5. Detach the ISO image from the console, and power on the appliance, if necessary.

  6. When prompted, configure the following network settings for the appliance:

    • Fully Qualified Hostname
    • IP Address
    • Subnet Mask
    • Default Gateway
    • (Optional) Primary DNS Server
    • (Optional) Secondary DNS Server
  7. When prompted to confirm the network settings, verify the settings are correct. To accept the settings, type y.

  8. The Quick Setup URL and the Quick Setup Access Code display. Record the following required information:
    • The Quick Setup URL includes the IP address that you entered in step 6:
    • https://<IP Address>/

      Quick Setup uses an IP address. The administrative consoles that are available after Quick Setup completes use a fully qualified domain name (FQDN).

    • The Quick Setup Access Code is required to initiate Quick Setup.
  9. If you have not done so already, connect the appliance to the network.

After you finish

Perform Quick Setup to configure the appliance as a primary or replica instance. For instructions, see the RSA Authentication Manager Setup and Configuration Guide.