describes the system requirements and installation of ACS 5.4 in a
VMware virtual machine.
system requirements for the VMware virtual machine (VM) must be
similar to the CSACS-1121 appliance hardware configuration.
lists the minimum system requirements to install ACS 5.4 on a
VMware virtual machine.
Minimum System Requirements
2 CPUs (dual CPU,
Xeon, Core2 Duo or 2 single CPUs)
4 GB RAM
A minimum of 60
GB is required.
is up to 750 GB.
ACS partitions the available disk space automatically during the
is recommended that you allocate the hard disk size to be greater
than 500 GB for the secondary instance, which acts as a log
1 Gb dedicated
- VMware ESXi
- VMware ESXi
5.1 is supported after ACS 5.4 patch 3
Note If you want to
upgrade the ACS installed on virtual machine to ACS 5.4, the
virtual machine disk size should be greater than or equal to 500
The disk space
management mechanism in ACS 5.4 manages the system automatically
and configures the available file volumes on the file system per
file type, such as local store, logs, configuration, cache, and so
on. The actual file size limits are calculated at the time of
installation, based on the hard coded relative disk quota
configuration (percent based), using the disk size as an input.
However, ACS database logs have a fixed size. ACS 5.4 gets
installed with a variable hard disk size between 60 GB and 750 GB,
based on the disk size that was chosen while creating the VMware
instance. If you want to change the size of the ACS disk after the
installation, complete the following procedure:
- Back up your
- Reimage the
ACS application or install a fresh application.
- Restore the
backed up data.
the backed up data, a warning message is displayed when the backup
size or ACS view database size exceeds the corresponding disk
quota. However, the restore operation will not be interrupted. The
restore operation is failed only when the hard limit of /opt
partition size is reached.
In ACS 5.4, the
log collector server can be installed on a 60 GB disk space. An ACS
view log collector node usually requires more space to maintain a
database of logs and reports. Therefore, the recommended disk size
for the secondary instance, which acts as a log collector server,
is 500 GB.
When you allocate
60 GB for the log collector server, the view database gets only 5.6
GB as total disk space. As a result of this, some of the
functionalities may not work properly. The functionalities that may
be affected are backup, full backup, incremental backup, logging
recovery, purge, database compress operation, and so on.
the VMware instances, make sure that the resources allocated for
VMware instances with respect to CPU cores, RAM, and disk, are not
more than the actual physical resources of the VMware host server.
For example, if the VMware host server has a total number of CPU
cores as 10, then the sum of the allocated CPU cores for all the
VMware instances that are created on that server should not exceed
Note In large ACS
distributed deployment environments that are hosted on the VM, it
is recommended that all VM hosting servers have CPUs from the same
Note It is recommended
that if hyperthreading is enabled on any one of the VMware hosts,
it should be enabled on all the VMware hosts that host the ACS VM
as part of the same deployment.
Note ACS 5.4 does not get
installed over multiple disks (by defining one Logical volume
Manager [LVM] disk).
Install VMware Server
VMware server with the default options and proper IP address.
vSphere client is used to access the VMware server from a remote
To install the
VMware Infrastructure Client:
1 Go to the following link.
address of VMware server
have valid Cisco.com login credentials to access this link.
2 Click Download to download the VMware
vSphere client software.
3 Run the installer.
4 Log into the VMware server.
10-1 displays the login window of the VMware server.
client window is displayed. (Figure
vSphere Client Window
5 Choose Help > About VMware vSphere to
verify the VMware ESX and vSphere client versions.
10-3 displays the VMware vSphere versions.
About VMware vSphere
Configuring the VM for ESXi 5.0 and ESXi 5.1
The host uses
virtualization software such as ESX server to run the virtual
machine. The host provides the CPU and memory resources to the
virtual machine to access storage and to connect to the network.
describes the VM configuration process using the VMware
To configure the
VM for ESXi 5.0 and ESXi 5.1, complete the following steps:
1 Log into the ESX server.
2 In the VMware Infrastructure Client, in
the left pane, right-click your host container and choose New
Virtual Machine Wizard appears.
3 In the Configuration Type dialog box,
choose Typical as the VM configuration, as shown in
Figure 10-4, and click Next.
Virtual Machine Configuration Dialog Box
The Name and
Location dialog box appears. (Figure
4 Enter the name you will use to reference
the VM, and click Next.
Name and Location Dialog Box
Tip Tip: Use the hostname
you will use for your VM host.
Storage dialog box appears. (Figure
5 Choose a data store that has a minimum of
500 GB free space available, and click Next.
Data Storage Dialog Box
Operating System dialog box appears. (Figure
6 Click the Linux radio button, and from the
Version drop-down list, choose Other Linux (32-bit).
Guest Operating System Dialog Box
dialog box appears. (Figure
7 Select the number of NICs that you want to
use in the network window, and click Next.
Network Dialog Box
The Create a
Disk dialog box appears. (Figure
8 Select the disk size as 500 GB in the
virtual disk capacity window, and click Next.
Note You can configure
the minimum virtual disk space requirement to be 60 GB. There may
be a critical issue if you use 60 GB as virtual disk space. You can
view the workaround in the troubleshooting section.
Create a Disk Dialog Box
The Ready to
Complete dialog box appears.
Note Do not choose VMware
thin provisioning as a storage type because ACS supports only thick
provisioning on all supported VMware servers.
If ACS is
installed in a VMware with thin provisioning storage type, you are
1. Take a backup of the ACS
2. Reimage the VMware with the thick
provisioning storage type.
3. Restore the backup in the newly
converted thick provisioned storage VMware.
Note Do not
over-provision hardware resources such as RAM, CPU, and disks for
your virtual machines.
9 Verify the configuration details—such as
Name, Guest OS, Virtual CPU, Memory, and Virtual Disk Size—of the
newly created VM.
Ready to Complete Dialog Box
10 Check the Edit the virtual machine
settings before completion check box, and click Next.
Configuration dialog box appears. (Figure
11 Enter 4096 MB, and click Next.
Memory Configuration Dialog Box
The Number of
Virtual Processors dialog box appears. (Figure
12 From the Number of virtual processors
drop-down list, choose 2 (if 2 is available), or you can choose any
number and click Finish.
Number of Virtual Processors Dialog Box
13 The virtual machine is installed and will
be listed in the VMware drawer, as follows.
Preparing the VM for ACS Server Installation
the VM, you are ready to install the ACS server. To install the ACS
server from your ACS Install Disk, you need to configure the VM to
boot from the ACS Install Disk.
The VM must be
configured with a virtual DVD drive, in order to boot from the ACS
This can be
performed using different methods, depending on your environment.
Configuring the VM Using the DVD Drive to configure the VM
using the DVD drive of your VMware ESX server host.
Configuring the VM Using the DVD Drive
describes how to configure the VM to boot from the ACS Install Disk
using the DVD drive of the VMware ESX server host.
To configure the
VM using the DVD drive:
1 In the VMware Infrastructure Client,
highlight the newly created VM, and choose Edit Virtual Machine Settings.
Machine Properties window appears.
Figure 10-14 displays the properties of a VM that was created
with the name ACS 5.4.
Virtual Machine Properties Dialog Box
2 In the Virtual Machine Properties dialog
box, choose CD/DVD Drive 1.
Drive 1 properties dialog box appears.
3 Choose the Host Device option, and from the drop-down list,
choose your DVD host device.
4 Choose the Connect at Power On option, and click OK to save your settings.
You can now
use the DVD drive of the VMware ESX server to install the ACS
When you complete
the configuration, click the Console tab,
right-click the VM from the left pane, and choose GUEST >
Send Ctrl+Alt+Del to restart the VM.
Installing the ACS Server
on ESXi 5.0 and ESXi 5.1
describes the installation process for the ACS 5.4 server on VMware
ESXi 5.0 and ESXi 5.1.
To install the
ACS 5.4 server, complete the following steps:
1 Log into the VMware Infrastructure
2 Insert the ACS 5.4 Install Disk into the
VMware ESX host CD/DVD drive, and power on the VM.
Power on the Virtual Machine
3 Store the ACS 5.4 recovery ISO image in
the VMware vSphere client, to access the VMware Server.
4 Click the CD icon on the tool bar and
choose Connect CD/DVD 1 > Connect to ISO image on local
Connecting to ISO image on Local Disk
5 Browse and locate the ACS 5.4 ISO
Move to the
console tab. You will lose your cursor control as soon as you enter
the console tab.
6 Press Ctrl + Alt to get cursor control.
7 Press Enter.
restarts with the ACS 5.4 recovery ISO image loaded. Now, the user
is prompted with the install option for ACS 5.4.
When the ACS
5.4 Install Disk boots, the console displays:
Welcome to Cisco Secure ACS 5.4 Recovery
To boot from the hard disk press <Enter>
Available boot options:
 Cisco Secure ACS 5.4 Installation (Monitor/Keyboard)
 Cisco Secure ACS 5.4 Installation (Serial Console)
 Reset Administrator Password (Keyboard/Monitor)
 Reset Administrator Password (Serial Console)
<Enter> Boot from hard disk
Please enter boot option and press <Enter>.
You can select
either the monitor and keyboard port, or the console port to
perform the initial setup.
8 At the system prompt, type 1 to select a monitor and keyboard port, or type
2 to select a console port, and press
the installation of the ACS server on the VM.
Note Allow 20 minutes for
the installation process to complete.
installation process finishes, the VM reboots automatically.
When the VM
reboots, the console displays:
Type 'setup' to configure your appliance
9 At the system prompt, type setup, and press Enter.
Wizard appears and guides you through the initial configuration.
requests for the parameters, as shown below.
localhost login: setup
Enter hostname: acs54-server-1
Enter IP address: 10.77.243.177
Enter IP default netmask: 255.255.255.128
Enter IP default gateway: 10.77.243.129
Enter default DNS domain: mycompany.com
Enter primary nameserver: 10.77.242.86
Add secondary nameserver? Y/N : n
NTP server [time.nist.gov]: 10.77.242.86
NTP server? Y/N : n
Enter username [admin]: admin
Enter password again:
Bringing up network interface...
Pinging the gateway...
Pinging the primary nameserver...
Virtual machine detected, configuring VMware tools...
File descriptor 4 (/opt/system/etc/debugd-fifo) leaked on lvm.static invocation
Parent PID 3036: /bin/bash
Do not use `Ctrl-C' from this point on...
debugd: : config:network: main.c [setup]: Setup is complete.
information on the setup process, see
Running the Setup Program.
Both the VMware
server and the operating system on which the VMware virtual machine
is running must be hardened according to the guidelines that are
specified by the VMware and operating system vendors.
See the VMware
support website for more details. Some helpful links are:
ACS 5.4 supports
VMware Tools 8.3.2. The benefits of using VMware Tools in ACS 5.4
- Improved NIC
- Improved Small
Computer System Interface (SCSI) I/O performance
- Synchronization of guest operating system time
with the host time
A new line of
text appears, which says
Virtual machine detected, configuring VMware Tools
when you run the initial Setup Wizard. You can also do the
following to check if the VMware Tools are installed:
Click the Summary
tab of the virtual machine in the vSphere client. You can see that
the value “OK” appears for VMware Tools. This confirms that the
VMware Tools is installed.
You can use the
CLI command show inventory. When you run this CLI, a list appears
that shows the NIC driver information. If the VMware Tools is
installed, then the driver information is listed as
VMware Virtual Ethernet Driver.