Deploy on GCP

Prerequisites

• Access to a GCP project.

• The Trellix Wise for Private Cloud GCP image for the required Wise model. The image must be published for your project. For details, see System requirements.

• The virtual machine image in the Private Products Listing in Marketplace—The Cloud Delivery Enablement Service enables you to obtain the virtual machine image from Trellix, which is delivered as a private product at My Marketplace > Private products page. For details, see the Trellix Knowledge base article, Cloud Image Delivery User Guide - KB000002886.

• The activation code provided during onboarding. The activation code activates the appliance and enables licensing.

• The required CPU, RAM, disk, and GPU resources for the selected Wise model.

• The following network information:

  • Hostname

  • Static IP address and subnet mask, or DHCP

  • Gateway

  • DNS

  • Domain

  • HTTP proxy, if required

• An administrator password, if you plan to set it during deployment.

• A GCP machine that meets the following resource requirements of the selected Wise model.

  Deployment environment	Supported machine type
  GCP	a3-ultra
  GCP	a3-high-gpu-2g

Create the Google Cloud virtual machine (VM)

1. In the Google Cloud Console, go to Compute Engine > VM instances and select Create Instance.

2. On the Machine configuration page:

   • Enter an Instance name.

   • Select the required Region and Zone.

   • Under Machine configuration, select the Machine type that meets the requirements of the selected Trellix Wise model.

   • Under VM provisioning model, select the required provisioning model.

3. Under OS and storage, configure the boot disk:

   • Select Change under Boot disk.

   • Select Custom images.

   • Select the Trellix Wise for Private Cloud image for the required model.

   • Verify the disk configuration and select Select.

4. Under Networking:

   • Select the required VPC network and Subnet.

   • Configure the VPC firewall rules to allow the required inbound traffic on TCP port 22 and TCP port 443.

   • Configure the required network tags for the firewall rules.

5. Under Security, configure the required security settings:

   • Select the required Service account under Identity and API access.

   • Under Shielded VM, enable Secure Boot and vTPM.

6. Under Advanced options > Management, configure the required VM metadata. Additionally, you can provide the required startup configuration.

7. Review the VM configuration and select Create.

8. After the VM is created, open the VM details page and select Connect to serial console (Port 1).

9. At the login prompt, sign in using the admin account and the initial password.

10. Change the administrator password:

None

hostname > enable
hostname # configure terminal
hostname (config) # username admin password <new-password>
hostname (config) # write memory
hostname (config) # exit
hostname # exit

11. Sign in again using the admin account and the new password to start the jump-start setup.

12. Accept the License agreement.

13. If you did not enter the activation code initially, the system will prompt you to enter your activation code.

14. You are redirected to the configuration jump-start wizard, where you begin configuring the following settings:

Proceed to deploy Trellix Wise for Private Cloud using your preferred deployment mode. For details, see Select a deployment mode.