The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in early November 2026. We hope you enjoy the updated experience.

Deploy on KVM

Prev Next

Prerequisites

  • Access to a KVM host with KVM Virtual Machine Manager.

  • The Trellix Wise for Private Cloud KVM appliance image for the required Wise model. For details, see System requirements.

  • The activation code provided during onboarding.

  • The required CPU, RAM, disk, and GPU resources for the selected Wise model.

  • The network information required to configure the appliance.

  • An administrator account with access to the KVM host.

  • A software bridge configured on the KVM host for the appliance network connection.

  • The KVM host meets the following requirements:

Deployment configuration

Required KVM version

KVM

Almalinux 9.6

Deploy the Trellix Wise for Private Cloud appliance on KVM

  1. Obtain the Trellix Wise for Private Cloud KVM appliance image for the required Wise model and extract the deployment files on the KVM host.

  2. In KVM Virtual Machine Manager, select File > New Virtual Machine.

  3. On the first page of the Create a new virtual machine wizard, select Import existing disk image. Select Forward.

  4. Browse to and select the folder containing the extracted appliance image.

  5. Select the Trellix Wise for Private Cloud disk image. Select the appropriate Linux operating system and version. Select Forward.

  6. Configure the virtual machine with the CPU and memory requirements for the selected Wise model. Select Forward.

  7. Enter a name for the virtual machine.

  8. Select Customize configuration before install.

  9. Configure the appliance network connection using the software bridge configured on the KVM host.

  10. Review the virtual machine configuration and select Finish.

  11. In the KVM installation page, add the virtual hardware for the controller and networks:        

    • At the bottom left of the KVM installation page, click Add Hardware.

    • In the Add New Virtual Hardware page, select the tab for the type of hardware to add and enter the required values.
      You must click Finish after adding each hardware entry and click Add Hardware again to select the next type of hardware to add.

  12. Select Begin installation.

  13. If you are using NVIDIA H200 GPUs, configure GPU passthrough before powering on the virtual machine.

Note

The NVIDIA driver is included with the Trellix Wise for Private Cloud appliance. You do not need to install the driver separately.

  1. Start the virtual machine.

  2. Open the KVM virtual machine you just installed.        

    • At the login prompt, enter admin.

    • At the password prompt, enter admin.

    • If prompted to change the password, configure a new password using the username admin password <new password> command. You will be logged out. Log in again with the new password.

    • Select Yes to accept the License Agreement.

  3. If you did not enter the activation code initially, the system will prompt you to enter your activation code.

  4. You are redirected to the configuration jump-start wizard, where you begin configuring the following settings:

Step

Response

Hostname?

Enter the hostname for the appliance.

Admin password ?

Enter a new administrator password, or press Enter to keep the current password.

Enable remote access for 'admin' user?

Enter yes to enable the administrator to log in to the appliance remotely.

Enable IPv4 for the management interface (ether1)?

Enter yes to enable the IPv4 protocol.

Use DHCP on ether1 interface?

Enter no to manually configure your IP address and network settings.

Use zeroconf on ether1 interface ?

Enter no to specify a static IP address and network mask.

Primary IPv4 address and masklen ?

Enter the IPv4 address for the management interface and the network mask. (Example: 198.16.144.150)

Default gateway?

Enter the gateway IP address for the management interface. (Example: 192.26.1.1)

Primary DNS server?

Enter the primary DNS server IP address. (Example: 10.116.19.253)

Enable IPv6 on management interface (ether1)?

Enter no to skip IPv6 configuration, or yes to enable the IPv6 protocol.

Domain name?

Enter the domain for the management interface.

Enable fenet service?

Enter yes to enable access to the Trellix Fenet/DTI network.

Enable fenet license update
service?

Enter yes to enable the licensing service to
automatically download and install your
licenses.

Sync appliance time with
fenet?

Enter yes to synchronize the appliance time
with the Fenet server time to prevent license
validation issues.

Update licenses from fenet?

Enter yes to download and install your
licenses.

Enable Cluster?

Enter yes to enable clustering capabilities for
the appliance.

Proceed to deploy Trellix Wise for Private Cloud using your preferred deployment mode. For details, see Select a deployment mode.