Académique Documents
Professionnel Documents
Culture Documents
The AlienVault Logo, AlienVault, AlienVault Unified Security Management, AlienVault USM,
AlienVault Open Threat Exchange, AlienVault OTX, Open Threat Exchange, AlienVault OTX
Reputation Monitor, AlienVault OTX Reputation Monitor Alert, AlienVault OSSIM, and
OSSIM are trademarks or service marks of AlienVault, Inc.
All other registered trademarks, trademarks or service marks are the property of their respective
owners.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 2 of 19
Contents
Contents
Introduction ..................................................................................................................................... 4
Requirements .................................................................................................................................. 4
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 3 of 19
Burning to a USM Flash Drive
Introduction
This procedure describes the required process to update an AlienVault appliance when there is not
an Internet connection available. It also describes how to restore the software of an AlienVault
appliance.
Requirements
These are the requirements to update the AlienVault appliances:
USM version 4.4 or greater.
ISO image provided by AlienVault, see Downloading the AlienVault USM ISO for Offline
Update
USB flash drive or external USB CD/DVD R/RW drive.
Linux
To burn an ISO Image using a USB Flash Drive from Linux
1. Insert your USB flash drive into the USB port. It is recommended to copy the ISO image in a
temporary directory, for example /tmp.
2. Execute the following command to copy the ISO image:
<USB_image.iso>, replace this by the ISO image file path. Note that it is necessary to write the
whole path where the file is located.
<USB_device> refers to the USB device name.
For example, having a file called image.iso and with the USB device name /dev/sdb, the
command to write will be:
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 4 of 19
Burning to a USM Flash Drive
Mac OS X
To burn an ISO Image using a USB Flash Drive from Mac OS X
1. Insert your USB flash drive into the USB port. Copy the image in a temporary directory or in
your own user directory.
2. Run the following comand to identify the USB device name:
diskutil list
<USB_image.iso>, replace it by the ISO image file path. Note that it is necessary to write the
whole path where the file is located.
<USB_device> refers to your USB device name.
For example, having a file called image.iso and being /dev/disk1 the USB device name, the
command to write will be the following:
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 5 of 19
Burning to a USM Flash Drive
Windows
To burn an ISO Image using a USB Flash Drive from Windows
1. Connect your USB flash drive.
2. List the devices connected to the Windows platform using dd.exe1, similar to the dd command
on Linux, so you can identify where your USB flash drive has been mounted:
C:\Users\myuser\Desktop>dd.exe --list
\\.\Volume{93c9c543-7952-11e3-8953-806e6f6e6963} \
link to \\?\Device\HarddiskVolume1
fixed media
Mounted on \\.\c:
\\.\Volume{a7bddb16-7b9e-11e4-b358-6003089d6c19}\
link to \\?\Device\HarddiskVolume2
removeable media
Mounted on \\.\e:
\\.\Volume{93c9c547-7952-11e3-8953-806e6f6e6963}\
link to \\?\Device\Floppy0
1
dd.exe is a Windows version of the "dd" command used in Linux/Mac. The tool site is http://www.chrysocome.net/dd.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 6 of 19
Burning to a CD
removeable media
Mounted on \\.\a:
3. Once you identify where your USB flash drive has been mounted, execute the following
command to burn the ISO image file onto the device:
794M
198+1 records in
198+1 records out
Note: In case you are asked for formatting the unit during the process, please, do no accept
the operation. The device should not be formatted.
Burning to a CD
Burn the ISO image file by using any CD burning software.
The method you use will depend on which CD writing software package you have available on your
Operating System. Once the ISO file is burned as an image, the resulting CD is bootable, but it is a
clone of the original file, so it contains the same folders, files, and properties as the original ISO.
ssh root@IP_address
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 7 of 19
Burning to a CD
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 8 of 19
Burning to a CD
10. If you did not do it in the first step, connect your USB to the appliance you want to upgrade.
11. Click OK.
When the process ends the following message appears.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 9 of 19
Changing the BIOS Setup
Note: If the BIOS is already configured to boot up from a USB, go to Restoring an appliance
from a USB Flash Drive.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 10 of 19
Changing the BIOS Setup
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 11 of 19
Changing the BIOS Setup
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 12 of 19
Changing the BIOS Setup
9. Press Enter.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 13 of 19
Restoring USM from a USB Flash Drive
Note: Make sure your USB flash drive is connected to the USB port before rebooting the
appliance.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 14 of 19
Restoring USM from a USB Flash Drive
Important: The restore process deletes all the data stored in your USM.
After selecting the data restoration option, the system will ask for a confirmation:
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 15 of 19
Restoring USM from a USB Flash Drive
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 16 of 19
Restoring USM from a USB Flash Drive
Note: Remove your USB before the system reboots. If you forget to remove it, the system will
continue to boot from your USB.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 17 of 19
Restoring USM from a USB Flash Drive
A reboot may take several minutes. After that, the initial user login prompt appears in the
console:
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 18 of 19
Restoring USM from a USB Flash Drive
This screen displays the root username and a randomly generated password for you to enter.
4. In the login: field, enter root.
5. In the password field, enter the displayed randomly generated password, then press Enter.
6. When prompted whether you would like to change your password, click Yes.
7. Reboot again for finishing the data restoration. After this second reboot, the appliance will be
ready.
Note: For further information about how to deploy the appliance, see the AlienVault document
Initial Setup Guide.
November 2, 2015 USM 4.4-5.x Offline Update and Software Restoration Procedures Page 19 of 19