Deploying vSEC for Cisco ACI

In This Section: Prerequisites Installing the vSEC Service Registration Hotfix

Prerequisites

These are vSEC for Cisco ACI prerequisites:

Component	Software Prerequisite and Required Hotfixes
Security Management Server / Multi-Domain Server	For R80 image, see sk108623. For vSEC Controller, see sk111963. For Multi-Domain Server - Multi-Domain Server vSEC Controller package. vSEC for ACI Management Server Hotfix with CPUSE – See Installing the vSEC for ACI Management Server Hotfix via CPUSE.
Virtual and physical VSX Gateway	For R77.30 images and OVFs, see sk104859. For R77.30 latest Jumbo Hotfix, see sk106162. vSEC Enforcer on R77.30 Gateway is deployed.
Cisco APIC	APIC version 1.2 and higher integrated with Security Management Server.
vSEC device package	vSEC device package version 1.1.1 and higher installed on Cisco APIC.

Installing the vSEC Service Registration Hotfix

The latest build of CPUSE Deployment Agent must be installed before you install any Hotfix. To download and import the latest build, see sk92449.

This Hotfix must be installed on top of the R80 Security Management Server.

You can install the Hotfix with CPUSE online or offline.

Offline Installation

To install the Security Management Server Hotfix with CPUSE offline:

1. From the Gaia portal, go to Upgrades (CPUSE).
2. Click Status and Actions.
3. Select Import Package.

   The Import Package window opens.

4. Click Browse and select the CPUSE package (offline TGZ file or exported TAR file).
5. Click Import.
6. Click Showing Recommended packages. Select All.
7. Select the imported package.
8. Click the More button on the toolbar.
9. Click Verifier.
10. Select this package and click Install Update.

    The offline installation starts immediately. The Security Management Server reboots automatically when the installation is complete.

Online Installation

To install the Security Management Server Hotfix with CPUSE online:

1. From the Gaia portal, go to Upgrades (CPUSE).
2. Click Status and Actions.
3. Select the Hotfix package.
4. Click the More button on the toolbar.
5. Click Verifier.
6. Select the Hotfix package and click Install Update.

   The online installation starts immediately. The Security Gateway reboots automatically when the installation is complete.

Uninstalling the Hotfix

To uninstall the Hotfix from a Security Management Server with CPUSE:

1. From the Gaia portal, go to CPUSE > Status and Actions.
2. Select the vSEC Controller Hotfix package.
3. Click Uninstall.