Express installation of AppScan 360° on a single virtual machine

Express mode is intended for proof-of-concept (POC) evaluations in a single VM setup. It provides a guided installation path with fewer decisions than custom mode.

💡 Best Practice: Run AppScan 360 Setup Assistant before every new installation or major upgrade.

Important notes:

  1. Perform all installation and configuration activities as an Administrator on the target system.

  2. The setup script asks environment-specific questions. Review the Prerequisites setup and prepare required values before starting.

  3. Express mode is for evaluation scenarios. For production deployment and upgrade planning, use custom/production guidance.

Prepare installation files

  1. Download the single-VM setup kit and required AppScan kits from MyHCLSoftware portal into one directory. For example, /home/username/AppScan360_singleVM.
    Keep all installation kit files in the same directory. Typical kit files:
    • AppScan360_SingleVMsetup_v<version>.run
    • AppScan360_v<version>.run
    • AppScan360_ASRA_v<version>.run
    • AppScan360_DTCS_v<version>.run (required for DAST template features)
    • AppScan360_SCA_v<version>.run (optional)
  2. Move all kits into a working folder and make them executable.
    mkdir -p ~/aio-setup
mv *.run ~/aio-setup/
cd ~/aio-setup
chmod +x *.run

Place Certificates (optional)

  1. If you use custom or self-signed certificates for services such as SSO (LDAP, OIDC) or SMTP, create certificates folder first.
    sudo ./AppScan360_SingleVMsetup_v<version>.run -- $PWD prepareCertsFolders
    The command creates the following folder structure:
    Folder Function
    ~/aio-setup/certs/ Main certificates folder
    ~/aio-setup/certs/docker/ Docker Registry certificates (typically not needed for express/PoC install)
    ~/aio-setup/certs/ldap/ LDAP certificates (LDAPS)
    ~/aio-setup/certs/smtp/ SMTP certificates (SMTPS)
    ~/aio-setup/certs/oidc/ OIDC certificates
    ~/aio-setup/certs/otel/ Open Telemetry certificates (used when the collector is signed by a private CA)
    ~/aio-setup/certs/ingress/ Ingress/application domain certificates (optional; self-signed certs are generated if not provided)
  2. After folders are created, place certificate files in the appropriate paths.

Run installation

  1. Start installation:
    cd ~/aio-setup
sudo ./AppScan360_SingleVMsetup_v<version>.run -- $PWD
    To stop and clean an interrupted install:
    cd aioWorkspace
./disengageAS360-AIO.sh
    Installation log files are written at ./aioWorkspace/logs.
  2. Select Express Mode (POC) when prompted:
    Please select your installation path:
1. 🚀  Express Mode (POC)
2. 🛠️  Custom Mode (Production)
Enter 1 or 2 [Default: 1]:
  3. Complete the Express Mode (POC) questionnaire.

    Key prompts in Express Mode (POC).

    • Optional Software Composition Analysis (SCA) section:
      Do you want to install the optional SCA kit for this evaluation? (y/n) [Default: n]:

    • Primary domain (used to generate the final access URL):

      Please enter the primary domain name for this instance. This will be used to create the access URL.(for example, appscan-test.local):
    • External domains or IPs needed for outbound access (for example SSO or SMTP endpoints): 
      Provide the external domain(s) or IP address(es) this instance must access for external services (for example, SSO, SMTP). Use commas to separate multiple values. If none, press Enter to skip:

    • Local DNS connectivity:

      Is the VM connected to a local DNS server? (y/n) [Default: n]:

    • Shared storage size (default 20 GB):

      A small amount of storage is required for your evaluation. We will allocate a default of 20 GB to accommodate all chosen components. Press Enter to accept 20 GB or specify a different size:

    • SMTP Mail Relay (optional):

      Do you want to configure an SMTP Mail Relay(SMR)? (y/n) [Default: n]:

      If SMTP is enabled, additional prompts include:

      • SMR host

      • SMR port

      • SMR username

      • Authentication mode:
        Select SMTP authentication mode:
1. Password
2. Client Secret
Enter 1 or 2 [Default: 1]:

      Based on your selection, the installer asks for either SMR password or SMR client secret.

    • SMTP secure transport: 
      Does the SMR operate over SSL/TLS. If yes, a certificate is required to be present in certs/smtp folder (y/n)?
  4. Confirm and continue:
    > Continue with installation? (y/n) [Default: y]:
    After confirmation, the installer proceeds with Express components, including:
    • Kubernetes cluster (K0S)
    • Docker Private Registry (DPR)
    • SQL Server instance (MSSQL)
    • AppScan 360° central platform (ASCP) and components.
    • AppScan Remediation Advisories (ASRA)
    • DAST Template Converter Service (DTCS)
    • Software Composition Analysis (SCA), if selected
    At completion, the installer prints:
    • hosts file entry to add
    • Final URL to access AppScan 360
  5. Add the generate IP address and hostname mapping to your host file.
    Operating system Host file path
    Linux, MacOS /etc/hosts
    Windows C:\Windows\System32\drivers\etc\hosts
    For example:
    192.168.1.100 appscan.appscan-test.local

Logging in and activate AppScan 360°

To login and activate AppScan 360°:
  1. Open the URL printed at install completion: https://<host>.<domain>.
  2. Sign in with default credentials:
    • Username: Admin
    • Password: Admin12!
  3. Upload your AppScan 360° license file to activate the deployment.

Uninstallation

To remove an express single VM installation of AppScan 360°:
cd ~/aio-setup/aioWorkspace
sudo ./disengageAS360-AIO.sh
This removes installed components and AppScan 360° resources created by this setup.

Changing installation method

If you want to move beyond Express mode: