Setting up the single VM environment

Before installing AppScan 360° using the single VM script, setup your environment for optimal deployment.

Deployment server prerequisites

The deployment server is a Linux-based system used to initiate and manage the AppScan 360° deployment.

Category Requirement
Operating system Ubuntu 22.04 / Ubuntu 24.04 / RHEL 9.5
Software
  • Bash shell - Required for running installation scripts
  • Docker - For local container service on Ubuntu (see Docker Installation)
  • Podman - For local container service on RHEL (often preinstalled)
  • Kubectl - For Kubernetes cluster management (see Kubectl Installation)
  • Helm 4 - For chart deployments (see Helm Installation)
Note:

For fresh installations and Proofs of Concept (POCs), ensure the host timezone is set to UTC before starting the installation.

If the host is set to a local timezone, scan execution may fail for a short period after deployment until certificates synchronize with UTC

.

External dependencies

AppScan 360° relies on external services that must be configured and accessible.
Category Requirement
Database

MSSQL Server 2019 or above, with db_creator permissions. Approximately 150 KB storage per scan execution.
Authentication SSO via OIDC (Keycloak / Okta) OR LDAP (Microsoft Active Directory / Domino) via port 389/636/TCP
Email SMTP Server via port 25/TCP for notifications
Licensing HCL License Management Portal via port 443/TCP (requires HCL ID)
Container Registry Remote container registry for storing and pulling AppScan 360° container images
Network Trusted certificate for secure communication (import untrusted certs into client JRE keystore if needed)
Storage File storage for scan data (see Storage Requirements)
HCL Harbor For maintaining up-to-date issue catalog and vulnerability data for SCA scans

Additional notes

  • HCL ID - Required for accessing HCL License and Download Portal and HCL Harbor

  • Browser Support - Use the latest versions of Chrome, Safari, Edge, or Firefox for the AppScan 360° user interface

  • Screen Resolution - Recommended resolution is 1920x1080 for optimal display

  • DNS - Publish the FQDN with the designated IP in the DNS server

Network Ports:

  • 22/TCP - SSH to Deployment Server

  • 25/TCP - SMTP

  • 389/TCP - LDAP

  • 80, 443, 8080/TCP - Web access

  • 5443,6443,7443,8443/TCP - Additionally required only for Single VM Setup.

Access Points:

  • User Portal: https://<CK_CONFIGURATION_DISCLOSED_SITE_URL>
  • User API: https://<CK_CONFIGURATION_DISCLOSED_SITE_URL>/api
  • User API (Swagger): https://<CK_CONFIGURATION_DISCLOSED_SITE_URL>/swagger

Default local users:

  • Admin — password: Admin12!

  • User — password: User123!

Additional information

The AppScan 360° single VM setup script ask a series of questions to configure your environment. Be prepared for the questions with the following information:
  • Is this installation intended to be a proof-of-concept installation of AppScan 360°? Or will this installation be used for production?
  • About how many concurrent scans do you expect to run? (Custom installation)
  • Do you want to enable Software Composition Analysis (SCA) for open source scanning?
  • What are your MSSQL configuration details? (Custom installation)
  • What are your Software Composition Analysis (SCA) database details? (Custom installation)
  • Will the install use an external certificate?
  • What will be the primary domain name for the installation?
  • Will the installation access external services?
  • Is the local VM connected to the local DNS server?
  • How much storage will be allocated for the installation?
  • Do you want to connect with your SMTP mail relay?
  • What are your Docker registry details? (Custom installation)
  • Will the installation use a proxy? (Custom installation)