IVR4 setup process

\$ <exe file> --setup. Replace <exe file> with the actual name of the downloaded executable.

Once the setup command starts running, you will be able to access the IVR Configuration Manager Page.

• Database Selection: You will be prompted to select the type of database. You can either:
  • Choose Microsoft MS SQL Server, or
  • Select Provide your own DSN if you already have a data source name configured.
• While selecting the MS SQL Server, update the following fields with your MS SQL Server credentials.

  Ensure that the database user you specify during the setup has the necessary permissions to create a new database on the server.

  You have the option to create a new schema or use an existing schema during the setup process. If you already have an existing schema you can use that schema for the OnPrem database setup. Ensure that the schema is correctly configured and is compatible with your system's requirements.

  

• When selecting Provide your own DSN during the IVR4 setup, you need to provide a DSN (Data Source Name) string that allows the application to connect to your database server. The format of the sample DSN is given in the below screenshot.

  

  Example DSN for MS SQL Server:

  server=192.168.0.5;database=myDataBase; user=myUsername;password=myPassword;port=1433

  Example DSN for MS SQL Server with Windows Authentication(Integrated Authentication):

  Server=192.168.0.5;Database=myDataBase;Integrated Security=True;Trusted_Connection=True

• The Windows user account that you use must have sufficient permissions in SQL Server, specifically:

  • The user must have the necessary database creation permissions.

  • It should be able to read/write and administer the database.

  Once the database details are entered, verify the credentials.

  Once the credentials are verified, click Save to store the database configuration.

The below screenshot is for the use of a self-signed certificate:

The below screenshot shows the second option: Provide your own certificate and key. Here the certificate and the key content should be given in the PEM format.

In this tab, provide the port where the exe file has to run. Additionally, this tab gives you an option to install the application as a Windows Service.

Enter the port number on which the application will run. This port will be used by the IVR4 service to listen for incoming requests. Ensure the port number you choose is not already in use by another service and is open in your firewall. The default port is 9011 and in case it is used the user must specify another port that can be used.

There is also an option to install the application as a Windows Service. Once the setup is done and complete the application will run in the background as a service.

After installation, open Services.msc by typing services in the Windows search bar or running services.msc in the Run dialog (Win + R). In the Services window, you should see the BES IVR Retriever Service listed. You can start, stop, or configure the service from this page as needed.

You can enter the Tenable API Credentials Configuration and Bigfix API Credentials Configuration.

Verify the credentials and click Save.

Once the setup is complete, the certificates, configurations and lockbox db get created.

If the setup configuration remains in an incomplete state, the Fixlet WARNING: BigFix IVR Retriever has an incomplete configuration from the site BigFix Insights for Vulnerability Remediation will be relevant to the machine.