Views:
Important
Important
Private Access Connector 2.x will reach end of support on INSERT_DATE. New deployments should use Connector 3.0 or later. This guide is provided only for environments that cannot meet the 3.0 system requirements.
The 2.x connector images are no longer distributed through the TrendAI Vision One console. To deploy a 2.x connector, you must manually download the image file and create the VM in your target environment.

Download the 2.x appliance image

Format
Platform
OVA
VMware ESXi, AWS, Azure, GCP, KVM
VHDX (zip)
Microsoft Hyper-V
Nutanix (tar)
Nutanix AHV
To obtain the new version of a 2.x connector, contact tech support.
For platforms that don't have a dedicated image format above (AWS, Azure, GCP, KVM), you must extract and convert the disk image from the OVA before deployment. Conversion steps are included in each platform section below.

Deploy on VMware ESXi Parent topic

Procedure

  1. Download the OVA file.
  2. In the vSphere Client, select File → Deploy OVF Template.
  3. Select the downloaded OVA file and follow the wizard to configure VM settings.
  4. Power on the VM.
  5. Register the connector.

Deploy on Microsoft Hyper-V Parent topic

Procedure

  1. Download and extract the VHDX zip file.
  2. In Hyper-V Manager, select Action → New → Virtual Machine.
  3. Configure the VM with at least 2 vCPUs and 4 GB RAM.
  4. When prompted for the virtual hard disk, select Use an existing virtual hard disk and browse to the extracted VHDX file.
  5. Complete the wizard and start the VM.
  6. Register the connector.

Deploy on Nutanix AHV Parent topic

Procedure

  1. Download the Nutanix tar file.
  2. In Prism Central, go to Compute & Storage → Images and click Add Image.
  3. Select Image File, upload the tar file, and set the image type to Disk.
  4. Create a VM with at least 2 vCPUs and 4 GB RAM, and attach the uploaded image as a disk.
  5. Power on the VM.
  6. Register the connector.

Deploy on KVM/QEMU Parent topic

Procedure

  1. Download the OVA file.
  2. Extract the VMDK from the OVA and convert it to QCOW2:
    tar -xf ztsa-connector-2.x.ova
qemu-img convert -f vmdk -O qcow2 ztsa-connector-2.x.vmdk ztsa-connector.qcow2
  3. Create a VM using virt-install or your preferred management tool:
    virt-install \
    --name ztsa-connector \
    --ram 4096 \
    --vcpus 2 \
    --disk path=/var/lib/libvirt/images/ztsa-connector.qcow2,format=qcow2 \
    --import \
    --os-variant centos7.0 \
    --network bridge=br0
  4. Register the connector.

Deploy on Amazon Web Services Parent topic

Procedure

  1. Download the OVA file.
  2. Upload the OVA to an S3 bucket:
    aws s3 cp ztsa-connector-2.x.ova s3://<your-bucket>/
  3. Import the OVA as an AMI:
    aws ec2 import-image \
    --disk-containers "Format=ova,UserBucket={S3Bucket=<your-bucket>,S3Key=ztsa-connector-2.x.ova}"
  4. Monitor the import task:
    aws ec2 describe-import-image-tasks --import-task-ids <task-id>
  5. Once complete, launch an EC2 instance from the imported AMI.
  6. Register the connector.

Deploy on Azure Parent topic

Procedure

  1. Download the OVA file.
  2. Extract the VMDK from the OVA and convert it to VHD:
    tar -xf ztsa-connector-2.x.ova
qemu-img convert -f vmdk -O vpc -o subformat=fixed,force_size ztsa-connector-2.x.vmdk ztsa-connector.vhd
  3. Upload the VHD to a storage account:
    az storage blob upload \
    --account-name <storage-account> \
    --container-name <container> \
    --name ztsa-connector.vhd \
    --file ztsa-connector.vhd \
    --type page
  4. Create a managed disk from the uploaded VHD:
    az disk create \
    --resource-group <resource-group> \
    --name ztsa-connector-disk \
    --source https://<storage-account>.blob.core.windows.net/<container>/ztsa-connector.vhd
  5. Create a VM from the managed disk:
    az vm create \
    --resource-group <resource-group> \
    --name ztsa-connector \
    --attach-os-disk ztsa-connector-disk \
    --os-type Linux \
    --size Standard_B2s
  6. Register the connector.

Deploy on Google Cloud Platform Parent topic

Procedure

  1. Download the OVA file.
  2. Extract the VMDK from the OVA, convert it to a raw disk image, and compress it:
    tar -xf ztsa-connector-2.x.ova
qemu-img convert -f vmdk -O raw ztsa-connector-2.x.vmdk disk.raw
tar -czvf ztsa-connector-2.x.tar.gz disk.raw
  3. Upload the archive to a GCS bucket:
    gsutil cp ztsa-connector-2.x.tar.gz gs://<your-bucket>/
  4. Create a compute image:
    gcloud compute images create ztsa-connector-2x \
    --source-uri=gs://<your-bucket>/ztsa-connector-2.x.tar.gz
  5. Create a VM instance from the image:
    gcloud compute instances create ztsa-connector \
    --image=ztsa-connector-2x \
    --machine-type=e2-medium \
    --network=<network-name>
  6. Register the connector.

Register the connector Parent topic

Procedure

  1. In the TrendAI Vision One console, go to Zero Trust Secure Access → Secure Access Configuration → Private Access Configuration.
  2. Locate your Connector group and click the New connector icon.
  3. Copy the Registration token.
  4. Connect to the connector VM via SSH or console.
  5. Set the admin password:
    passwd
  6. Enable the privileged mode:
    enable
  7. Register the connector:
    register <registration_token>
    The connector appears in the TrendAI Vision One console under its assigned group once registration is complete.