# Install OneFuse from OVA

> Deploy OneFuse from an OVA file using VMware vSphere or Citrix XenServer

---

Site [llms.txt](/llms.txt)

---

## Download the latest OneFuse OVA

<div class="alert alert-info" role="alert">


OneFuse is distributed as a CloudBolt OVA file, which is an open standard for packaging VM images for easy installation.
</div>


[Access CloudBolt's Download Article for CMP/OneFuse 2023.5](https://support.cloudbolt.io/cloudbolt/s/article/cloudbolt-2023-5--1983840286--1).

<div class="alert alert-info" role="alert">


The article will always contain the latest Appliance link.
</div>


1. Log in with your **CloudBolt Connect** account.
1. Download CloudBolt OVA.

## Requirements

1. Obtain and download the **OneFuse license key.**
    - **Purchase Key:** Reach out to your CloudBolt Account Manager or our [Customer Success team](https://support.cloudbolt.io/)
1. Optionally, obtain **SSL Certificate(s)** for OneFuse.
1. Ensure your environment meets the following base requirements:
    - A **Virtualization Manager**
        - VMware vSphere 6.0+
        - Citrix XenServer 6+
    - **Virtual Capacity** for the Virtual Machine (VM)
        - **2 CPUs** minimum
        - **8GB memory** minimum
        - **50GB storage** minimum
        - The initial VM will use 3GB if Thin Provisioned or 50GB if Thick Provisioned (recommended).

## Deploy the OneFuse VM from OVA

1. **Log in** to your virtualization manager (for example VMware vSphere, Citrix XenServer).
1. **Deploy** the OVA as a Virtual Machine (VM).
    - Resources: the VMware vSphere documentation on deploying an OVA, or [Import VMs from OVA via Citrix XenCenter](https://docs.citrix.com/en-us/xencenter/7-1/vms-import-ovf.html)
1. **Power on** the newly created OneFuse VM.

## Configure the OneFuse VM

OneFuse needs a few configuration items before you can access the web portal to continue your setup.

1. Connect to the VM's remote console using your Virtualization Manager (for example VMware vSphere, Citrix XenServer).

    <div class="alert alert-info" role="alert">


    If you use DHCP in your environment, press `ESC` to exit.

    To re-run this configuration tool, execute command:

    ```bash
    ~/configure/config.py
    ```

    </div>


1. Log in to the VM console.
    - Username: `root`
    - Password: `cloudbolt`
1. Configure the VM's Network Settings.
    - The VM will prompt you for network configuration information.
        - Set the Fully Qualified Domain Name (FQDN)
            - Press the `ENTER` key to set the FQDN.
            - Press the `ENTER` key to accept.
        - Set the IP Address
            - Use the arrow keys to navigate down to **Set IP address** and press the `ENTER` key.
            - Confirm the IP Address
            - Press the `ENTER` key to accept.
        - Repeat for **Gateway**, **Primary DNS**, **Secondary DNS** and **SELinux Mode** (default is permissive).

    ![OneFuse appliance configuration tool](/img/onefuse/installation/install-from-ova/config-app-1.png)

1. Use the arrow keys to navigate down to `RUN`
1. Press the `ENTER` key to Configure the Appliance
1. The appliance will configure and start services.
1. When prompted, enter the new root password.

## Assign SSL certificates (optional)

<div class="alert alert-warning" role="alert">


OneFuse ships with Day 0 self-signed SSL certificates.

They are not trusted by your users' web browsers unless the user makes an exception to trust the certificate.
</div>


Configure OneFuse to use trusted certificates that you have issued:

1. Log in to the OneFuse VM console.
1. Copy your PEM-formatted **SSL certificate** to `/etc/pki/tls/certs/localhost.crt`
1. Copy your PEM-formatted **SSL key** to `/etc/pki/tls/private/localhost.key`
1. Set the file permissions with the following commands:

    ```bash
    chown apache:apache /etc/pki/tls/certs/localhost.crt /etc/pki/tls/private/localhost.key
    chmod 400 /etc/pki/tls/certs/localhost.crt /etc/pki/tls/private/localhost.key
    ```

1. Restart the web server by executing command:

    ```bash
    service httpd restart
    ```

## FAQs

### Can I configure OneFuse to use SELinux

SELinux configuration is not supported.

### Can I configure OneFuse for high availability

High Availability configuration is supported. See [High availability in OneFuse](/docs/onefuse/installation/high-availability/).

### Can I configure OneFuse for non-SSL

Non-SSL is not supported.

## Next steps

You are ready to [Setup and license OneFuse](/docs/onefuse/installation/setup-and-license/).