Deploy the Deep Security AMI manually

Trend Micro recommends that you follow instrucitons provided in Deploy the Deep Security AMI using CloudFormation. That method uses AWS CloudFormation templates for quick deployment in about 1 hour. However, if you need to manually deploy the AMI, follow the instructions on this page.

You might want to deploy the AMI manually if the following applies:

• You only need one manager node instead of the two offered by Deploy the Deep Security AMI using CloudFormation.
• You require additional manager nodes beyond those offered by Deploy the Deep Security AMI using CloudFormation.

For information about the supported deployment models for Deep Security Manager, see section 3.3 of the Deep Security Best Practice Guide (PDF). Note that auto-scaling of manager nodes is not supported.

Install Deep Security Manager

1. Subscribe to Trend Micro Deep Security on AWS Marketplace. The Deep Security AMI has two billing models:
   • Pay as you Go (also called Per Protected Instance Hour)
   • Seat-based (also called Bring Your Own License (BYOL))
2. Install a database. You can install your own database or you can use the Amazon RDS Management Console to create a database instance (PostgreSQL, Microsoft SQL, or Oracle). Refer to the Amazon RDS Documentation for instructions.
3. Configure the database for Deep Security. See Configure the database.
4. Launch the Deep Security AMI from the Trend Micro Deep Security page on AWS Marketplace.
5. When AMI has finished launching, go to https://<instance IP or hostname>:8080 to access the Deep Security Manager installer and finish the installation.
6. When the installation is complete, the Deep Security Manager console is displayed. Log in with the username and password that you specified during the Deep Security Manager installation process. Note the URL used to access the Deep Security Manager console.
7. Optionally, install another manager node. See Install Deep Security Manager on multiple nodes.

Next steps

After installing the manager, you are ready to deploy a Deep Security Relay and Deep Security Agents.