Tutorial: Deploy Redtrust as a virtual appliance

This tutorial shows you how to deploy Redtrust using the provided OVA virtual appliance, configure network access and activate the license.

By the end of this guide, your Redtrust unit will be accessible and ready for configuration.

Before you start

Make sure you have:

• The Redtrust OVA file.
• Access to a supported virtual machine manager (for example, VMware or VirtualBox).
• Network access to the segment where the virtual appliance will be deployed.

Step 1: Import and start the virtual appliance

1. Import the Redtrust OVA file into your virtual machine manager.
2. Start the virtual machine.
3. Wait until the Redtrust console screen appears.

Redtrust is delivered as a self-contained solution. No operating system configuration is required.

Step 2: Access the admin console

The virtual appliance includes two network interfaces. One of them is configured by default with the temporary fixed IP address 192.168.22.6

1. Connect to the same network segment.
2. Open a browser.
3. Go to https://192.168.22.6.

The Redtrust administration console is available over HTTPS (port 443).

Step 3: Sign in with the default credentials

Use the default superadministrator credentials:

• User: admin@local
• Password: Admin123

After signing in, configure the final network settings.

warning

For security reasons, change the default password as soon as possible after the first login.

Step 4: Configure the network settings

1. Go to System > Unit > Network
2. Configure the final network parameters for your environment and apply the changes.

Once configured, the second network adapter becomes operational with the defined settings.

The Redtrust unit is now accessible using its definitive IP address.

Step 5: Activate the license

After placing the virtual appliance in its final network location, activate the license.

Obtain the license code

1. Open a browser.
2. Go to https://REDTRUST_IP/licensecode, where REDTRUST_IP is the definitive IP address of your unit.
3. The system displays a license code. Send that license code to redtrust-support@redtrust.com.
4. Wait for the definitive license file.

Install the license

1. Sign in to the administration console.
2. Go to System > Unit > License.
3. Upload and apply the license.

The Redtrust unit is now licensed and operational.

Step 6: Configure firewall rules

Make sure your firewall allows the required traffic.

Incoming traffic to Redtrust

Purpose	Protocol	Destination	Port / Service
Web administration	TCP	Redtrust public IP	443 / HTTPS
Client traffic	TCP	Redtrust public IP	443 / HTTPS
Unit health checks	TCP	Redtrust public IP	443 / HTTPS

Outgoing traffic from Redtrust

Purpose	Protocol	Destination	Port / Service
DNS	UDP / TCP	DNS server	53 / DNS
Microsoft Active Directory	UDP / TCP	AD server	389 / LDAP
Secure LDAP	TCP	AD server	636 / LDAPS
NTP	TCP	NTP server	123 / NTP
Event forwarding (Syslog)	UDP	Syslog server	514 / syslog
Firmaprofesional integration	TCP	api.firmaprofesional.com rtmaintenance.redtrust.com	443 / HTTPS
FNMT integration	TCP	apus20.cert.fnmt.es apuc20.cert.fnmt.es	443 / HTTPS
Windows updates	TCP	download.windowsupdate.com	80 / HTTP

Next steps

• Configure Redtrust.