Establishing the Imprivata Enterprise
The Imprivata enterprise is a group of Imprivata appliances that are configured to work together to service a collection of endpoint computers. All appliances in an enterprise synchronize their databases and share the same users, policies, and enrollments.
An enterprise can be divided into sites for operational and administrative reasons. Imprivata Administrators can also be limited in scope to certain users or sites. There are some administrative actions that are handled on a site-by-site basis, and others that are handled across the entire enterprise.
Imprivata appliances should be clustered as an enterprise to provide the redundancy necessary for business continuity and disaster recovery, and to allow users to roam between sites.
Create the Enterprise by Configuring the First Appliance
Before configuring your first Imprivata appliance, you must deploy that first appliance to one of the VMware, MS Hyper-V, Nutanix, or MS Azure platforms. For details, see the topic corresponding to your platform:
When you configure your first appliance, your enterprise is created automatically. You can then add more appliances to the enterprise. You configure an appliance using a Web-based configuration wizard in the Imprivata Appliance Console.
To configure your first appliance:
-
In a supported web browser, go to https://<Appliance_IP_address>:81/. For a list of supported browsers, see the Imprivata Enterprise Access Management Supported Components. The Appliance Configuration Wizard start page opens.
-
Click Launch Setup Wizard. The Configuration Setup page opens.
-
Select establish a new Imprivata enterprise and then enter the name for the first Imprivata site.
-
Click Next. The Imprivata License Key Configuration page opens.
-
Browse to and upload your Imprivata license, then click Next. The Imprivata Appliance System Settings page opens.
- System settings include a variety of settings and options presented in multiple tabs of the Imprivata Appliance Console.
-
In the Operations tab, in the Administrator Password fields, enter passwords for the appliance Super Administrator and Local Administrator. A Super Administrator can perform all appliance administration functions across the enterprise, while a Local Administrator cannot perform some actions that affect the entire enterprise.
NOTE:These passwords are for Imprivata Appliance Consoles only; you can have different passwords for the Imprivata Admin Console.
-
Click Next. The Network Settings page opens.
Network settings include DNS servers, an SMTP server, and NTP servers.
-
If the appliance is deployed on Azure, skip this step.
CAUTION:For an Imprivata virtual appliance deployed on Microsoft Azure, do not change the networking configuration for the appliance. If you change network configuration values for the appliance, it may affect your ability to contact and control the virtual machine upon which the virtual appliance runs. For more information, see Deploy G4 Appliances on Azure.
-
If at least one DNS server, SMTP server, and NTP server is not already specified, then specify at least one of each of those servers. You can enter up to three each of DNS and NTP servers. For best results, these servers should be in the local network.
-
Click Next. The appliance restarts.
When the appliance has restarted, it is important to add a second appliance immediately, as detailed in Adding an Appliance to the Enterprise.