Virsec Security Platform (VSP) Installation Guide

Version: 3.x | Last Updated: September 2025

Overview

This guide provides instructions for installing Central Policy Manager (CPM) on supported Windows and Linux environments. CPM is the management agent that allows for remote automation and installation of the VSP probe. The recommended method for production deployments is the automated CPM installer script, which simplifies configuration and ensures proper registration with the CMS.

Pre-Installation Requirements

System Requirements

• Windows: Server 2008 R2 or later

• Linux: RHEL 7.6+, CentOS 7+, Ubuntu 16.04+

• Memory: Minimum 2 GB RAM

• Disk Space: 500 MB for VSP components (additional space for logs)

Prerequisites

• Windows:

  • Visual C++ Redistributable (2015–2019) – VSP-supplied version required

  • TLS 1.2 support

  • Administrator privileges

• Linux:

  • Python 3.7+

  • Kernel headers for driver compilation

  • Root or sudo access

Certificate Requirements

• For manual MSI installs and Linux:

  • Download certificates.zip or certificates.tar from CMS → Administration → File Repository

Installation Methods

Windows Installation

Recommended: Automated CPM Installer

1. Prepare Installation Directory

   mkdir C:\temp\vsp_install
   cd C:\temp\vsp_install

2. Copy CPM_Installer.bat to this directory.

3. Run Installer

   CPM_Installer.bat

   1. What It Does:

      • Download certificates and CPM MSI

      • Installs CPM

      • Upgrades existing CPM installs

   Alternative: Manual MSI Installation

   For custom deployments (requires MSI and Certificates):

   start /wait msiexec /i VSP.msi /qn /norestart ^
   CMS_DNS_NAME=<CMS Hostname> ^
   CERTS_ZIP="C:\temp\certificates.zip" ^
   ACCEPTEULA=1 ^
   START_VSP_SERVICE=1 ^
   /l*v C:\vsp_install.log

Linux Installation

Recommended: CPM Installer

1. Prepare Installation Directory

   mkdir /tmp/vsp_install
   cd /tmp/vsp_install

2. Run Installer

   chmod +x CPM_Installer.sh
   sudo ./CPM_Installer.sh -T ./certificates.tar

3. Start and Enable Services

   sudo systemctl start vspcpm
   sudo systemctl enable vspcpm

Best Practices

• Use the automated CPM installer scripts for production deployments

• Ensure certificates are valid and system time is synchronized

• For large deployments, consider automation tools (Ansible, Chef, Puppet)