The first task in deploying the Hyper-V Sensor is to create, configure, and start the virtual machine (VM) using either the System Center Virtual Manager (SCVMM) 2012 or Hyper-V Manager. Before you begin this task, download the Hyper-V sensor package from AT&T Cybersecurity.
http://downloads.alienvault.cloud/usm-anywhere/sensor-images/usm-anywhere-sensor-hyperv.zip
Then, extract the contents, and place the files where they are accessible from your Hyper-V management tool.
- deploy_config.iso
- USM_sensor-node.xml
- usm-data-disk.vhdx
- usm-os-disk.vhd
Create the VM with SCVMM 2012
Follow these procedures to create and start the virtual machine using System Center Virtual Machine Manager (SCVMM) 2012.

To create a virtual machine with SCVMM 2012
- Connect to SCVMM 2012.
- Select Library > VM Templates.
- Select the AlienVault VM Template under VM Templates, and click Create Virtual Machine.
- Enter a name for the virtual machine and then click Next.
- In Configure Hardware, click Next.
- In Select Destination, choose whether to deploy or store the virtual machine and then click Next.
- In Select Host, select a destination for the virtual machine and then click Next.
- In Configure Settings, review the virtual machine settings and then click Next.
- In Add Properties, change the automatic actions, if needed, and then click Next.
- In Summary, confirm the settings and then click Next.
The Jobs window appears and shows the virtual machines in the process of creation.
When the process finishes, you can close the window.

To start the VM and connect
-
Right-click the virtual machine and select Power On.
This process could take a few minutes. The Virtual Machine State will display as Running when this is complete.
-
Right-click the virtual machine and select Connect or View > Connect via Console.
Use the information in the Welcome screen to log in to the Sensor. This screen also displays the URL you can use to access USM Anywhere and register the Sensor.
Create the VM with Hyper-V Manager
Follow these procedures to create, configure, and start the virtual machine using Hyper-V Manager.

To create a new virtual machine with Hyper-V Manager
- Open the Hyper-V Manager and connect to the server.
- From the Actions panel, go to New > Virtual Machine.
- In Specify Name and Location, enter a name for the new virtual machine and then click Next.
- In Specify Generation, choose Generation 1 for the virtual machine and then click Next.
-
In Assign Memory, change the value of the Startup memory to 12288 MB.
Important: Make sure that the Use Dynamic Memory option is not selected.
Click Next when complete.
- In Configure Networking, connect the new virtual machine to the desired network and then click Next.
-
In Connect Virtual Hard Disk, select Use an existing virtual hard disk and then click Browse to locate the
usm-os-disk.vhd
file that was extracted from the USM Anywhere Sensor package download.Note: You will add the data disk later in another step because the wizard doesn't support this.
- In Complete the New Virtual Machine Wizard, click Next and then Finish.
The New Virtual Machine Wizard launches. Click Next.

To configure a virtual machine using the Hyper-V Manager
- Select the virtual machine you previously created, and select Action > Settings.
-
In left navigation pane of the dialog box, select Processor and set the number of virtual processors to 4.
- Click Apply.
- In the left navigation pane, select IDE Controller 0.
-
Select Hard Drive, click Add, and then click Browse to locate the
usm-data-disk.vhdx
file that was part of the USM Anywhere Sensor download. -
In the top-left corner of the dialog box, click Add Hardware, and then select Network Adapter External Network > Add to add additional network adapters.
Repeat this function so that you have a total of five network adapters.
Warning: The Hyper-V Sensor requires all five Network Interface Cards (NICs) to be enabled. The USM Anywhere update will fail if not all five NICs are associated to some network (active or inactive).
See Configure Network Interfaces for On-Premises Sensors for more information about these interfaces.
- Click OK.
-
Configure the ISO file for the datastore.
Warning: You must complete this step to ensure that the ISO is mounted when you first start the sensor VM. If you see REPLACEME as the initial login password in the sensor welcome screen when you connect to the VM, it is most likely that the ISO was not correctly mounted before start. If this happens, you must shut down the VM, complete this step so that the ISO is configured for the datastore, and then complete the subsequent steps in the procedure to deploy and connect to the sensor.
- Select IDE Controller 1 > DVD Drive.
- Select Image file and click Browse to locate the
deploy_config.iso
image file that was extracted from the USM Anywhere Sensor package download. - Cick Apply.
- Click OK and close the dialog box.

To start the virtual machine and connect
-
Select the VM and select Action > Start.
This process can take a few minutes. The Status displasy as Running when this is complete.
-
Select your virtual machine and select Action > Connect.
Use the information in the Welcome screen to log in to the Sensor. This screen also displays the URL you can use to access USM Anywhere and register the Sensor.
Next...