BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

B.2 AMI TruE Deployment 425

NIST platform security: roots of trust, firmware and secure enclaves IR 8320D (Draft)
All changes in this version
first version loaded Appendix B AMI TruE Machine Identity Management Implementation 362 part of B

Title

AMI TruE Deployment 425

Control

AMI TruE core services are deployed as containers in the Kubernetes cluster. Please refer to 426 the AMI TruE Quick Start Guide that comes with the release for the deployment procedures. It 427 provides step-by-step details on the pre-configurations required, installation script 428 configurations, and command-line options for deploying the core services. The same guide also 429 has a troubleshooting section for handling typical deployment issues. 430 The core services deployment includes the following steps: 431

• Update deployment configurations that include any prerequisites. 432

• Set up the NFS share path. 433

• Update installation configurations. 434

• Run the setup scripts and wait for the deployment to complete. 435 AMI TruE Platform Security services are deployed as containers in the Kubernetes cluster. 436 Please refer to the AMI TruE Quick Start Guide for the detailed deployment procedures. 437 The steps to be followed include the following: 438

• Extract the platform security artifacts. 439

• Update the install configurations. 440

• Update the cloud service provider (CSP) environment configurations. 441

• Update the enterprise environment configurations (optional). 442

• Run the setup scripts and wait for the deployment to complete. 443 The AMI TruE platform security agent needs to be installed on the servers to be managed. 444 Please refer to the AMI TruE Quick Start Guide for detailed deployment procedures. 445 The steps to be followed include the following: 446

• Update the server role configurations. 447

• Update the install configurations. 448

• Set up the Kubernetes workers for the appropriate server role. 449 The Kubernetes control plane node will then launch the appropriate security agents on the target 450 system. 451