Initial Setup

Delphix runs as a virtual appliance deployed in various types of infrastructure as described above. When you first log in to an instance,  the setup wizard will help you configure the initial setup for network, storage, authentication and more. If you have just deployed, read this section to understand each step of the setup wizard.

Once you have deployed Delphix in the platform of your choice, you will need to set up the engine’s initial configuration, which includes settings such as system time, storage, and authentication. This page describes each step in the setup process and will outline and the various options available.

The setup procedure uses a wizard to take you through the following configuration screens:

• Welcome
• Administrators
• Time
• Network
• Network Security
• Storage
• Serviceability
• Authentication
• Kerberos
• Registration
• Summary

When you first connect to the Delphix Engine via any supported browser, you must enter the default sysadmin login, whose credentials are sysadmin/sysadmin. On the first login, you will be prompted to change the initial default password for security purposes.

Welcome

The Welcome tab asks users to select the engine type for setup. You can select from Virtualization or Masking. This document explains the setup for Virtualization engines. For Masking engines, please visit our Masking documentation.

Administrators

Each Delphix Virtualization engine has two default accounts:

• System Administrator: ‘sysadmin’ with a password that users can define. This will be the system administrator for the instance.
• Engine Administrator: ‘admin’ with a password that users can define. This is typically a DBA who will administer all the data managed by the instance.

You must provide an email address and password for both users at the Administrators step of setup.

Each Delphix Masking engine has the following default account:

• Masking Administrator - "admin"  with the password you defined. This will be the Masking administrator responsible for setting up users and other administrative actions in Masking. (Only available if Masking was selected).

Time

The Delphix Engine leverages its time setting to determine policies and actions that take place within the application. Here, you can manually set time or choose from an NTP server.

Select an option for maintaining the system time as explained below.

Network

The initial network configuration will be pre-populated based on the deployment platform you are using for Delphix. For VMware deployments, Delphix defaults to the VMXNET3 network adapter.

By selecting ‘Settings’ for each Network Interface, you can manage the following options:

Network Security

Delphix installs certificates signed by the engine’s Certificate Authority.  Users have the ability to manage their own certificates for HTTPS and DSP (Delphix Session Protocol) connections to and from the Delphix Engine. You can add or modify certificates and certificate signing requests (CSRs) via the ‘...’ option.

When you update the Certificate Authority certificate, your HTTPS and DSP certificates will be automatically updated.

For more information please refer to Certificate Management in the Security section of this documentation.

Storage

The Delphix Engine automatically discovers and displays storage devices. For each device, confirm that Usage Assignment is set to Data. 

You can associate additional storage devices with the Delphix Engine after initial configuration, as described in Adding and Expanding Storage Devices.

There are two options for storage disk usage assignment:

1. Data: Once you set the storage unit assignment for a disk to Data and save the configuration, you cannot change it again.
2. Unassigned: These are disks being held for later use.

Configure at least four disks for the storage of user data. This makes the Delphix Engine storage manager function more efficient since duplicated metadata can be distributed across multiple disks.

Serviceability

Web Proxy

If a Web Proxy Server is necessary for your environment, select ‘Configure web proxy’ and enter the hostname and credentials for that server.

Phone Home Service

The support and phone home bundles contain metadata from the Delphix Engine, but do not include the customer data that has been ingested into the engine. Redaction of known PII data (e.g. names and email addresses for Delphix users) is done on-engine before bundles are uploaded, and again after bundles are uploaded to Delphix to ensure that the latest redaction rules are applied to each bundle without requiring the engine to be continually upgraded. There may be some limited environment data in the bundle (e.g., IP addresses and database names) that are needed for debugging purposes. Support bundles are automatically deleted within 30 days after the support case is closed, or 30 days after upload, whichever comes later.

Enabling/DisablingPhonehome

Enabling this option sends information to Delphix periodically over HTTPS (SSL). This data is securely managed by the internal team for product analysis and improvements. This feature requires a connection to the internet and will use the Web Proxy Server configuration.

Perform the following steps to enable/disable phonehome.

1. Login to the Delphix Virtualization engine setup using the sysadmin credentials.
2. From the Serviceability widget, click Modify.
3. To enable phonehome, select the checkbox before the Enable phone home service option. If you enable this option, this service will automatically send a stream of anonymous, non-personal metadata describing user interaction with the product's user interface. 
4. To disable, deselect the checkbox before the Enable phone home service option.
5. Click Save to save your settings.

User-click Analytics

User-click Analytics is a lightweight method to capture how users interact with Delphix product user interfaces, allowing Delphix to collect browser-based, user-click data. Delphix does not collect, transmit or store any personally identifiable information (PII) such as email addresses, IP addresses, usernames, etc.

SMTP

Select Use an SMTP Server and enter the server name or IP address to enable email notifications for events and alerts.

When a critical fault occurs with the Delphix Engine, it will automatically send an email alert to the admin user. Make sure that you configure the SMTP server so that alert emails can be sent to this user. See System Faults for more information.

Authentication

In the Authentication page, you can configure authentication protocol such as LDAP and SAML/SSO. See User and Authentication Management for further details.

LDAP

To avoid configuration issues, consult with your lightweight directory access protocol (LDAP) administrator before attempting to set up LDAP authentication of users for the Delphix Engine.

When configuring LDAP, you must provide an LDAP Server. We currently support two authentication methods: SIMPLE and DIGEST_MD5.

Select whether you want to Protect LDAP traffic with SSL/TLS. If you select this option, you must import the server certificate.

If LDAP has been set up as an authentication service for the Delphix Engine, you must add new users with LDAP as their authentication mechanism. For more information, see User Groups. 

SAML/SSO

To enable SAML/SSO, there are two properties you must set: 

1. Audience Restriction: The audience restriction must be set to the entity id configured in the Delphix Server via the Delphix Setup. Its default value is https://<Delphix Server ID>, where <Delphix Server ID> is a 36-character hexadecimal string of the form xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxx. See Determining the Delphix Server ID and Host Name for more on the Delphix Server ID. If the Delphix Engine does not exist or is unreachable, you can enter a temporary value (such as delphix-sp-id) which must later be replaced by the actual Delphix Server ID.
2. IdP Metadata: an XML document which must be exported from the application created in your IdP. Paste its contents into the provided field.

Kerberos

The Kerberos page allows you to use Kerberos authentication to communicate between hosts connected with Delphix. Enabling this option will allow Kerberos key-based authentication when adding new environments to Delphix.

1. Realm: the domain over which a Kerberos authentication server has the authority to authenticate a user, host or service.
2. Principal: a unique identity to which Kerberos can assign tickets.
3. Keytab: a file containing pairs of Kerberos principals and encrypted keys (which are derived from the Kerberos password).

Registration

As described in Registration Management, registration allows Delphix Support to access the engine and properly diagnose and identify any issues during support cases.

If the Delphix Engine has access to the internet, then you can auto-register the Delphix Engine with your Delphix Support credentials in the ‘Online Registration’ section.

If external connectivity is not immediately available, you must perform manual registration.

1. Copy the Delphix Engine registration code displayed.
2. Transfer the Delphix Engine's registration code to a workstation with access to the external network Internet. For example, you could e-mail the registration code to an externally accessible email account.
3. On a machine with access to the internet, use your browser to navigate to the Delphix Registration Portal at http://register.delphix.com.
4. Login with your Delphix support credentials.
5. Paste the Registration Code.
6. Click Register.

Summary

The final summary tab will enable you to review your configurations for each page in the setup tutorial. Confirm that everything looks correct, and click submit to complete the setup.

After Setup

• After the configuration is complete, the Delphix Engine will restart and launch the browser-based Delphix Management application.
• After the Delphix Management application launches, the admin can login using the initial default username admin and the initial default password delphix.  On the first login, you will be prompted to change the initial password.

Related Topics

• Customizing the Delphix Engine System Settings