Careful preparation of even simple steps is a prerequisite for successful installation
Have login information ready
When operating on a modem or fiber optic connection:
Have login information of the Internet service provider ready
Who has the current login information of the ISP?
Is the login information available at the installation site?
Is the login information available at the time of installation?
if applicable: Is the person who has the login information available at the time of installation?
When operating with a router:
What is the IP address of the router?
Can the UTM get a fixed IP?
For new installations, DHCP is activated on the external interface
Local network:
What is the network IP of the local network(s)?
Which IP addresses should the interfaces of the UTM in these networks receive? As a rule, this should always be a fixed IP address!
Prepare firmware update
notempty
Why should a firmware update be done?
If an existing configuration file is to be used, the installed firmware version must be identical or newer.
Latest features and patches are available immediately. Several firmware versions may have been released between the manufacturing and delivery.
Damage due to manipulation of the firmware in transit (unlikely, but not impossible) can thus be excluded.
A USB stick with the UTM image is required. This Securepoint Imaging Tool can be used. (Resellerportal → Menu Downloads → Tools x )
Connect keyboard and monitor
Monitor connection type see table below the figure
v12 is mandatory, as some of the hardware installed in the G5 units is not supported by v11
When installing/updating via USB stick, use the image first UTM v12.x - Interactive installation UTM Software v12 - USB-Image (not Autoinstall or Autoupdate)
The prepared USB stick must be connected to the UTM
Switch on the UTM
Under Save & Exit execute Restore Defaults The USB stick should then be listed at the top of the boot menu of the device, preceded by the TAG UEFI
Execute under Save & ExitSave Changes and Reset
Perform installation/ update
Installing the firmware
The firmware is installed in just a few steps. The preselection options only need to be confirmed.
Display and confirmation of the license conditions
Decision as to whether an upgrade should be carried out Default: Upgrade
Selection of the hard disk on which the firmware is to be installed
After the system has been started from the installation medium, the license conditions are displayed first. These should be read carefully. Click on Continue to be redirected to the next dialog to agree to the terms and conditions.
Installation step 2
The conditions must be accepted in order to continue with the installation. If the conditions are not accepted or the No button is clicked, the installation is aborted. The installation is continued by accepting the conditions and confirming with Yes .
Installation step Intermediate step
If the UTM software V11 is already installed on the device, either an update can be carried out via Upgrade or a new installation via Overwrite.
Installation step 3
The next step is to select a hard disk on which the operating system is to be installed
Installation step 4
After a hard disk has been selected, the installation must be confirmed again. If the decision has been made to carry out the installation on the displayed hard disk, this is confirmed with Yes.
Installation step 5
Information on the current progress is provided during the installation
Installation step 6
If the installation was successful, a corresponding dialog will draw attention to this. Clicking on the OK button completes the installation.
Installationsschritt 7
The installation disk must now be removed and the system then restarted. If the installation was successful, the console login is displayed after the restart.
RC400R (G5) Without expansion cards Port assignment as printed on the unit casing
If administration via the CLI is not an issue, the IP adresses can be provided directly to the UTM via CLI
In this case, the monitor and keyboard remain directly connected to the UTM. The login is done on the console.
To be able to administer the UTM, the admin interface must be accessed via the IP of the UTM and the port of the admin interface via the interface LAN2.
In the factory settings, the UTM can be reached via https://192.168.175.1:11115. If the IP or the interface cannot be reached from the local network, changes must be made.
Connecting keyboard and monitor directly to the UTM
Log in to the UTM: Usernameadmin / Password: insecure
Determine the ID of the IP addresses: interface address get LAN2 corresponds to the internal interface through which the admin interface can be reached. The ID is needed for changing the IP address in the next step.
Change the interface IPs: interface address set id 1 address 192.168.12.1/24 system update interface (desired IP of the internal network with subnet mask)
Activate an interface: interface address new device LAN1 or A0 address 192.168.x.y/24 system update interface
Set up administration access: In the factory settings, access to the admin interface of the UTM is only possible via the internal interface LAN2. If the admin interface is to be accessible via another interface, the IP of the host (or a net IP with subnet mask) must be released: manager new hostlist 192.168.168.0/24 system update rule Here: All hosts in the network 192.168.168.0 (no matter at which interface) can access the admin interface Attention: If e.g. the IP 192.168.175.1 is at LAN1 or A0 and the admin interface should be called from a computer in the network at LAN1, the IP 192.168.175.x must be released extra nevertheless.
Adjust the IP address of your own computer
The IP address of your own computer is temporarily adapted to the default network of the internal interface of the UTM.
This is followed by connecting your own computer to interface A1 (the internal interface) of the UTM.
The correct interface can be seen in the figure and table above.
Configure IPv4:Manuell select in the dropdown menu
IP address:192.168.175.2
Subnet mask:255.255.255.0
Router:192.168.175.1 (=Default address of the internal interface of the UTM)
Button:Apply
notempty
After finishing the installation wizard and rebooting, the UTM is located in another network. For further configuration, the IP address of your own computer must then be changed again.
Setting the original IP address:
Fixed IP Addresses: Enter as described above
Enable DHCP:
Windows: Properties Internet Protocol Version 4 (TCPIPv4) → select Obtain an IP address automatically
Linux: Example for Ubuntu: sudo ip address del 192.168.175.2/24 dev enp0s3 sudo dhclient enp0s3 If necessary, refer to the documentation of the distribution used.
MAC: coming soon...
First access
If not already done, the following connections must be made now physically:
Connect interface for the external interface (A0) towards the Internet (modem, router, etc.).
Connect the internal interface (A1)
with your own computer, if the IP address has been adjusted on it.
to the network from which the UTM is to be administered, if the IP address of the UTM has been adjusted.
The admin interface is available at port 11115. Access: https://192.168.175.1:11115(Default) or https://172.16.0.1:11115, if the IP address of the UTM was changed to 172.16.0.1
When the admin interface is called up for the first time, a certificate warning appears in the browser. Since the browser doesn't know the certificate of the UTM, a security warning is issued. This warning must be ignored.
Message in Firefox: Warning: Potential security risk ahead Button Advanced / Accept the risk and continue
Message in Chrome / Chromium: This is not a secure connection. At the end click on Continue to IP address (unsure) .
Message in Edge: Your connection isn't private. At the end click on Continue to IP address (unsure) .
Message in Safari: Button Show details / Link Open this website
First registration
Caption
Value
Description
UTM-Login (noch nicht lizensiert)
User
admin
Login with the default login information of the factory settings: admin
Password
insecure
Login with the default login information of the factory settings: insecure
Login (admin)
Agree to license agreement and privacy policy
Accept
The license agreement and privacy policy must be accepted by clicking the button.
Datenschutzerklärung UTM DeclineAcceptThe privacy policy must be agreed to. Lizenzvereinbarung UTM DeclineAcceptThe license agreement must be agreed to.
Basic configurations
Firewall name
firewall.ttt-point.local
An individual firewall name must be assigned.
The name should correspond to an FQDN.
Basic configurations UTMuser@firewall.name.fqdn License agreementLog out
Basic configurations
The fields displayed may vary depending on what information is already available on the UTM
System time
yyyy-mm-dd hh-m--ss
The system time should be correct. It is compared with other servers, e.g. for user authentication (Kerberos, OTP, etc.). If the deviation is too large, for example, login will not be possible.
License key
Browse...
Import valid license.
Each license key may only be used once. The UTM is identified via this and various services and configurations are assigned via the license key.
Global email address:notempty
New as of v12.4.4
admin@ttt-point.de
Required information e.g. for the mail connector and the proxy. Also serves as postmaster address for the mail relay.
Authentication method:notempty
New as of v12.5.1
PIN (recommended)Login mask
Authentication method for Web sessions via USC The web session PIN also secures the use of the following actions within the scope of the USC:
Reboot
Shutdown
Factory settings
Importing cloud backups
If the PIN is not used, these actions cannot be called up from the Unified Security Portal.
Starts a tour that explains the admin interface and menus in 15 steps.
Configure interfaces
notempty
New as of v12.7.0
Do you want to configure the interfaces now?
Yes No
This message appears if not all existing interfaces are configured correctly. However, it is recommended to do this to prevent possible problems. The Yes button opens the network configuration directly.
Do not ask again.
Off
If this message is not desired, it can be set here so that it is not displayed again.
The privacy policy must be agreed to. UTM 
The license agreement must be agreed to.
Welcome dialog
