Installation with Default TLS
This installation process installs the following Tenable Identity Exposure components in default TLS mode without peer verification and with self-signed certificates.
At each installation or upgrade, Tenable Identity Exposure generates a new self-signed certificate. The validity period for the certificate is 3650 days. After the installation or upgrade, the certificates are located at C:\Tenable\Tenable.ad\DefaultPKI\Certificates.
Order of installation
Install the components in the following order:

-
On the local machine, run the installation file Tenable.ad_v3.29.x.exe.
A welcome screen appears.
-
In the setup language box, click the arrow to select the language for the installation, and click Next.
The Setup Wizard appears.
-
Click Next.
Note: Do not select the "Expert Mode" checkbox.
The Custom Setup window appears.
-
Deselect the Security Engine Nodes and Directory Listener components.
Note: Tenable strongly recommends that you keep the default TENABLE instance name.
-
Click Next.
The Ready to Install window appears.
-
Click Install to begin the installation.
After the installation completes, the Completing the Tenable.ad Setup Wizard window appears.
-
Click Finish.
A dialog box asks you to restart your machine.
-
Click No.
Caution: Do not restart the machine now. -
Install the Security Engine Node.

-
On the local machine, run the installation file Tenable.ad_v3.29.x.exe.
A welcome screen appears.
-
In the setup language box, click the arrow to select the language for the installation, and click Next.
The Setup Wizard appears.
-
Click Next.
Note: Do not select the "Expert Mode" checkbox.
The Custom Setup window appears.
-
Deselect the Storage Manager and Directory Listener components.
Note: To install SEN services over several machines, see Split Security Engine Node (SEN) Services.
-
Click Next.
The Storage Manager window appears.
-
Provide the following information:
-
In the MSSQL box, type the IP address of the Storage Manager.
-
In the Password box, type the service account password for the MSSQL database defined in the Storage Manager installation.
Note: The installer requires an SA password with the syntax described in Strong Passwords for the SQL Server.
-
-
Click Next.
The Security Engine Node window appears.
-
In the DNS name or IP box, type the DNS name (preferred) or IP address of the web server that end users enter to access Tenable Identity Exposure.
Note: By default, the installation process creates a self-signed certificate with the DNS name or the IP address that you entered. For more information, see Change the IIS Certificate.
-
Click Next.
The Ready to Install window appears.

-
On the local machine, run the installation file Tenable.ad_v3.29.x.exe.
A welcome screen appears.
-
In the setup language box, click the arrow to select the language for the installation, and click Next.
The Setup Wizard appears.
-
Click Next.
Note: Do not select the "Expert Mode" checkbox.
The Custom Setup window appears.
-
Deselect the Storage Manager and the Security Engine Nodes components.
-
Click Next.
The Security Engine Node window appears.
-
In the IP box for RabbitMQ, type the address of the Security Engine Node hosting RabbitMQ.
-
Click Next.
The Ready to Install window appears.
See also