Deploy Tenable Core in Microsoft Azure via the CLI

You can use the Microsoft Azure command line interface (CLI) to deploy Tenable Core in your Azure environment. This method allows for a scripted, repeatable deployment process and enables you to automatically link the instance to Tenable Vulnerability Management during the initial boot.

It is typically simplest to create and configure Tenable Core + Tenable Web App Scanning using the Microsoft Azure portal, as described in Deploy Tenable Core in Microsoft Azure via the Portal.

In some cases, you may prefer to use the Microsoft Azure command line interface (CLI) to deploy Tenable Core in Azure.

Before you begin:

  • Confirm your environment supports your intended use of the instance, as described in System Requirements.

  • Confirm your internet and port access supports your intended use of the instance, as described in Access Requirements.

  • Locate and secure your Tenable Nessus scanner linking key in the Add Nessus Scanner menu of Tenable Vulnerability Management (Settings > Sensors > Linked Scanners > Add Nessus Scanner).

    For more information about linking keys, see Link to Tenable Vulnerability Management in the Tenable Nessus User Guide.

To deploy a Tenable Core + Tenable Web App Scanning virtual machine via the Azure CLI:

  1. In a text editor, open a new file.

  2. If you want Tenable Core + Tenable Web App Scanning  to link automatically to Tenable Vulnerability Management on first boot, copy and paste the following configuration variables:

    #cloud-config

    runcmd:

    # Link WAS to Tenable Vulnerability Management

      -

        - /usr/libexec/tenablecore/was_rest_client.py

        - --set-link

        - --iohost=https://sensor.cloud.tenable.com

        - --linkkey $YOUR_LINKING_KEY

        - --scanner-name$YOUR_NAME

  3. Save and close the configuration file.
  4. Log in to the Azure CLI.

  5. In the Azure CLI, run the az vm create command to deploy the file, using the following variables (for example):

    Tip: For more information about the Azure CLI, see the Microsoft Azure CLI Documentation.

    The system deploys your Tenable Core + Tenable Web App Scanning virtual machine.

What to do next:

  • Continue getting started with Tenable Core + Tenable Web App Scanning, as described in Get Started.