> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-1.-install-cortex-xsoar.md). # Step 1. Install Cortex XSOAR To install a Cortex XSOAR 8 tenant, you need to log into Cortex Gateway, which is a portal for downloading the relevant image file and license. If you have multiple or development tenants, you must repeat this task for each tenant. #### Before you begin * Create a Customer Support Portal (CSP) account. You need to set up your CSP account. For more information, see [How to Create Your CSP User Account](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNVCA0). When you create a CSP account you can set up two-factor authentication (2FA) to log into the CSP, by using an Email, Okta Verfiy, or Google Authenticator (non-FedRAMP accounts). For more information, see [How to Enable a Third Party IdP](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZ8mCAE). * Verify you have one of the following roles assigned: | Role | Details | | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | CSP role | The Super User role is assigned to your CSP account. The user who creates the CSP account is granted the Super User role. | | Cortex role |

You must have the Account Admin role.

If you are the first user to access Cortex Gateway with the CSP Super User role, you are automatically granted Account Admin permissions for the Cortex Gateway. You can also add Account Admin users in Cortex Gateway if required.

| * Plan whether to install a standalone or a cluster. Cortex XSOAR supports a single node (standalone) or a three-node cluster deployment. A two-node configuration is not supported. Cluster installation is suitable for production environments involving large-scale data, and offers scalability and High Availability. Standalone is more suitable for small-scale data scenarios. For more information, see [Installation overview](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/cortex-xsoar-installation.md). * Review the [System Requirements](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/system-requirements.md) for installation. * Have a basic understanding of how to deploy OVA or VHD file formats. * Add DNS records that point the following host names to the cluster IP address. | FQDN | Details | | ------------ | ------------------------------------------------------------------------------------------------------------ | | Cluster FQDN | The Cortex XSOAR DNS name for accessing the UI. For example, `xsoar.mycompany.com`. | | API-FQDN | The Cortex XSOAR DNS name that is mapped to the API IP address. For example, `api-xsoar.mycompany.com`. | | ext-FQDN | The Cortex XSOAR DNS name that is mapped to the external IP address. For example, `ext-xsoar.mycompany.com`. | How to install Cortex XSOAR 1. From the Cortex Gateway, in the **Available for Activation** section, use the serial number to locate the tenant to download. 2. Click **Download On Prem**. 3. If you want to use a production and development tenant with a private remote repository, select **Dev**. If you don't select it now, you can install a development tenant at a later stage. 4. Download one of the following image files. * **OVA**: Supported by VMWare, AWS, and OCI. * **VHD**: Supported by Microsoft Hyper-V. You can deploy a single node (standalone) or a cluster (three nodes). 5. Depending on the image file and the platform you want to deploy on, do one of the following: * [Install Cortex XSOAR on a VM deployed on AWS](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-aws.md) * [Install Cortex XSOAR on a VM deployed on OCI](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-oci.md) * [Install Cortex XSOAR on a VM deployed on Hyper-V](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v.md) * [Install Cortex XSOAR on a VM deployed on VSphere](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-vsphere.md) * [Install Cortex XSOAR on a VM deployed on KVM](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm.md)

Important

In the textual UI menu, when you reach the Cluster Installation stage, select Enterprise in the Installation Mode field. You must select this mode when installing production or development tenants.

6. After installation, add the Cortex XSOAR license. You have two licenses for each environment when you download the image file. Each must be uploaded separately to the respective tenant. 1. Go to **Settings & Info** → **Cortex XSOAR License**. 2. In the **Upload License** section, drag and drop your license file. The license file is in JSON format. For more information, see [Add the Cortex XSOAR license](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation/add-the-cortex-xsoar-license.md). 7. Optionally perform post-installation maintenance, including: * Scaling up hardware resources * Using your own X.509 certificate for a secure HTTP connection * Disabling SSL verification to use a self-signed certificate for multi-tenant or remote repository requests between development and production tenants For more information, see [Post-installation](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/post-installation.md). 8. If you selected **Dev**, on the development tenant, do the following: 1. Install the image file you downloaded in step 4.

Note

You are not restricted to using the platform installed on the production tenant. For example, if you have downloaded an OVA file and installed the VM on AWS in the production tenant, you can install the VM on OCI in the development tenant.

2. Add the Cortex XSOAR license. For more information about setting up a remote repository, see [Set up a private remote repository](/cortex-xsoar-8-on-prem/8.12/configure-cortex-xsoar/remote-repository-management/set-up-a-private-remote-repository.md). For more information, see [Cortex XSOAR Installation](/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/cortex-xsoar-installation.md). --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.12/onboard-cortex-xsoar/deployment-steps/step-1.-install-cortex-xsoar.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.