> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-1.-install-cortex-xsoar.md). # Step 1. Install Cortex XSOAR To install a Cortex XSOAR 8 tenant, you need to log into Cortex Gateway, which is a portal for downloading the relevant image file and license. If you have multiple or development tenants, you must repeat this task for each tenant. #### Before you begin * A Customer Support Portal (CSP) account. You need to set up your CSP account. For more information, see [How to Create Your CSP User Account](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNVCA0). When you create a CSP account you can set up two-factor authentication (2FA) to log into the CSP, by using an Email, Okta Verfiy, or Google Authenticator (non-FedRAMP accounts). For more information, see [How to Enable a Third Party IdP](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZ8mCAE). * You have one of the following roles assigned: | Role | Details | | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | CSP role | The Super User role is assigned to your CSP account. The user who creates the CSP account is granted the Super User role. | | Cortex role |

You must have the Account Admin role.

If you are the first user to access Cortex Gateway with the CSP Super User role, you are automatically granted Account Admin permissions for the Cortex Gateway. You can also add Account Admin users in Cortex Gateway if required.

| * Review the [System Requirements](/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements.md) for installation. * Have a basic understanding of how to deploy OVA or VHD file formats. * Add DNS records that point the following host names to the cluster IP address. | FQDN | Details | | ------------ | -------------------------------------------------------------------------------------------------------------- | | Cluster FQDN | The Cortex XSOAR DNS name for accessing the UI. For example, `xsoar.mycompany.com`. | | API-FQDN | The Cortex XSOAR DNS name that is mapped to the API IP address. For example, `api-xsoar.mycompany.com`. | | ext-FQDN | : The Cortex XSOAR DNS name that is mapped to the external IP address. For example, `ext-xsoar.mycompany.com`. | #### Install Cortex XSOAR 1. From the Cortex Gateway, in the **Available for Activation** section, use the serial number to locate the tenant to download. 2. Click **Download On Prem**. 3. If you want to use a production and a development tenant with a private remote repository, select **Dev**. If you don't select it now, you can install a development tenant later. 4. Download one of the following image files. * **OVA**: Supported by VMWare. * **VHD**: Supported by Microsoft Hyper-V. You can deploy a single node (standalone) or a cluster (three nodes). 5. Depending on the image file, do one of the following: * [Install Cortex XSOAR from an OVA image](/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-from-an-ova-image.md) * [Install Cortex XSOAR from a VHD image](/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-from-a-vhd-image.md) 6. After installation, add the Cortex XSOAR license. When you download the image file, you have two license files for each environment. Each must be uploaded separately to the respective tenant. 1. Go to **Settings & Info** → **Cortex XSOAR License**. 2. In the **Upload License** section, drag and drop your license file. The license file is in JSON format. For more information, see [Add the Cortex XSOAR license](/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/add-the-cortex-xsoar-license.md). 7. Optionally perform post-installation maintenance, including scaling up hardware resources and using your own X.509 certificate for a secure HTTP connection. 8. If you want to install a development machine, install the image files on the development virtual machine. For more information, see [Cortex XSOAR Installation](/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/cortex-xsoar-installation.md). --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.6/onboard-cortex-xsoar/onboard-and-configure-cortex-xsoar/step-1.-install-cortex-xsoar.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.