# Installation Process

---

#### System Requirements

<p class="callout info">**Mandatory conditions for work with SafeUTM:** 1. UEFI support.  
2. Turn off Legacy boot mode, it may be called CSM (Compatibility Support Module).  
3. Turn off the Secure Boot option in UEFI.  
</p>

<table id="bkmrk-hardware-minimum-sys" style="width: 104.568%;"><tbody><tr><td style="width: 15.9456%;" width="132">**Hardware**

</td><td style="width: 38.4392%;" width="284">**Minimum system requirements**

</td><td style="width: 45.6152%;" width="208">**Note**

</td></tr><tr><td style="width: 15.9456%;" width="132">Processor

</td><td style="width: 38.4392%;" width="284">Intel Pentium G/i3/i5/Xeon

E3/Xeon E5 with SSE 4.2 instructions support

</td><td style="width: 45.6152%;" width="208">Requirements may differ depending on network load and services used, as well as content filtering, antiviruses, and intrusion prevention system. The system requires at least 2 cores; a 4-core processor is better.

</td></tr><tr><td style="width: 15.9456%;" width="132">RAM

</td><td style="width: 38.4392%;" width="284">8 Gb (16Gb if the number of users is over 75)

</td><td style="width: 45.6152%;" width="208">Requirements may differ depending on network load and services used, as well as content filtering, antiviruses, and intrusion prevention system.

</td></tr><tr><td style="width: 15.9456%;" width="132">Disk subsystem

</td><td style="width: 38.4392%;" width="284">HDD or SSD, capacity 64 Gb or more, with SATA, SAS. Additional HDD or SSD when using a mail server is required.

</td><td style="width: 45.6152%;" width="208">Software RAID controllers are not supported (those integrated into the chipset or motherboard). Using hardware RAID controllers is not recommended.

</td></tr><tr><td style="width: 15.9456%;" width="132">Network adapters

</td><td style="width: 38.4392%;" width="284">One network adapter

</td><td style="width: 45.6152%;" width="208">Gigabit (or 10G) Intel network cards are recommended.

</td></tr><tr><td style="width: 15.9456%;" width="132">Additional

</td><td style="width: 38.4392%;" width="284">Display and keyboard

</td><td style="width: 45.6152%;" width="208">No preinstalled OS or additional software is required to install and run SafeUTM. SafeUTM is installed to a dedicated server from an installation USB-flash, a file system is automatically created and all necessary components are installed.

</td></tr></tbody></table>

<p class="callout info">In order to choose the best hardware platform for you please follow the [**guidelines**](https://docs.safedns.com/books/6-instructions-and-troubleshooting/page/choosing-hardware-platform-for-safeutm) on equipment choice for SafeUTM. The approximate hard drive capacity to store the information of about 1000 users for 1 year is 10-15 Gb.</p>

##### Browser support for server administration web interface

All up-to-date versions of Firefox, Chrome, and browsers based on Chromium are supported. Internet Explorer is not supported.

##### Hypervisor support

Microsoft Hyper-V (2<sup>nd</sup> generation, Windows 2012R2 or higher), VMware, VirtualBox, KVM, Citrix XenServer. More information can be found [**here**](https://docs.safedns.com/books/3-installation/page/setting-up-hypervisors).

##### Configuration examples

Examples of several types of configurations depending on the number of users can be seen in the table below.

<table id="bkmrk-hardware-25-50-200-2" style="width: 117.531%;"><tbody><tr><td style="width: 16.81%;" width="104">Hardware

</td><td style="width: 16.1937%;" width="104">25

</td><td style="width: 17.0581%;" width="104">50-200

</td><td style="width: 16.6873%;" width="104">200-500

</td><td style="width: 16.6873%;" width="104">1000

</td><td style="width: 16.6873%;" width="104">2000

</td></tr><tr><td style="width: 16.81%;" width="104">Processor

</td><td style="width: 16.1937%;" width="104">Intel Pentium Gold G5400 or compatible

</td><td style="width: 17.0581%;" width="104">Intel i3 8100 or compatible

</td><td style="width: 16.6873%;" width="104">Intel i5, i7, Xeon E3, 3 GHz and up, or compatible

</td><td style="width: 16.6873%;" width="104">Intel Xeon E3, E5 or compatible

</td><td style="width: 16.6873%;" width="104">Intel Xeon or compatible 8-core one

</td></tr><tr><td style="width: 16.81%;" width="104">RAM

</td><td style="width: 16.1937%;" width="104">8 Gb

</td><td style="width: 17.0581%;" width="104">8 Gb

</td><td style="width: 16.6873%;" width="104">16 Gb

</td><td style="width: 16.6873%;" width="104">16 Gb

</td><td style="width: 16.6873%;" width="104">32 Gb

</td></tr><tr><td style="width: 16.81%;" width="104">Storage space

</td><td style="width: 16.1937%;" width="104">64 Gb

</td><td style="width: 17.0581%;" width="104">64 Gb

</td><td style="width: 16.6873%;" width="104">250 Gb

</td><td style="width: 16.6873%;" width="104">500 Gb

</td><td style="width: 16.6873%;" width="104">500 Gb

</td></tr><tr><td style="width: 16.81%;" width="104">Network adapters

</td><td style="width: 16.1937%;" width="104">2 pcs.

</td><td style="width: 17.0581%;" width="104">2 pcs.

</td><td style="width: 16.6873%;" width="104">2 pcs.

</td><td style="width: 16.6873%;" width="104">2 pcs.

</td><td style="width: 16.6873%;" width="104">2 pcs.

</td></tr></tbody></table>

**Performance data:**

Configuration example: Intel Xeon E-2234, 16 GB DDR4, 1 GB LAN.

- Mode L3: TCP up to 1 Gbps, UDP up to 1 Gbps, HTTP up to Gbps.
- **\***Mode L7: TCP up to 550 Mbps, UDP up to 900 Mbps, HTTP up to 500 Mbps.

**\*** - Mode L7: IPS modules, content filtering, application control, and antivirus scan are on.

---

#### Installation Options

You can install SafeUTM on a dedicated server or a virtual machine. It depends on the expected load and equipment capacity.

##### SafeUTM installation from a USB flash drive

SafeUTM can be installed from a flash drive by using an installation ISO file. This process is described in the [**Creation of boot USB flash drive**](https://docs.safedns.com/books/3-installation/page/creating-a-usb-flash-startup-disk) article.

##### Installation on a dedicated server

In order to install the SafeUTM security gateway you need to follow these steps:

1. Prepare hardware in accordance with technical requirements.
2. Prepare a USB-flash drive with a capacity of over 2 Gb.
3. Receive the ISO file from your manager.
4. For safety reasons check the downloaded file checksum, which you can find on the SafeUTM downloads page in your personal account.
5. Create the bootable USB-flash drive using the ISO file.
6. In the computer’s BIOS settings choose "boot from USB-flash drive" and start the system installation from this USB drive. SafeUTM installer should appear on the screen as seen below.

---

#### Installation Process

##### Stage 1. Start of installation

[![image-1662310641685.png](https://docs.safedns.com/uploads/images/gallery/2022-09/scaled-1680-/R7B4NfISSEn2t4Ac-image-1662310641685.png)](https://docs.safedns.com/uploads/images/gallery/2022-09/R7B4NfISSEn2t4Ac-image-1662310641685.png)

Choose a disk for installation. To do this, enter the number of the disk you wish to use and press **Enter**.  
[![2. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/eUNm99SfrHZd5F1r-2-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/eUNm99SfrHZd5F1r-2-installation-process.png)

The system will warn about the loss of all data stored on the disk. We recommend that you make sure the disk does not contain any important information, as it will not be possible to recover it. The data loss alert can be seen in the screenshot below. To continue, type **y** and press **Enter**.

Now you need to select the time zone. Select the time zone you are in. To do this, type **y** and press **Enter**.  
[![3. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/bQGpPF3fkNfRqQj6-3-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/bQGpPF3fkNfRqQj6-3-installation-process.png)

In the next dialog box, you need to set up a date and time. If the settings are correct, type **y** and press **Enter**.

If the current settings are incorrect, type **n** and put in the correct data, then press **Enter**.  
[![4. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/dLwKTXCt9tsLy84A-4-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/dLwKTXCt9tsLy84A-4-installation-process.png)

Then the system will perform disk subsystem tests necessary for installation:

- A partition table will be created and formatted.
- System files will be copied onto the disk.
- Basic system settings will be configured according to your computer configuration.

<p class="callout info">Don’t forget to eject the USB drive when restarting UTM so that the system doesn’t start booting from the installation drive.</p>

After the server restarts, you will see a window with system info. An example of such a window can be seen below. To continue press any key.  
[![5. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/Hffo93zoAYIoTQqx-5-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/Hffo93zoAYIoTQqx-5-installation-process.png)

If you want to configure the server as the second node of the cluster, press **y** and then **Enter**. For more information about configuring clustering, see the **[High Availability](https://docs.safedns.com/books/47-setup-server-management/page/high-availability)** article.

If the clustering setup is not required, press **n** and then **Enter**.

##### Stage 2. Creating admin’s account

Create an admin account. After typing in login press **Enter** and type in a new account password, then press **Enter**.

Admin password requirements:

- Minimum 10 symbols.
- Upper- and lower-case Latin letters.
- At least one digit
- Special characters (! # $ % &amp; ' \* + etc.)

[![6. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/HQAydRsiUNzdA8dS-6-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/HQAydRsiUNzdA8dS-6-installation-process.png)

**If the password does not pass the security policy requirements, a notification about password unreliability will appear.** You need to type in another password taking into consideration password requirements and press **Enter**.  
[![7. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/W1kurtEBjngLPgF9-7-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/W1kurtEBjngLPgF9-7-installation-process.png)

When the account has been created, press any key to switch to the local menu and type in data from the newly created admin’s account.  
[![8. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/WwxY9hRzwLV00Nys-8-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/WwxY9hRzwLV00Nys-8-installation-process.png)

##### Stage 3. Network adapter setup

Now the system will suggest that you set up a local network interface. It is the interface to which all your enterprise network will be connected. Type in the network adapter number from the list and press **Enter**.

<p class="callout info">During local interface definition, you may encounter difficulties with NIC identification. Sometimes several adapters may have the same manufacturer. In such a case in order to avoid a mistake, you need to identify the device by its MAC address. Do not worry about making a mistake, you can change these settings later.</p>

[![9. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/yGdM3aA29Sao6OUm-9-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/yGdM3aA29Sao6OUm-9-installation-process.png)

Type in the local IP address subnet mask as `ip/mask` and press **Enter**.  
Next, if necessary, create a VLAN tag or leave the field empty and press **Enter**.  
[![10. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/dLCbZzHh3VJES6ja-10-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/dLCbZzHh3VJES6ja-10-installation-process.png)

After creating a local interface, the server administration menu will open.  
[![11. Installation Process.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/n97fm35825SkQpq5-11-installation-process.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/n97fm35825SkQpq5-11-installation-process.png)

<div class="pointer-container" id="bkmrk-%C2%A0-0"><div class="pointer anim is-page-editable"><svg class="svg-icon" data-icon="link" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg><div class="input-group inline block"> <button class="button outline icon" data-clipboard-target="#pointer-url" title="Copy Link" type="button"><svg class="svg-icon" data-icon="copy" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg></button></div><svg class="svg-icon" data-icon="edit" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg></div></div>The next step is SafeUTM configuration. This process is described in the [**Initial configuration**](https://docs.safedns.com/books/3-installation/page/initial-configuration) article.