On-Premises PCE Build

The On-Premise PCE Build add-on installs the on-premise Policy Compute Engine (PCE) and brings it online, following the design produced in the On-Premise PCE Design and Architecture add-on.

The design phase identifies the required server configuration. The PCE build package carries out that design. Illumio Professional Services prepares the customer-provisioned servers for PCE installation, installs the PCE software, completes the required configuration, and brings the cluster up.

A PCE installation depends on correct capacity sizing, storage partitions, load balancing, DNS, TLS certificates, email, and a set of operating system dependencies and settings. Errors in any of these can stop the PCE from starting or cause it to run unreliably. PS works through each prerequisite, installs the PCE, and verifies that the cluster is working.

The engagement is complete once the PCE databases are online and administrators can log in to the PCE web console. At that point the platform is ready for Platform Foundation Deployment activities such as SSO, logging integration, and VEN onboarding.

Package Dependencies

On-Premise PCE Design and Architecture, or an equivalent approved PCE design  

Technical Readiness

• Servers or VMs provisioned to the approved design, with the specified CPU, RAM, storage, and IOPS
• Storage device partitions configured as specified
• Supported operating system installed on each node
• Root or equivalent administrative access for Illumio Professional Services
• IP addresses assigned for the PCE
• DNS domain names configured
• Load balancer in place for multi-node clusters
• TLS/SSL certificates obtained to the required types and settings
• Mail (SMTP) service available
• Required PCE ports open, including reserved port ranges for multi-node clusters
• PCE software packages available
• SAML identity provider details, where applicable  

Customer Readiness

• Project manager or primary point of contact assigned
• Readiness checklist from the design phase completed
• Server, network, load balancer, DNS, and certificate administrators available during the build window
• Change approvals in place for the build window
• Full organization name confirmed for PCE configuration

Pre-Installation Validation

• Confirm that the provisioned servers or VMs match the approved design.
• Confirm capacity, storage partitions, IP addressing, DNS, load balancing, certificates, and mail readiness.
• Confirm that required ports and network paths are open.
• Confirm administrative access and permissions on each node.
• Identify any remaining gaps and the customer actions needed to close them.

Customer Outcome

The customer knows its environment meets PCE installation requirements before installation starts, which reduces the risk of rework or a failed build.

Server Preparation

• Install the required operating system package dependencies and libraries on each node.
• Configure operating system settings required by the PCE, including NTP, iptables, UTF-8 locale, trusted CA, syslog, process and file limits, and kernel parameters.
• Check file and directory permissions required by the PCE.

Customer Outcome

Each node is prepared to Illumio's installation requirements and ready for the PCE software.

PCE Installation and Configuration

• Install the PCE and UI software packages on each node.
• Configure the PCE runtime environment according to the approved design, including node roles, cluster configuration, and FQDN.
• Install and configure TLS certificates.
• Configure mail settings.
• Complete initial cluster configuration and create the initial administrative account.
• Troubleshoot installation issues within the Illumio software.

Customer Outcome

The PCE software is installed and configured on every node according to the approved design.

Build Validation and Handoff

• Bring up the PCE cluster.
• Confirm that the PCE databases are online.
• Confirm cluster health and node status.
• Confirm that administrators can log in to the PCE web console.
• Document the as-built configuration, including nodes, roles, certificates, and key configuration settings.
• Review the build and documentation with customer stakeholders.

Customer Outcome

The customer has a running on-premise PCE, with databases online and web console access confirmed, and is ready to begin Platform Foundation Deployment.

A standard PCE build normally takes about one full day of effort once all prerequisites are complete. The delivery schedule is set at project initiation based on:

• Purchased package size
• PCE deployment type and number of nodes
• Number of data centers or sites
• Readiness of customer prerequisites
• Availability of customer administrators and the approved build window

Incomplete prerequisites, access delays, certificate problems, or network changes made during the build window may extend the schedule.

Talk to our Sales team to learn more about Services.

Explore our Professional Services at illumio.com/services/professional-services