Setup Cybersecurity Console (Linux)

APPLICABLE PRODUCTS 

Anybus Cybersecurity Console 

(compatible with Anybus Defender series 4000 and up)

Setup Cybersecurity Console (Linux)

This guide describes how to install and access the Anybus Cybersecurity Console (HMS ACC) on a Debian-based Linux system such as Ubuntu.

The installation uses the HMS ACC .deb package and can be performed either directly from the Linux machine or remotely over SSH.

Preparing an Appliance for Remote Access

If the target machine is a DIN rail appliance, industrial PC, or another headless device that will normally operate without a keyboard and monitor, configure remote access before installing HMS ACC.

On Ubuntu, the SSH server is not enabled by default.

Install SSH

Open a terminal and run:

sudo apt update
sudo apt install openssh-server -y

Enable the SSH service so that it starts automatically after reboot:

sudo systemctl enable ssh

Start the SSH service:

sudo systemctl start ssh

Verify that SSH is running:

sudo systemctl status ssh

If the Ubuntu firewall is being used, allow SSH traffic:

sudo ufw allow ssh

After SSH has been configured, the remaining HMS ACC installation can be performed remotely from another computer.

For example, connect to the Ubuntu machine using:

ssh <username>@<server-ip>

Replace:

• <username> with the Linux user account.
• <server-ip> with the IP address of the Linux machine.

Instructions

Ubuntu is a Debian-based Linux distribution. The same .deb installation package is therefore used for both Ubuntu and Debian systems.

1. Download the HMS ACC Package

Download the HMS ACC Debian package for the target system.

2. Open a Terminal

Open a terminal and navigate to the directory containing the downloaded HMS ACC package.

For example:

cd ~/Downloads

Verify that the package is present:

ls

3. Install HMS ACC

Install the .deb package using dpkg:

sudo dpkg -i anybus-cybersecurity-console-for-debian-linux.deb

Replace the filename if the downloaded HMS ACC package has a different name.

The installation process will copy the required files and create the HMS ACC system service.

4. Verify the HMS ACC Service

After installation, verify that the HMS ACC service is running.

The exact service name is displayed during installation.

Look for an installation message similar to:

Created symlink ... <service-name>.service

Check the service using:

sudo systemctl status <service-name>

Replace <service-name> with the service name shown during the installation.

If the service is not running, start it:

sudo systemctl start <service-name>

Enable it so that it starts automatically when Linux boots:

sudo systemctl enable <service-name>

The service status can then be checked again:

sudo systemctl status <service-name>

5. Configure the Firewall

If HMS ACC will be accessed from another computer, the Linux firewall must allow incoming connections to the HMS ACC services.

For a standalone HMS ACC installation, the following TCP ports must be allowed:

On Ubuntu systems using UFW, allow TCP port 9106:

sudo ufw allow 9106/tcp

Allow TCP port 9101:

sudo ufw allow 9101/tcp

If SSH is being used for remote administration, also ensure SSH is allowed:

sudo ufw allow ssh

6. Enable the Firewall

On a fresh Ubuntu installation, UFW may be installed but inactive.

Before enabling the firewall, make sure SSH has been allowed if the system is being configured remotely.

Enable UFW:

sudo ufw enable

Check the firewall status:

sudo ufw status

The output should show rules allowing:

22/tcp
9101/tcp
9106/tcp

Port 22/tcp is normally used for SSH.

7. Access HMS ACC

After the installation is complete and the firewall has been configured, HMS ACC can be accessed from another computer on the network.

Open a supported web browser and navigate to:

https://<server-ip>:9106

Replace <server-ip> with the IP address or hostname of the Linux machine running HMS ACC.

For example:

https://192.168.1.100:9106

The client computer must have network connectivity to the HMS ACC server.

8. Continue Through the Browser Certificate Warning

When HMS ACC is opened for the first time, the browser may display an HTTPS certificate warning.

This can occur because HMS ACC initially uses a locally generated HTTPS certificate.

Select the appropriate browser option to continue to the HMS ACC web interface.

The HMS ACC initial configuration page should then appear.

Initial Configuration

After HMS ACC is opened for the first time, complete the initial setup through the web browser.

9. Select Features

On the Features page, select the device types that will be managed by HMS ACC.

Enable the required options, such as:

• Anybus Defender
• Other supported HMS devices

If the Anybus Defender option provides backup settings, configure the required limit for the number of stored backups.

Click:

Next >

10. Configure Session Settings

On the Session page, configure the session settings for HMS ACC.

Session Timeout

Set the amount of inactivity allowed before a logged-in session automatically expires.

Choose a timeout suitable for the security requirements of the installation.

Remote Hosts

Add remote hosts if other computers must be allowed to access HMS ACC.

If HMS ACC will only be accessed locally or from already permitted systems, additional remote hosts may not be required.

Click:

Next >

11. Create the Administrator Account

On the Security page, create the initial HMS ACC administrator account.

Enter:

• Username
• Password
• Confirm Password

The password must contain:

• At least 6 characters
• At least one number
• At least one uppercase letter
• At least one special character

Store the administrator credentials securely.

Click:

Next >

12. Configure Licensing

On the Licensing page, select the required licensing method.

Online Activation

Select Online Activation when the HMS ACC system has internet access and a valid license key is available.

Enter or paste the license key to activate the software.

Free Trial

Select Free Trial to use HMS ACC for 14 days before a license is required.

License Later

Select License Later if:

• The system does not currently have internet access.
• A license key is not yet available.
• Licensing will be completed after the initial installation.

After selecting the required licensing option, click:

Next >

13. Review the Configuration

On the Overview page, verify that the selected configuration is correct.

Review settings such as:

• Enabled features
• Session timeout
• Remote hosts
• Administrator account
• Licensing method

If any settings need to be changed, use the < Previous button to return to the appropriate page.

When the configuration is correct, click:

Install

HMS ACC will apply the configuration and initialize the required services.

14. Log In to HMS ACC

After the initial configuration is complete, the HMS ACC login page will appear.

Log in using the administrator account created during the setup process.

The Anybus Cybersecurity Console is now ready for use.

How to Upgrade HMS ACC

To upgrade HMS ACC, download the newer Debian package and repeat the installation procedure.

Run:

sudo dpkg -i anybus-cybersecurity-console-for-debian-linux.deb

The new package will update the existing HMS ACC installation.

After the upgrade, verify that the service is running:

sudo systemctl status <service-name>

Installation Complete

The Anybus Cybersecurity Console is now installed, configured, and accessible from the network.

Typical next steps include:

• Activate the HMS ACC license if License Later was selected.
• Add Anybus Defender devices.
• Configure device credentials.
• Configure backups.
• Add additional HMS ACC users.
• Configure remote access as required.

© HMS Networks AB 2026