Configuring an Instance From the Command Line

The Traffic Manager supports performing initial configuration through the command line, as an alternative to using the Web-based Initial Configuration Wizard.

To use the Initial Configuration Wizard, see Using the Initial Configuration Wizard.

To start the configuration program, login to the instance console and type the following command at the prompt:

z-initial-config

Follow the on-screen instructions to proceed.

Virtual Traffic Manager Installation Program
Copyright (C) 2026, Ivanti, Inc.. All rights reserved.


Welcome to your Virtual Traffic Manager Appliance

This application will guide you through the process of setting up
your Virtual Traffic Manager Appliance for basic operation.
This should only take a few minutes. Some initial networking settings
will be required - please contact your support provider if you need any help.

Press return to continue.

Press RETURN to start configuring the Traffic Manager.

------------------------------------------------------------------------
Use of this software is subject to the Ivanti Terms and Conditions
of Sale.

Please review these terms, published at
http://www.pulsesecure.net/support/eula/ before proceeding.
------------------------------------------------------------------------
Enter 'accept' to accept this license, or press return to abort:

Read and accept the Ivanti Terms and Conditions of Sale, available from the URL indicated. If you agree to its terms, type “accept” at the prompt to continue. You cannot proceed with the configuration program, and thus use the software, if you do not accept the terms of the agreement.

The Traffic Manager is available as a range of set-frequency billing subscriptions where the license is built in, and as a Community Edition/Bring Your Own License (BYOL) instance. The following two steps concern software licensing options for the Community Edition/BYOL instance only, and might not appear if you are running the configuration program on an instance with a built-in license.

Would you like to register this traffic manager with a Services Director,
for remote licensing purposes? If not, a license file can be specified.

Note that registering will enforce that the REST API is enabled.

Register with a Services Director? [Y/N] [N]:

To register this Traffic Manager instance for remote licensing in a Services Director deployment, type “Y” at the prompt. To instead license this instance individually, type “N”. For further information on Services Director, see the relevant product pages on the Ivanti website (www.ivanti.com).

If you do not register this instance for remote licensing, the configuration program prompts you for a license key file.

Enter the license key file name, or leave blank for the Community Edition.
Enter 'help' for more information.

License key file:

The Traffic Manager requires a license key to operate fully. The feature set and bandwidth limits are determined by the license applied, the details of which can be seen on the System > Licenses page of the Admin UI after you have finished configuring your instance.

Choose either to install the license key now, or to upload it later from the Admin UI. If you choose to leave this entry blank, the system defaults to running as the Community Edition. For further information, see The Community Edition. For information about paid licensing, contact Technical Support.

Please specify the time zone of this appliance, or enter 'help'
for the list of available time zones.

Timezone:

Type the time zone you want this instance to use, or type “help” to first display a list of available time zones.

A master 'admin' user is created that you can use to log in to the
Administration Server and SSH console.
Please choose a password for this user:
Re-enter:

Type (and confirm) a password for the Traffic Manager “admin” user. This is the master password that is used when configuring the virtual appliance through a Web browser, or when you log in to the Traffic Manager command line using SSH (with the username "admin").

Do you want to enable SSH intrusion detection?
Enter 'help' for more information:

Enable SSH intrusion detection? Y/N [N]:

The Traffic Manager also contains the option to enable SSH Intrusion Detection to help prevent brute-force SSH attacks on your virtual appliance. Ivanti strongly recommends you enable this option.

Do you want to enable REST API access to the appliance?

Enable REST API? Y/N [N]:

The Traffic Manager provides an industry-standard REST API. Type “Y” to enable or “N” to disable the REST API. For further information, see the Virtual Traffic Manager: REST API Guide.

Please provide the port on which the REST API should
listen for requests (default 9070).

REST port [9070]:

If you enable the REST API, enter the port number on which you want the REST service to listen for requests.

The REST API is enabled by default if you chose to register this Traffic Manager instance with a Services Director.

You have specified the following settings:

No license file: The traffic manager will run as the Community Edition
Timezone: UTC
SSH protection enabled: Yes
REST enabled: Yes
REST port: 9070

Proceed with configuration? Y/N:

Before you finish, check through the summary to confirm your intended settings. To configure your Traffic Manager with these settings, type “Y” at the prompt.

Performing an Unattended Configuration

The Traffic Manager provides the ability to automate z-initial-config using a replay file containing pre-determined responses to the questions asked during the configuration process. To perform an unattended configuration, type the following command at the prompt:

z-initial-config --replay-from=<replay filename>

To create a suitable replay file, capture your responses using the following command:

z-initial-config --record-to=<replay filename>