Arctic Wolf retrieves security information from the Webroot API, which is only accessible through the Managed Service Provider (MSP) console. You must identify if you are using the GSM or MSP console to determine next steps.

1. Sign in to the Webroot admin console with GSM Super Administrator permissions.
2. In the navigation menu, click Settings.
3. Proceed to the appropriate task, depending on if:
   • Advanced Settings appears — You are using the GSM console. Proceed to Convert your GSM console to an MSP console.
   • API Access appears — You are using the MSP console. Proceed to Create Webroot API client credentials.

If necessary, convert your GSM console to an MSP console to access the Webroot API.

1. Sign in to the Webroot admin console with GSM Super Administrator permissions.
2. In the navigation menu, click Settings > Advanced Settings.
3. In the Advanced Settings section, click Convert.
4. In the dialog, select the checkbox, and then click Convert Console.
5. Optional: You can complete or skip the MSP console tutorial.

1. Sign in to the Webroot admin console.
2. In the navigation menu, click Settings.
3. On the API Access tab, click New.
4. In the Name and Description fields, enter information, and then click Create.
5. Copy the Client ID and Client Secret values, and then save them in a safe, encrypted location to provide to Arctic Wolf later.
   Note:

   The Client Secret value is only viewable in this dialog.

6. Click I have made note of the client secret.

1. Sign in to the Webroot admin console.
2. In the navigation menu, click Sites.
3. For each site that you want Arctic Wolf to monitor, complete these steps:
   1. Click the key icon beside the site name.
      
   2. Copy the Keycode value, and then save it in a safe, encrypted location to provide to Arctic Wolf later.

1. Sign in to the Webroot admin console.
2. In the navigation menu, click Settings > Account Information.
3. Copy the Parent Keycode, and then save it in a safe, encrypted location to provide to Arctic Wolf later.

1. Sign in to the Webroot admin console.
2. In the navigation menu, click Admins > Add Admin.
3. On the Create Admin page, on the Details tab, configure these settings:
   • Email Address — Enter an email address for your GGSM admin account, to be the account username.
   • First Name — Enter a first name for your GGSM admin account. For example, Tester.
   • Last Name — Enter a last name for your GGSM admin account. For example, Admin.
   • Phone — Enter a phone number for your GGSM admin account.
   • Time Zone — Select a timezone for your GGSM admin account.
   • Account Type — Select GSM Limited Administrator.
     Note:

     Do not select Site Administrator Only. This account type does not have GSM console access, which the Arctic Wolf Sensor requires.

4. On the Site Permissions tab, select View Only.
5. Save the username and password of this account in a safe, encrypted location to provide to Arctic Wolf later.
   Note:

   Webroot imposes a maximum length of 30 characters on all passwords.

6. Click Add.

   The Webroot system sends a verification email to the address provided during the setup process.

7. Verify the email address for the account, using the verification email from Webroot.

1. Sign in to the Arctic Wolf Unified Portal.
2. In the navigation menu, click Data Collection > Cloud Sensors.
3. Click Add Account +.
4. On the Add Account page, click Webroot.
5. Configure these settings:

   • Account Name — Enter a unique and descriptive name for the account.

   • GGSM admin username — Enter the email address used as the username for the GSM administrator account created in Create a new administrator for the Arctic Wolf Sensor.
   • GSM admin password — Enter the password of the GSM administrator account created in Create a new administrator for the Arctic Wolf Sensor.
   • Client ID — Enter the client ID from Create Webroot API client credentials.
   • Client secret — Enter the client secret from Create Webroot API client credentials.
   • GSM keycode — Enter the GSM keycode from Retrieve the Webroot GSM keycode.
   • Site keycode — Enter the site keycode from Retrieve the Webroot site keycode.
     Note:

     The Site Keycode value is unique for each site.

   • Credential Expiry — (Optional) Enter the credential expiration date, if applicable.

6. Click Test and submit credentials.