PCE Installation Guides (Applies to On-Premise Releases Only)

PCE Installation and Upgrade Guide

Describes how to install and configure the Illumio Core Policy Compute Engine (PCE).

This document will open in a new browser tab.

PCE Supercluster Deployment Guide

Describes how to deploy and administer a PCE Supercluster, a single administrative domain that spans two or more replicating PCEs.

This document will open in a new browser tab.

Custom Migration Guide

This migration guide is for customers with more than 20,000 managed workloads. This uses the pcemigrate tool exclusively, including the VEN transplant capabilities, to move VENs and data at scale without requiring the venmigrate tool.

To download the tool, log in to the Illumio Support Portal.

This is a new guide, published on November 26, 2025.

VEN, LW-VEN, and NEN Installation Guides

VEN Installation and Upgrade Guide

Explains the two methods for installation: using the PCE web console to pair VENs with your hosts or to download the VEN software from the Illumio Support portal and install the software by using the VEN command line interface.

Illumio LW-VEN Installation Guide

Describes how to install and use the Legacy Windows VEN (LW-VEN) with the Illumio Core PCE to enforce security policies.

NEN Installation and Usage Guide

Describes how to install the Illumio Network Enforcement Node (NEN), to configure Server Load Balancers (SLBs) and switches to work with it, and to use the NEN to secure workloads attached to those network devices.

Kubernetes and Flowlink Configuration Guides

Illumio Core for Kubernetes and OpenShift Guide

Provides information about how to use Illumio Core with containerized applications running in clusters orchestrated by Kubernetes, and/or by other similar operators like OpenShift.

This document will open in a new browser tab.

Flowlink Configuration and Usage Guide

Describes how to install, configure, and use Flowlink, an Illumio standalone application that can be used with the Illumio Core to collect network flow data from different types of network sources, such as switches, routers, F5 load balancers, cloud monitoring tools, and syslog exporters.