Skip to content

Adding Machines

Machines are the virtual machines in your scenario. Each one is based on a template: a pre-built OS image (Windows Server, Ubuntu, Kali Linux, and others) that your build starts from.

  1. Open the Machines section in the left sidebar to see the available templates.
  2. Find the template you want, such as “Windows Server 2022”, “Ubuntu 22.04”, or “Kali Linux”.
  3. Drag the template onto a VLAN container on the canvas.
  4. In the configuration panel that opens, set a nickname and adjust any other settings.
  5. Click Save.

The machine appears as a node inside the VLAN container.

Rogue Architect Machines panel open on the left listing OS templates (Kali, Windows 11, Windows Server, Ubuntu, etc.); the canvas on the right shows a fully populated VLAN with a DC, file server, and three workstations Drag any template from the Machines panel on the left onto a VLAN container. The VLAN on the right shows the result: a domain segment with a DC, a file server, and workstations.

  • Nickname: a descriptive name for the machine, such as “DC01”, “Kali-Attack”, or “WebServer”.
  • RAM (GB): the memory allocated to the VM.
  • CPU Cores: the number of CPU cores.
  • User Controllable: when this is on, students can view and control the VM before they complete the scenario. Once the scenario is complete, every machine becomes visible no matter how this is set. Turn it off for backend infrastructure machines that students shouldn’t use directly.
  • Include in Student VM Dock: students see 2 VM slots as soon as they log in. Turn this on for the main machines students will work from, usually a Windows workstation and a Kali attack machine.
  • Architect Given Username / Password: credentials shown to students for this machine. They are for display only and are not created on the VM automatically. To create the user account, you need a plugin.
  • Enable Internet During Architect Build: gives the machine internet access during the Ansible build phase, which helps with patching, installing updates, and downloading packages. Requires the Architect Internet permission.
  • Enable Internet in End-User Deployment: gives the machine internet access when end users deploy and launch the scenario. Requires the Deployed Internet permission.

Machine view with the Help Me panel on the left, the build sequence in the center showing the plugin chain on WindowsAttack, and Edit Machine Configuration on the right with Advanced Options expanded The machine view. Help Me’s plugin categories are on the left and the build sequence is in the middle. On the right, Edit Machine Configuration has Advanced Options open, including the architect-given credentials and the internet toggles.

To move a machine to another VLAN, drag it on the canvas into the new VLAN. The machine leaves its current VLAN and joins the new one.

To clone a machine, select it and click Copy in the dock above it (or press Ctrl+C, Cmd+C on a Mac). Each VLAN then shows a Paste overlay with the machine’s name. Click anywhere in the target VLAN to paste the clone there. Press Esc to end paste mode. The clone gets copies of all the machine’s plugins and their configured parameters, which saves time when you need several similar machines.