Install the agent one-at-a-time with Installer Key
Installer Key-based installation is the traditional way to install Shield agents. In this installation mode, you install the agents by using the Fully Qualified Domain Name (FQDN), instance name, and the Installer Key for the instance.
Use the upcoming Product Key-based installation feature for a quicker way to install agents. Also, leverage the Xshield Asset Onboarding modes to control how and when assets are registered to the instance.
Agent Download page
Xshield agents are available for download from the Settings > Agent Download page. Agents are listed by the flavors of Xshield-supported OSes - Windows, macOS, Ubuntu, RedHat, CentOS, SUSE, and AIX. This page also lists the CLI commands to install the agents. The CLI commands are specific for your instance - they contain the FQDN, instance name, and the Installer Key for the instance.
The FQDN, instance name, and installer key are listed in the Installation Details > Installation Options tab.
Prerequisites
-
Meet the prerequisites to install the Xshield agent on assets.
-
For Windows assets that use third-party Security solutions such as Symantec Endpoint Protection or Bitdefender Total Security, you must tune the Security configuration to install the agents and protect the assets with Xshield policies.
-
Download the packages of the agents(s) you want to install.
-
For UI-based installation, keep the FQDN, instance name, and the Installer Key of the instance handy.
From the UI
-
(Optional) Copy the downloaded agent installer package to the asset.
-
Double-click the installer .
Agents are listed by the flavors of OSes - Windows, macOS, Ubuntu, RedHat, CentOS, SUSE, and AIX.
-
Accept the End User License Agreement.
-
In the Server Name or Address text box, enter the FQDN.
-
In the Tenant Name field, enter the instance name.
-
In the Installer Key field, enter the Installer Key.
-
Complete the installation.
From the CLI
Agents can be installed using different tools (Windows PowerShell and cmd for Windows) and different methods (CLI or interactive installation for Linux OSes). Also, commands are listed for when you want to use Web proxy support for workloads or tag assets during the installation.
-
Go to Settings > Agent Download.
-
Select the agent type ( Microsegementation or User Access) for the relevant OS family.
-
Click View CLI for the OS family and copy the required installation command.
-
Use the Copy icon to copy the command.
-
Paste and run the command on the asset.
Successful installation
Upon successful installation, the agent log file on the asset ( mtoken.log) logs the installation successful message. Also, upon successful registration, the asset shows up as Reachable on the Assets page (State column).
Failed installation
Agent installations can fail if the prerequisites are not met. See installation issues for more details.