Remote agent state is tracked using “keep-alive” packets. Each remote agent sends a ‘keep alive’ packet to InTrust Server every 2 minutes (this setting can be edited with Comm_AgentSendLifeMarkInterval organization parameter). The InTrust Server Service records the latest 'keep-alive' arrival time in the LastTimeMark column of the ADCInstalledAgent table in the configuration database, and then a corresponding state is assigned considering the difference between CurrentTime and LastTimeMark (i.e., current time and last ping received).
| Currenttime-lastTimeMark | State | Action |
Org Parameter |
|---|---|---|---|
| < 4 mins | Running |
None |
|
| + 4 mins | Not responding |
If the InTrust server is not using the agent (gathering etc.), then the InTrust server waits to see if the agent starts sending keep-alives. If a gathering job is run or the Install Agents on Site option is selected, InTrust tries to recover the agent. |
Comm_AgentSendLifeMarkInterval |
| + 10 mins | Lost | InTrust tries to recover the agent |
Comm_AgentLostAfter |
| n/a | Awaiting Authorization |
An Administrator must reconnect (add) the agent to the InTrust server |
To view current agent’s state, in InTrust Manager, select Configuration | InTrust Servers, expand your InTrust Server’s node, and click Agents.
Remote agents can be uninstalled manually, semi-automatically or automatically. For more details, see the following topics:
To uninstall an agent that was installed from an *.msi package, an administrator can use the Add/Remove Programs facility. However, if the agent was installed through the command prompt, an administrator should execute the adcscm.nt_intel.exe –uninstall command on the remote agent computer (executable name varies depending on platform). This command does the following:
| Command |
Description |
|---|---|
| -uninstall | Uninstalls the agent |
| -remove |
Removes a connection between the agent and the specified InTrust server on the specified port |
| -unregister |
Unregisters (removes) an alias for the computer on the specified InTrust server (removes the alias from the list of names that can be used to access the agent and updates the display name used by InTrust Manager) |
| -shutdown |
Stops the agent |
| -uninstall_for_upgrade |
Removes the agent, but does not delete the agent configuration |
To uninstall the remote agent, an administrator has to right-click on the agent in InTrust Manager and select Uninstall. The uninstall behavior varies depending on the remote agent state and the number of InTrust servers it has a connection to:
| Agent State | Number of InTrust Servers Connected | Action |
|---|---|---|
| Any state except Running | Any |
Connection between the agent and the InTrust server is removed. |
| Running | 1 | Connection between the agent and the InTrust server is removed; the remote agent is stopped and then uninstalled. |
| Running | >1 |
Connection between the agent and the InTrust server is removed (the parent InTrust server of the agent object selected in the InTrust Manager console) |
If a remote agent cannot connect to an InTrust server for more than 7 days (set by the AgentUninstallTimeout organization parameter), the remote agent uninstalls itself. If an agent communicates to several InTrust servers, this timeout should occur for each server the agent works with.
© ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center
