InTrust 11.5.1 - Installing Agents Manually

Installing Agents Manually

This topic describes the deployment of InTrust agents with native methods on supported platforms. For details about transparent automatic deployment, see Getting Started with InTrust; for details about batch deployment on InTrust sites, see the Deployment Guide.

We need to follow below steps for Manual Upgrade of Agent

1. Do not select “Establish connection with InTrust Server” during Agent MSI Installation.

2. After Agent upgrade, register server from the agent machine, by running the register command without password:

   • for Microsoft Windows computers - adcscm.nt_intel -add ServerName Port

   • for Unix computers - ./adcscm -add ServerName Port

   It is recommended to uninstall all the old version of servers and agents for using the latest version to ensure successful authentication and communication between agents/servers.

   1. Do not select “Establish connection with InTrust Server” during Agent MSI Installation.

   2. After latest Agent installation, register server from the agent machine, by running the register command without password:

      1. for Microsoft Windows computers- adcscm.nt_intel-add ServerName Port

      2. for Unix computers- ./adcscm-add ServerName Port

Microsoft Windows Computers

Agents should be deployed manually under the following (or similar) circumstances:

• The InTrust server and the processed computers are connected by unreliable and slow links. Agent installation fails when the packet drop rate is higher than 5%.
• The processed computers are behind a firewall.

To install an agent manually, run the ADC_AGENT.*.*.*.*.msi installation package from the DVD\Agent folder on the InTrust DVD on the target computer.

If the DVD is unavailable, complete the following steps:

1. Log on to the target computer using a local administrator account.
2. Copy all files in the <InTrust_Server_installation_folder>\Server\ADC\Agent\winnt_x86\redist folder on the InTrust server to a local folder on the target computer. The agent will be installed to this folder.
3. In the command prompt on the target computer, cd to this folder and run the following command:
   adcscm.nt_intel -install

The agent starts automatically after installation is complete.

To uninstall the agent, use the Add/Remove Programs facility. However, if the agent was installed through the command prompt, run the following command on the target computer:
adcscm.nt_intel -uninstall

Linux Computers

Agents must always be deployed manually on Linux computers. To install an agent, complete the following steps:

1. Log in to the target computer under the root account. If you log in via telnet, log in using a normal account and then use the su command.
2. Copy the adcscm_package.linux_intel.sh installation script to a local folder on the target computer. If you use a protocol with text and binary modes for copying (for example, FTP), make sure the mode is set to binary before the copying starts.

3. Start the script:

   ./adcscm_package.linux_intel.sh

   You will be prompted to supply the path to the installation directory.

After the installation, the agent will be started automatically.

Make sure that you have enough disk space for the event cache, which is located in /var/InTrust by default. You can change the location by editing the agent.ini file located in the directory where you install the agent. If you want to make agent configuration changes, you must complete them before you establish a connection with the InTrust server.

Uninstalling the Agent

To uninstall the agent, run the following script from the agent's working directory:

./Uninstall.sh

Installing Agents Using Group Policy

You can automate the installation of agents using Group Policy settings. InTrust is shipped with a Windows Installer file containing the agent package.

To automatically install agents on specific computers, take the following steps:

1. Copy the agent package from the Agent folder in the InTrust distribution to a share available to all those computers.
2. In the Active Directory Users and Computers MMC snap-in, create an OU that includes all of the required computers and add a Group Policy object for this OU.
3. Using the Group Policy Object Editor MMC snap-in, in Computer Settings, assign the agent package to the Group Policy object you added earlier.
4. To make InTrust process these computers with agents, make sure the computers are included in InTrust sites.