Agent installation - Linux

Installation of the ERA Agent component on Linux is performed using a command in the Terminal. Make sure all prerequisites are met. Connection to the ERA Server is resolved using the parameters --hostname and --port (port is not used when an SRV record is provided). hmtoggle_plus0Possible connection formats.

Example of an installation script
(New lines are split by "\" for copying the whole command to Terminal.)

Server-assisted installation

./agent-linux-x86_64.sh \
--skip-license \
--hostname=10.1.179.36 \
--port=2222 \
--webconsole-user=Administrator \
--webconsole-password=aB45$45c \
--webconsole-port=2223

Offline installation

./agent-linux-x86_64.sh \
--skip-license \
--cert-path=/home/admin/Desktop/agent.pfx \
--cert-auth-path=/home/admin/Desktop/CA.der \
--cert-password=N3lluI4#2aCC \
--hostname=10.1.179.36 \
--port=2222

Parameters

Attribute

Description

Required

--hostname

Hostname or IP address of ERA Server (ERA Proxy) to connect

Yes

--port

ERA Server or ERA Proxy port (default value is 2222)

Yes

--cert-path

Local path to the Agent certificate file (more about certificate)

Yes (Offline)

--cert-auth-path

Path to the server's Certificate Authority file (more about authority)

Yes (Offline)

--cert-password

Certificate Authority password. Must match the Agent's certificate password

Yes (Offline)

--cert-auth-password

Certificate Authority password

Yes (if it is used)

--skip-license

Installation will not ask user for license agreement confirmation

No

--product-guid

Product GUID (if not defined, it will be generated)

No

--cert-content

Base64 encoded content of PKCS12 encoded public key certificate plus private key used to set up secure communication channels with Server and Agents. Use only one of the --cert-path or --cert-content options.

No

--cert-auth-content

Base64 encoded content of DER encoded certificate authority private key certificate used to verify remote peers (Proxy or Server). Use only one of the --cert-auth-path or --cert-auth-content options.

No

--webconsole-hostname

Hostname or IP address used by Web Console to connect to the server (if left empty, value will be copied from 'hostname')

No

--webconsole-port

Port used by Web Console to connect to the server (default value is 2223)

No

--webconsole-user

Username used by Web Console to connect to the server (default value is Administrator)

No

--webconsole-password

Password used by Web Console to connect to the server

Yes (S-a)

Connection and certificates

Connection to the ERA Server must be provided: --hostname, --port (port is not needed if service record is provided, the default port value is 2222)

Provide this connection information for Server-assisted installation: --webconsole-port, --webconsole-user, --webconsole-password

Provide certificate information for Offline installation: --cert-path, --cert-password
Installation parameters --cert-path and --cert-auth-path require certification files (.pfx and .der)  which can be exported from ERA Web Console. (Read how to export the .pfx file and the .der file.)

Password type parameters

Password type parameters can be provided as environment variables, files, read from stdin or provided as plain text. That is:

--password=env:SECRET_PASSWORD where SECRET_PASSWORD is an environment variable with password

--password=file:/opt/secret where first line of regular file /opt/secret contains your password

--password=stdin instructs the installer to read the password from standard input

--password="pass:PASSWORD" is equal to --password="PASSWORD" and is mandatory if the actual password is "stdin"(standard input) or a string starting with "env:", "file:" or "pass:"
 

validation-status-icon-warning IMPORTANT: The certificate passphrase must not contain following characters: " \ These characters cause critical error during the initialization of the Agent.

 

Installer log

The installer log may be useful for troubleshooting and can be found in Log files.

To see if the installation was successful, verify that the service is running by executing the following command:

sudo service eraagent status