Running the Unified Agent Installer
Unified Agent Installer performs the tasks necessary to install agents on servers. The Unified Agent Installer is a wizard that steps you through the entire process needed to install agents on multiple agentless devices. The Unified Agent Installer creates the following objects, which are all necessary to install agents:
- Agent bundle
- Remote host authentication (for Windows targets, non-Windows targets, or both)
- Remote host authentication rules
- Agent Installer Job
The Unified Agent Installer gives you the option of running the Agent Installer Job immediately. If you do not choose this option, you can specify that the Agent Installer Job run at some later time.
You can perform other functions in the console without closing the Unified Agent Installer. This capability allows you to perform prerequisite actions while the Unified Agent Installer remains open.
When you finish running the Unified Agent Installer, it creates the objects needed for agent installation. Afterwards, you cannot edit the choices you made in the Unified Agent Installer, although you can edit the objects that Unified Agent Installer created.
The TrueSight Server Automation Console provides an alternative process for installing agents, described in Creating objects for agent installation. The alternative process requires you to create the necessary objects before you can create and execute an Agent Installer Job, which actually installs agents.
Before you begin
Before you can run the Unified Agent Installer, perform the following:
- Ensure that you perform the preliminary tasks, as described in Preliminary tasks for installing agents.
- (Linux machines only) Ensure that your Linux firewall allows access to port 4750, because this port is used during installation.
- For a fresh installation, ensure that any additionally required ports are available. For a list of ports required by the Agent Installer Job, see RSCD Agent ports.
- NEW IN 8.9.03(Windows only) Ensure that you must have Server Message Block (SMB) v2 enabled on a Windows server.
To launch and run the Unified Agent Installer, your role must be granted a variety of permissions.
Minimum permissions to run the Unified Agent Installer
To launch the Unified Agent Installer, your role must be granted the following minimum
- AutomationPrinicpal.Read, if you do not have AutomationPrincipal.Create
- AutomationPrincipal.Create, if you do have AutomationPrincipal.Read or there are no automation principals defined in the system
- RemoteHostAuthentication.Create, if there are no remote host authentications defined in the system
- RoutingPolicy.Modify, if there are no remote host authentication rules defined in the system
Permissions for performing operations
To perform certain operations in the Unified Agent Installer, your role must be granted the following minimum authorizations. If you are not granted these permissions, some functionality available from the Unified Agent Installer is disabled, although you are still able to run the Unified Agent Installer.
- ServerGroup.Read, Server.Read — To assign job targets
- Server.Read — To pick a PsExec server
- WindowsSoftware.Read, AIXSoftware.Read, LinuxSoftware.Read, SolarisSoftware.Read --- To select target platforms
- AutomationPrinicpal.Read — To reuse an existing automation principal
- AutomationPrincipal.Create — To create an automation principal while creating a remote host authentication
- RemoteHostAuthentication.Create — To create a remote host authentication
- RoutingPolicy.Modify — To create a remote host authentication rule
- AgentInstallerJob.Execute — To execute an Agent Installer Job
- DepotFolder.Create — To create a depot folder rather than selecting an existing folder
- JobFolder.Create — To create a job folder rather than selecting an existing folder
The following permissions must be assigned to objects used by the Unified Agent Installer:
- DepotFolder.Read, DepotFolder.Write on the depot folder used to store an agent bundle
- DepotFolder.Read on the depot folders containing agent installers * WindowsSoftware.Read, AIXSoftware.Read, LinuxSoftware.Read, SolarisSoftware.Read on the selected agent installers * AutomationPrincipal.Read on any existing automation principal that is referenced * JobFolder.Read, JobFolder.Write on the job folder used to store the Agent Installer Job
- Server.Read on any server used as a PsExec server
- ServerGroup.Read on any server group selected as a job target
- Server.Read on any server selected as a target for the job, either directly or through a group
- Server.Modify on any server selected as a target for the job, either directly or through a group
- Server.AgentInstall on any server selected as a target for the job, either directly or through a group
- Server.PushACL on any server selected as a target for the job, either directly or through a group (assuming you have chose to push ACLs to target servers)
To run the Unified Agent Installer
- Select the root Servers folder and do one of the following:
- Right-click and select Unified Agent Installer.
- Select File > Unified Agent Installer.
- Provide information for the Unified Agent Installer, as described in the following sections:
- Unified Agent Installer - Introduction
- Unified Agent Installer - Agent Bundle - Platform Selection
- Unified Agent Installer - Agent Bundle - Installer Selection
- Unified Agent Installer - Agent Bundle - Configuration
- Unified Agent Installer - Remote Host Authentication (non-Windows)
- Unified Agent Installer - Remote Host Authentication (Windows)
- Unified Agent Installer - Remote Host Authentication Rule
- Unified Agent Installer - Agent Installer Job - Options
- Unified Agent Installer - Agent Installer Job - Targets
- Unified Agent Installer - Required Properties
- Unified Agent Installer - Summary
- Click Finish after completing the last step of the wizard.
The Unified Agent Installer creates all objects necessary to install agents. If you defined the Agent Installer Job to run immediately, the job runs now. If you did not select that option, you can execute the job at your convenience (see Executing a job).