Agents
      Back to home
      1. Vali Cyber Knowledge Base
      2. ZeroLock™
      3. Agents

      Agent Installation: Curl/Wget Installer

      A guide for installing the ZeroLock™ Agent using curl or wget.

      The ZeroLock™ Agent (ZA) can be installed three (3) ways:
      1. COPY/PASTE – curl or wget (instructions below)
      2. DOWNLOAD – Self-Extracting bash or Tar Installer
      3. CONTAINER – Docker or AWS ECS
      Agent Deployment Options_v2.1.3

       

      Advanced Settings

      Regardless of the installation method, the following settings must be done.  These settings are for the Collector that the endpoint will be connecting to.  The Collector is the ZeroLock™ Management Console (ZMC) service that collects endpoint connection and threat information.  It also authenticates and communicates with the ZeroLock™ Agents.

      These settings should only have to be done once when configuring the ZMC, as the values rarely change after that point.

      Navigate to Deploy on the left side menu which opens the screen below.

      Deploy Page Adv Settings Numbered v2.0.3

      1. Click on Advanced Settings. 
      2. On the screen that appears, select the Agent Version to deploy. The default is the latest release.
      3. The Endpoint Profile may remain as default unless you wish to use another profile from the drop-down list.
      4. If desired, additional Endpoint Groups may be added by selecting from the drop-down list. 
      5. Enter the collector IP address(s) or the FQN for one or more collector server(s). 
      6. Click the Save as Default button to save the information and return to the Deploy home screen. 
        Advanced Settings Numbered v2.0.3

      CURL

      Once back on the Deploy home screen, under the Use Curl tab, click Copy Curl Installer to save the command to the clipboard.

      Deploy_Curl_Cmd v2.0.3

      To download and install the agent (Tyr), open a terminal session to the endpoint, then paste the copied script from step 3, into the terminal. You will want to run the installer with root privileges. This may take a few minutes.
       


       

      Note: Instructions on uninstalling a ZeroLock™ Agent may be found on the ValiCyber Support  site or by following this link – Uninstalling a ZeroLock Agent .

       

      WGET

      If you prefer to use the wget command, the steps are the same as with curl, except this step replaced step 2. The wget installer is pasted into the terminal during step 3 after you open a terminal session to the endpoint.

      Validating Agent Installation

      To validate the installation process, select the Endpoints tab on the main menu. The new endpoint will be listed; the green dot in the status column indicates a successfully installed agent on the endpoint system.

       

      View ZeroLock™ Agent Logs

      Locate the ZeroLock™ Agent logs.

      cd /opt/zerolock/zerolock-tyr     To go to the Tyr directory.

      /opt/zerolock/zerolock-tyr$ ls -la   To list the contents of the directory.    

       

      To see the ZeroLock™ Agent log in detail, open a terminal session to the new Endpoint.  

      cat Tyr.log   To read the log

      Air-Gapped Environments

      An air-gapped computer or network is physically segregated and incapable of connecting wirelessly or physically with other network devices outside its own network.  Air-gaps protect critical computer systems or data from potential attacks ranging from malware and ransomware to keyloggers or other attacks from malicious actors.

      For instructions on installing the ZeroLock Agent on an air-gapped system please see the article Agent Installation to an Air-gapped Environment.  

      For more information, please see the Vali Cyber Support page.