Creating SEP Single Linux Agent full installation packages for deployment on offline or isolated computers

Products

• Endpoint Protection

Issue/Introduction

You want to create and export a SEP Single Linux Agent full installation package and deploy it on an offline or isolated computer.

Environment

Linux OS

Resolution

Scenario 1

This scenario involves exporting a LinuxInstaller stub from your SEPM and repackaging the offline installation package.

1. Export a LinuxInstaller stub from your SEPM server: Exporting client installation packages
2. Download the seplpkg tool to any Linux or Windows machine with Internet access and use it to create a fully installable package, by running the following command:
   
   on Windows OS:
   
   seplpkg-windows-amd64.exe --platform rhel7 --product RU5 repackage <path-to-LinuxInstaller-stub-from-your-SEPM>
   
   or on Linux OS:
   
   ./seplpkg-linux-amd64 --platform rhel7 --product RU5 repackage <path-to-LinuxInstaller-stub-from-your-SEPM>
   
   Note: replace "platform" and "product" arguments, depending on your needs. The example above will create a SEP 14.3 RU5 package for RHEL7. Please check other available arguments here.
   
   
3. Copy the new repackaged installer to the "offline" Linux server, make it executable and run with the argument -g, to ignore repository and use local packages. Like so:
   
   chmod u+x LinuxInstaller
./LinuxInstaller -- -g

Scenario 2

This scenario involves creating an unmanaged offline installation package first, then importing the client-server communications file (Sylink.xml) from your SEPM.

1. Download the seplpkg tool to any Linux or Windows machine with Internet access and use it to create a fully installable package, by running the following command:
   
   on Windows OS:
   
   seplpkg-windows-amd64.exe --platform rhel7 --product RU5 dl
   
   or on Linux OS:
   
   ./seplpkg-linux-amd64 --platform rhel7 --product RU5 dl
   
   Note: replace "platform" and "product" arguments, depending on your needs. The example above will create a SEP 14.3 RU5 package for RHEL7. Please check other available arguments here.
   
   
2. Copy the new repackaged installer to the "offline" Linux server, make it executable and run with the argument -g, to ignore repository and use local packages. Like so:
   
   chmod u+x LinuxInstaller
./LinuxInstaller -- -g
   
   
3. Export the client-server communications file (Sylink.xml) from your SEPM: Exporting the client-server communications file (Sylink.xml) manually
4. Transfer and import the client-server communications file (Sylink.xml) to your Linux server with the following command:
   
   /opt/Symantec/sdcssagent/AMD/tools/sav manage -i <path-to-your-sylink.xml>