Register a CCS agent on a UNIX\Linux server to a CCS Manager

Products

• Control Compliance Suite
• Control Compliance Suite Standards Server
• Control Compliance Suite Standards Module
• Control Compliance Suite Standards Database
• Control Compliance Suite Standards Module
• Control Compliance Suite Standards Server
• Control Compliance Suite

Issue/Introduction

You would like to know how to interactively register a CCS agent on a UNIX\Linux server to a CCS Manager

Environment

CCS 12.6.x
CCS 12.7

CCS Agent on a UNIX\Linux server

Resolution

Steps on how to register a CCS agent to a CCS Manager.

1. Log on as root
   
   
2. Change directory to /esm
   
   
3. Run the esmsetup and select option 4 for the Post-installation options and hit Enter. 
   

   root >./esmsetup
        Checking host information...

   Symantec Control Compliance Suite 12.6.1 (12.60.10100.1500) setup
Copyright (c) 2022 Symantec Corporation. All rights reserved. Use of this product is subject to license terms.

   Select an ESM setup option:
   1) View license agreement
   2) Basic installation (fully automated, permanent)
   3) Advanced installation (see manual)
   4) Post-installation configuration options
   5) Install ESM Utilities (ESM Database Conversion tool, ESM Policy tool).
   6) Quit

   Enter 1, 2, 3, 4, 5 or 6 [2]: 4

4. On the next menu, select Option 4 Register agent information with an ESM Manager and hit Enter.
   

   Configuration procedure for Enterprise Security Manager

       1) Start the ESM software
    2) Shutdown the ESM software
    3) Configure directories for an NFS installation
    4) Register agent information with an ESM manager
    5) Install and Register third party modules with an ESM manager
    6) Modify LiveUpdate for this agent
    7) Allow the ICE module scripts to be copied to this agent.
    8) Do not allow the ICE module scripts to be copied to this agent.
    9) Copy agent remote upgrade packages (Applicable for ESM Manager and Agent installation only.)
    10) Exit this procedure

   Enter option number:4

5. Enter the name or IP of the CCS Manager you would like to register the agent to and hit Enter:
   

   Please enter the name of the manager with which this agent will be
cooperating: NOTE: The manager software must be loaded and running on
each manager specified for registration to succeed. However, if you do
not wish to register the agent with any manager, simply hit the enter key.

   Manager (Max. name length 127):<enter_manager_or_IP>

6. When prompted to allow the agent to perform message-based registration, type no.  (MBC or message-based collection was a legacy data collection method and is no longer supported)
   
   Do you want to perform message based registration for this agent (y/n)? [n]: n


7. Keep the default port (port 5600) for the manager and hit Enter.
   

   *** ESM Manager <manager_name> ***

   Enter the TCP port number that should be used to contact ESM manager
"<manager_name>".  Unless you have explicitly modified the port number
used by <manager_name> you can take the default.

   Which port should be used to contact the ESM manager <manager_name> [5600]?

8. Enter the agent name, or just hit Enter to accept the suggested agent name.
   

   Enter the agent name (IP, hostname or FQDN) for this system.
This should be a name that manager "<manager_name>" can use to successfully
look up your system's IP address.

   Agent name [<agent_name>]: <enter_agent_name>

9. Keep the default [Y]es to verify manager-to-agent communication and hit Enter:
   
   Verify Manager to Agent communication (Y|N)? [Y]: Y
   
   
   
10. When prompted to register this agent to another manager, select [n]o.
    NOTE: Registering to more than one CCS manager may cause conflicts with the key created on the agent.  It is recommended just to register the agent with one manager
    
    Do you want to register this agent with one more manager (y/n)? [n]:


11. If the UNIX\Linux server has more than one IP address, you can specify a preferred IPv4 IP address for the CCS Manager to use when contacting the agent. 
    NOTE: If the server does have multiple IPs you can enter [y]es and enter the one preferred IP, otherwise use [n]o and hit Enter.
    
    Do you want to specify a preferred IP address for this asset, which the CCS Manager can use to connect (y/n)? [n]:
    
    
12. The agent will then be registered to the CCS Manager specified.  
    
    loading ESM manager <manager_name>
    verifying the manager communication with the agent
      communication between the manager with the agent was successfully verified    loading agent information
    
    
13. If the agent registration fails, more information about the agent registration can be found in the /esm/system/<hostname>/register.log file on the agent.