How to manually update sdcss-kmod on Data Center Security Linux Agent without internet access

Products

• Data Center Security Server Advanced
• Data Center Security Monitoring Edition

Issue/Introduction

In environments without direct Internet access (for example, DMZ or air-gapped networks), the DCS Linux Agent may be running an outdated sdcss-kmod (kernel module) version.

Because the Agent cannot automatically download updates from Broadcom repositories, the supported KMOD version must be updated manually to ensure compatibility with the running Linux kernel and proper agent operation.

Environment

• Symantec Data Center Security Linux Agent
• Internet-restricted or air-gapped environments (DMZ)
• RPM-based or DEB-based Linux distributions

Resolution

To manually update the sdcss-kmod package, follow the steps below.

Step 1: Download the KMOD Package

From a system with Internet access, download the supported sdcss-kmod RPM or DEB package that matches:

• The Linux distribution
• Kernel version
• Data Center Security Agent version

Transfer the downloaded file to the target Linux machine (for example, using scp, removable media, or an internal repository).

Step 2: Set File Permissions

Ensure the package file has execute permissions:

chmod 777 <KMOD_package_name>.rpm

Note: Adjust permissions as required by your security policy.

Step 3: Install the KMOD Package

For RPM-based distributions (RHEL, CentOS, Oracle Linux, Rocky, Alma, etc.)

You can install the KMOD using either method below:

Using YUM (recommended if dependencies are required):

yum install <KMOD_package_name>.rpm

Using RPM directly:

rpm -i <KMOD_package_name>.rpm

For DEB-based distributions (Ubuntu, Debian)

Use one of the following commands:

apt install <KMOD_package_name>.deb

or

dpkg -i <KMOD_package_name>.deb

Step 4: Verify Installation

After installation, verify that the correct KMOD version is installed:

rpm -qa | grep sdcss-kmod

or (for DEB-based systems):

dpkg -l | grep sdcss-kmod

Confirm that the installed version matches the supported kernel module version for your DCS agent and Linux kernel.

Additional Information

A system reboot may be required after installing or upgrading the KMOD to ensure the new kernel module is loaded.