Installing the Agent on Cloud Platform Servers

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select GUI.
   • Server Authentication Mode: Select Account and password.
   • Scale: Select Single.

9. Select a server and click Next.
10. Enter a username and password as prompted.
    • Linux

      Provide information based on whether the server can be logged in using the root account.

      • If Allow direct connection with root permissions is selected:

        The root account can be used to log in to the server. Provide the root user password and login port. HSS will use your root account to install the agent for the server.

      • If Allow direct connection with root permissions is not selected:

        The root account cannot be used to log in to the server. Provide another username and password for login, and the root password for privilege escalation. HSS will use the provided account information to install the agent for the server.

    • Windows

      Enter a username and its password.

11. Confirm the information and click OK.

    You can view the Agent Status column to check the agent installation progress. If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select GUI.
   • Server Authentication Mode: Select Account and password.
   • Scale: Select Batch.

9. Upload the installation template.
   1. Click Download Template to download the batch installation template to your local PC.
   2. Open the downloaded file, fill in server information as required, and save the file.
   3. Click Select File and upload the file.

      HSS will automatically match the servers based on IP addresses. If the matching fails, you can click View Failed Servers and check the failure cause.

10. Select servers.
11. Confirm the information and click OK.

    You can view the Agent Status column to check the agent installation progress. If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select GUI.
   • Server Authentication Mode: Select Key.
   • Key Source: Select DEW.

9. Select servers and click OK.

   In the server list, only the servers bound to DEW are displayed.

10. In the row of a server, check its agent installation progress in the Agent Status column.

    If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select GUI.
   • Server Authentication Mode: Select Key.
   • Key Source: Select User-created key (Linux only).

9. Upload the installation template.
   1. Click Download Template to download the batch installation template to your local PC.
   2. Open the downloaded file, fill in server information as required, and save the file.
   3. Click Select File and upload the file.

      HSS will automatically parse the file and identify the servers you specified. If the parsing fails, you can click View Failed Servers and check the failure cause.

10. Confirm the information and click OK.
11. In the row of a server, check its agent installation progress in the Agent Status column.

    If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select Command.
   • Owner Account: Select Current.
   • Server OS: Select Linux.
   • Scale: Select Single.

9. Install the agent as prompted.
   1. On the console page, click in the Install HSS Agent dialog box to copy the installation command.
   2. Log in to the server as the root user and paste the installation command.

      If the command output shown in Figure 1 is displayed, the agent has been installed.

      Figure 1 Agent installed

      
      
   3. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.

      If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select Command.
   • Owner Account: Select Current.
   • Server OS: Select Linux.
   • Scale: Select Batch.
   • Server Authentication Mode: Select Account and password or Key as needed.

9. Install the agent as prompted.

   Perform the following operations on any server:

   1. On the console, click linux-host-list.csv in the Install HSS Agent dialog box to download the template.
   2. Enter the server information based on the requirements in the linux-host-list.csv template and save the template.

      Ensure that the entered server verification information is consistent with the verification mode selected in 8.

   3. Use the root account to remotely log in to any target server.
   4. Use the SSH client to upload the linux-host-list.csv file to the /tmp directory on the server.
   5. Return to the HSS console. In the Install HSS Agent dialog box, click to copy the installation command.
   6. Paste and run the installation command on the server to install the agent.

      If the information shown in Figure 2 is displayed, the installation is complete.

      Figure 2 Agent installed

      
      
   7. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.

      If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select Command.
   • Owner Account: Select Current.
   • Server OS: Select Windows.
   • Scale: Select Single.

9. Install the agent as prompted.
   1. On the console, click installAgent.ps1 in the Install HSS Agent dialog box to download the installation script.
   2. Log in as user Administrator to the server where the agent is to be installed.
   3. Copy the installAgent.ps1 file to the C:\Users directory of the server where the agent is to be installed.
   4. Right-click installAgent.ps1 and choose Run with PowerShell.
   5. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.

      If no dialog box is displayed, skip this step.

      Figure 3 Changing the execution policy

      
      
   6. After the execution, open the Task Manager and check whether hostguard.exe and hostwatch.exe exist. If they do, the agent has been installed.

      Figure 4 Agent installed

      
      
   7. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.

      If the Agent Status is Online, the agent has been installed.

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Configure installation parameters as follows:
   • Install Mode: Select Command.
   • Owner Account: Select Current.
   • Server OS: Select Windows.
   • Scale: Select Batch.

9. Install the agent as prompted.
   Caution

   • Perform the following operations on any server.
   • To install the agent, the server where the script is executed needs to access the port 5985 on other servers. Modify the inbound rules of the security groups on those servers to allow such access, or HSS will temporarily modify their security group rules while installing the agent. After the agent is installed, the modified settings will be deleted.
   1. On the console, click windows-host-list.xlsx in the Install HSS Agent dialog box to download the template to the local PC.
   2. Enter server information based on the requirements in the windows-host-list.xlsx template and save it.
   3. Return to the HSS console and click BatchInstallAgent.ps1 to download the installation script.
   4. Log in as user Administrator to a server where the agent is to be installed.
   5. Copy the windows-host-list.xlsx and BatchInstallAgent.ps1 files to the C:\Users directory of the server where the agent is to be installed.
   6. Right-click BatchInstallAgent.ps1 and choose Run with PowerShell.
   7. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.

      If no dialog box is displayed, skip this step.

      Figure 5 Changing the execution policy

      
      
   8. After the script is executed successfully, check whether the BatchInstallAgent.log file exists in C:\Users\Administrator.

      If the BatchInstallAgent.log file exists, the agent has been installed.

   9. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.

      If the Agent Status is Online, the agent has been installed.

Assume you have two accounts. Account A is your management account. It needs to manage the servers under account B, a member account. You can log in to account A, copy the agent installation command, and run it on a server under account B. After the agent is installed, you can choose Asset Management > Servers & Quota under account A to view the servers and enable HSS for them. In this way, servers can be protected across accounts.

The following procedure assumes you have account A (management account) and account B (its servers need to be managed by account A).

1. Log in to the management console using account A.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Select an installation mode.
   • Install Mode: Select Command.
   • Owner Account: Select Other.
   • Server OS: Select Linux.
   • Scale: Select Single.

9. Install the agent as prompted.
   1. On the console page, click in the Install HSS Agent dialog box to copy the installation command.
   2. Use the root account to log in to the server under account B. Paste and run the installation command.

      If the command output shown in Figure 6 is displayed, the agent has been installed.

      Figure 6 Agent installed

      
      
   3. Wait for 5 to 10 minutes. Return to the HSS console, choose Asset Management > Servers & Quota, and click the Servers tab. Check whether managed servers are online. If yes, the cross-account management is successful.

Assume you have two accounts. Account A is your management account. It needs to manage the servers under account B, a member account. You can log in to account A, copy the agent installation command, and run it on a server under account B. After the agent is installed, you can choose Asset Management > Servers & Quota under account A to view the servers and enable HSS for them. In this way, servers can be protected across accounts.

The following procedure assumes you have account A (management account) and account B (its servers need to be managed by account A).

1. Log in to the management console using account A.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Select an installation mode and click Next.
   • Install Mode: Select Command.
   • Owner Account: Select Other.
   • Server OS: Select Linux.
   • Scale: Select Batch.
   • Server Authentication Mode: Select Account and password or Key as needed.

9. Install the agent as prompted.
   1. On the console, click linux-host-list.csv in the Install HSS Agent dialog box to download the template.
   2. In the linux-host-list.csv template, fill in the information about account B's servers that need to be managed, and save the information.

      Ensure that the entered server verification information is consistent with the verification mode selected in 8.

   3. Use the root account to remotely log in to any of account B's servers that need to be managed.
   4. Use the SSH client to upload the linux-host-list.csv file to the /tmp directory on the server.
   5. Return to the HSS console. In the Install HSS Agent dialog box, click to copy the installation command.
   6. Return to the HSS console. In the Install HSS Agent dialog box, click to copy the installation command.
   7. Paste and run the installation command on the server to install the agent.

      If the information shown in Figure 7 is displayed, the installation is complete.

      Figure 7 Agent installed

      
      
   8. Wait for 5 to 10 minutes. Return to the HSS console, choose Asset Management > Servers & Quota, and click the Servers tab. Check whether managed servers are online. If yes, the cross-account management is successful.

Assume you have two accounts. Account A is your management account. It needs to manage the servers under account B, a member account. You can log in to account A, copy the agent installation script, and run it on a server under account B. After the agent is installed, you can choose Asset Management > Servers & Quota under account A to view the servers and enable HSS for them. In this way, servers can be protected across accounts.

The following procedure assumes you have account A (management account) and account B (its servers need to be managed by account A).

1. Log in to the management console using account A.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Select an installation mode and click Next.
   • Install Mode: Select Command.
   • Owner Account: Select Other.
   • Server OS: Select Windows.
   • Scale: Select Single.

9. Install the agent as prompted.
   1. On the console, click installAgent.ps1 in the Install HSS Agent dialog box to download the installation script.
   2. Log in as user Administrator to the server that is to be managed and belongs to account B.
   3. Copy the installAgent.ps1 file to the C:\Users directory of the server to be managed.
   4. Right-click installAgent.ps1 and choose Run with PowerShell.
   5. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.

      If no dialog box is displayed, skip this step.

      Figure 8 Changing the execution policy

      
      
   6. After the execution, open the Task Manager and check whether hostguard.exe and hostwatch.exe exist. If they do, the agent has been installed.

      Figure 9 Agent installed

      
      
   7. Wait for 5 to 10 minutes. Return to the HSS console, choose Asset Management > Servers & Quota, and click the Servers tab. Check whether managed servers are online. If yes, the cross-account management is successful.

Assume you have two accounts. Account A is your management account. It needs to manage the servers under account B, a member account. You can log in to account A, copy the agent installation script, and run it on a server under account B. After the agent is installed, you can choose Asset Management > Servers & Quota under account A to view the servers and enable HSS for them. In this way, servers can be protected across accounts.

The following procedure assumes you have account A (management account) and account B (its servers need to be managed by account A).

1. Log in to the management console using account A.
2. Click in the upper left corner and select a region or project.
3. In the upper left corner of the page, click and choose Security > Host Security Service.
4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
5. (Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
6. In the upper right corner of the page, click Install HSS Agent.
7. Select ECS and click Configure Now.
8. Select an installation mode and click Next.
   • Install Mode: Select Command.
   • Owner Account: Select Other.
   • Server OS: Select Windows.
   • Scale: Select Batch.

9. Install the agent as prompted.
   1. On the console, click windows-host-list.xlsx in the Install HSS Agent dialog box to download the template to the local PC.
   2. In the windows-host-list.xlsx template, fill in the information about account B's servers that need to be managed, and save the information.
   3. Return to the HSS console and click BatchInstallAgent.ps1 to download the installation script.
   4. Log in as user Administrator to a server that is to be managed and belongs to account B.
   5. Copy and paste the windows-host-list.xlsx and BatchInstallAgent.ps1 files to the C:\Users directory on any of account B's servers to be managed.
   6. Right-click BatchInstallAgent.ps1 and choose Run with PowerShell.
   7. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.

      If no dialog box is displayed, skip this step.

      Figure 10 Changing the execution policy

      
      
   8. After the script is executed successfully, check whether the BatchInstallAgent.log file exists in C:\Users\Administrator.

      If the BatchInstallAgent.log file exists, the agent has been installed.

   9. Wait for 5 to 10 minutes. Return to the HSS console, choose Asset Management > Servers & Quota, and click the Servers tab. Check whether managed servers are online. If yes, the cross-account management is successful.