/ DOCS
nav-img
Advanced

Installing the Agent on Cloud Platform Servers

Scenario

You can enable HSS for servers only after installing the agent. This section describes how to install the agent on cloud platform servers.

Prerequisites

  • Perform the operations in Checking the Installation Environment to ensure agent installation is not affected by third-party security software, or the outbound port settings of security groups.
  • Before installing the agent on the HSS console, grant the VPCOperatePolicy and VPCEPOperatePolicy permissions to HSS. For details, see Authorization.

Agent Installation Methods

HSS provides two installation methods. For details about their differences, see Table 1.

Table 1 Installation methods

Agent Installation Method

Description

GUI

This method is convenient and more efficient than installing the agent using commands. You need to provide HSS with the server account password or key for installing the agent. HSS does not save the password file you upload.

Command/Script

You need to log in to the server and run commands or a script to install the agent. This method is more complex and slower than installation on the GUI.

Using the Account and Password to Install the Agent on a Single Cloud Platform Server

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: GUI
    • Server Authentication Mode: Account and password
    • Scale: Single

  8. Select a server and click Next.
  9. Enter the account information and password as prompted.

    • Linux

      Enter information based on whether the server can be logged in using the root account.

      • If Allow direct connection with root permissions is selected:

        The root account can be used to directly log in to the server. After you enter the root user password and login port, HSS will use your root account to install the agent for the server.

      • If Allow direct connection with root permissions is deselected:

        The root account cannot be used to directly log in to the server. You can enter another account for login. (The root user password is used for privilege escalation.) HSS will use the provided account information to install the agent for the server.

    • Windows

      Enter the username and password.

  10. Confirm the information and click .

    You can view the Agent Status column to check the agent installation progress. If the Agent Status is Online, the agent has been installed.

Using the Account and Password to Install the Agent on Multiple Cloud Platform Servers

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: GUI
    • Server Authentication Mode: Account and password
    • Scale: Batch

  8. Upload the installation template.

    1. Click Download Template to download the batch installation template to your local PC.
    2. Open the downloaded importTemplate.xlsx file, fill in server information as required, and save the file.
    3. Click Select File and upload the importTemplate.xlsx file.

      HSS will automatically parse the file and identify the servers you entered. If the parsing fails, you can click View Failed Servers and check the failure cause.

  9. Confirm the information and click .

    You can view the Agent Status column to check the agent installation progress. If the Agent Status is Online, the agent has been installed.

Using DEW to Install the Agent on One or More Cloud Platform Servers

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: GUI
    • Server Authentication Mode: Key
    • Key Source: DEW

  8. Select servers and click .

    In the server list, only the servers that are bound to DEW are displayed.

  9. Locate the row that contains the target server and check the agent installation progress in the Agent Status column.

    If the Agent Status is Online, the agent has been installed.

Installing the Agent on One or More Cloud Platform Servers Using a User-created Key (Linux Only)

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: GUI
    • Server Authentication Mode: Key
    • Key Source: User-created key (Linux only)

  8. Upload the installation template.

    1. Click Download Template to download the batch installation template to your local PC.
    2. Open the downloaded importTemplate.xlsx file, fill in server information as required, and save the file.
    3. Click Select File and upload the importTemplate.xlsx file.

      HSS will automatically parse the file and identify the servers you entered. If the parsing fails, you can click View Failed Servers and check the failure cause.

  9. Confirm the information and click .
  10. Locate the row that contains the target server and check the agent installation progress in the Agent Status column.

    If the Agent Status is Online, the agent has been installed.

Using Commands to Install the Agent on a Single Cloud Platform Linux Server

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: Commands
    • Server OS: Linux
    • Scale: Single

  8. Install the agent as prompted.

    1. On the console page, click in the Install HSS Agent dialog box to copy the installation command.
    2. Log in to the server as the root user and paste the installation command.

      If the command output shown in Figure 1 is displayed, the agent has been installed.

      Figure 1 Agent installed


Using Commands to Install the Agent on Multiple Cloud Platform Linux Servers

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: Commands
    • Server OS: Linux
    • Scale: Batch
    • Server Authentication Mode: Select Account and password or Key as needed.

  8. Install the agent as prompted.

    1. On the console, click linux-host-list.csv in the Install HSS Agent dialog box to download the template.
    2. Enter the server information based on the requirements in the linux-host-list.csv template and save the template.

      Ensure that the entered server verification information is consistent with the verification mode selected in 7.

    3. Use the root account to remotely log in to any target server.
    4. Use the SSH client to upload the template file linux-host-list.csv to the /tmp directory on the server.
    5. Return to the HSS console. In the Install HSS Agent dialog box, click to copy the installation command.
    6. Paste and run the installation command on the server to install the agent.

      If the information shown in Figure 2 is displayed, the installation is complete.

      Figure 2 Agent installed


Using the Script to Install the Agent on a Single Cloud Platform Windows Server

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: Commands
    • Server OS: Windows
    • Scale: Single

  8. Install the agent as prompted.

    1. On the console, click installAgent.ps1 in the Install HSS Agent dialog box to download the installation script.
    2. Copy the installAgent.ps1 file to the C:\Users directory of the server where the agent is to be installed.
    3. Right-click installAgent.ps1 and choose Run with PowerShell.
    4. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.

      If no dialog box is displayed, skip this step.

      Figure 3 Changing the execution policy


    5. After the execution, open the Task Manager and check whether hostguard.exe and hostwatch.exe exist. If they do, the agent has been installed.

      Figure 4 Agent installed


Using the Script to Install the Agent on Multiple Cloud Platform Windows Servers

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Installation & Configuration > Server Install & Config.

    Note

    If your servers are managed by enterprise projects, you can select the target enterprise project to view or operate the asset and detection information.

  4. Click the Agents tab.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation method.

    • Install Mode: Commands
    • Server OS: Windows
    • Scale: Batch

  8. Install the agent as prompted.

    Notice
    • Perform the following operations on any server.
    • To install the agent, the server where the script is executed needs to access the port 5985 on other servers. Modify the inbound rules of the security groups on those servers to allow such access, or HSS will temporarily modify their security group rules while installing the agent. After the agent is installed, the modified settings will be deleted.
    1. On the console, click windows-host-list.xlsx in the Install HSS Agent dialog box to download the template to the local PC.
    2. Enter server information based on the requirements in the windows-host-list.xlsx template and save it.
    3. Return to the HSS console and click BatchInstallAgent.ps1 to download the installation script.
    4. Copy the windows-host-list.xlsx and BatchInstallAgent.ps1 files to the C:\Users directory of the server where the agent is to be installed.
    5. Right-click BatchInstallAgent.ps1 and choose Run with PowerShell.
    6. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.

      If no dialog box is displayed, skip this step.

      Figure 5 Changing the execution policy


    7. After the script is executed successfully, check whether the BatchInstallAgent.log file exists in C:\Users\Administrator.

      If the BatchInstallAgent.log file exists, the agent has been installed.

Предыдущая статья
Checking the Installation Environment
Следующая статья
On-Premises IDCs Accessing HSS Through a Direct Connect and Proxy Servers
Была ли эта статья полезна?
Поддержка Юридические документы
© 2025 Cloud.ru