How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature

Technical Articles ID: KB85233
Last Modified: 10/13/2021

Environment

McAfee Cloud Workload Security (CWS) 5.x

CWS components:

Microsoft Azure
vSphere
Amazon Web Services (AWS)

Summary

Installing McAfee Agent (MA) in a cloud environment can be a challenge because of the following factors:

Active Directory (AD) might not be present.
ePolicy Orchestrator (ePO) does not support installation tasks for MA using SSH keys.
ePO might not always connect to the client instance in another region or Amazon Virtual Private Cloud (VPC) environment.

MA Deployment URL feature
The Agent Deployment URL contains an installer (McAfee Smart Installer). After ePO communication, the installer downloads and installs MA. It then deploys McAfee products to the client systems, and brings the system under ePO management.

NOTE: The Agent Deployment URL created in this way can be shared in the environment. But, the Agent Deployment URL can't be used to download Smart Installer via Shell (Linux) and PowerShell (Windows) scripts without first changing the script. Use the following solution to make the required changes.

Solution

NOTE: The new CWS 5.x console has a single user interface with several card-based panes for improved usability.

Create an Agent Deployment script:

Log on to the ePO Console.
Click Menu, System, and then select Cloud Workload Security.
Click Total Workloads at the top of the screen.
From the left pane under Systems, select a Virtual Private Cloud (VPC)¹.
From the Tag pane, select Windows or Linux².
From the bottom pane, select any of the reported issues.
From the Workload Details section located in the right pane, click the Download hyperlink from under McAfee ePO Management³.

NOTES:

¹	This Script is valid only for a Region. The MA deployment URL must be created for each region separately, to determine the placement of the managed instance in the ePO System Tree.
²	This Script is valid only for the operating system selected. The above steps must be repeated for the other operating system.
³	If ePO is co-located with workloads, private IP/DNS can be used. Otherwise, replace the IP address of the ePO server with the ePO IP address that is available from the particular region or public IP/DNS.

Example URL:

https://IP_Address:Server_Port/ComputerMgmt/agentPackageDownload/McAfeeSmartInstall.download?token=f9510c4729ae5e288ba2a4bb297c912e1612f7df

NOTE: [AWS] The changed scripts can be used as an input using any of the following to install MA:

AWS Console
ePO Cloud servers
DevOps Tools

MA is then allowed access without the need for authentication or access to the client instance.

Related Information

McAfee Smart Installer URL constraints:
The user must have administrator rights on the local system to install the McAfee Agent using McAfee Smart Installer.

For details about how to deploy McAfee Agent using the McAfee Smart Installer, see KB86512.

Attachment

Scripts_Windows-Linux.zip
930Bytes • < 1 minute @ broadband

Affected Products

Cloud Workload Security 5.3.x
Cloud Workload Security 5.2.x
Install/Uninstall

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature

Environment

Summary

Solution

Related Information

Attachment

Affected Products

Languages:

Title

Title

Knowledge Center

How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature

Environment

Summary

Solution

Related Information

Attachment

Affected Products

Languages:

Choose your region

Title

Title