How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature

Artículos técnicos ID: KB85233
Última modificación: 10/13/2021

Entorno

McAfee Cloud Workload Security (CWS) 5.x

CWS components:

Microsoft Azure
vSphere
Amazon Web Services (AWS)

Resumen

Installing McAfee Agent (MA) in a cloud environment can be a challenge because of the following factors:

Active Directory (AD) might not be present.
ePolicy Orchestrator (ePO) does not support installation tasks for MA using SSH keys.
ePO might not always connect to the client instance in another region or Amazon Virtual Private Cloud (VPC) environment.

MA Deployment URL feature
The Agent Deployment URL contains an installer (McAfee Smart Installer). After ePO communication, the installer downloads and installs MA. It then deploys McAfee products to the client systems, and brings the system under ePO management.

NOTE: The Agent Deployment URL created in this way can be shared in the environment. But, the Agent Deployment URL can't be used to download Smart Installer via Shell (Linux) and PowerShell (Windows) scripts without first changing the script. Use the following solution to make the required changes.

Solución

NOTE: The new CWS 5.x console has a single user interface with several card-based panes for improved usability.

Create an Agent Deployment script:

Log on to the ePO Console.
Click Menu, System, and then select Cloud Workload Security.
Click Total Workloads at the top of the screen.
From the left pane under Systems, select a Virtual Private Cloud (VPC)¹.
From the Tag pane, select Windows or Linux².
From the bottom pane, select any of the reported issues.
From the Workload Details section located in the right pane, click the Download hyperlink from under McAfee ePO Management³.

NOTES:

¹	This Script is valid only for a Region. The MA deployment URL must be created for each region separately, to determine the placement of the managed instance in the ePO System Tree.
²	This Script is valid only for the operating system selected. The above steps must be repeated for the other operating system.
³	If ePO is co-located with workloads, private IP/DNS can be used. Otherwise, replace the IP address of the ePO server with the ePO IP address that is available from the particular region or public IP/DNS.

Example URL:

https://IP_Address:Server_Port/ComputerMgmt/agentPackageDownload/McAfeeSmartInstall.download?token=f9510c4729ae5e288ba2a4bb297c912e1612f7df

NOTE: [AWS] The changed scripts can be used as an input using any of the following to install MA:

AWS Console
ePO Cloud servers
DevOps Tools

MA is then allowed access without the need for authentication or access to the client instance.

Información relacionada

McAfee Smart Installer URL constraints:
The user must have administrator rights on the local system to install the McAfee Agent using McAfee Smart Installer.

For details about how to deploy McAfee Agent using the McAfee Smart Installer, see KB86512.

Archivo adjunto

Scripts_Windows-Linux.zip
930Bytes • < 1 minute @ broadband

Productos implicados

Cloud Workload Security 5.3.x
Cloud Workload Security 5.2.x
Install/Uninstall

Idiomas:

Este artículo se encuentra disponible en los siguientes idiomas:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Glosario de términos técnicos

Resaltar los términos del glosario

Tómese un momento para consultar nuestro Glosario de términos técnicos.

Knowledge Center

How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature

Entorno

Resumen

Solución

Información relacionada

Archivo adjunto

Productos implicados

Idiomas:

Glosario de términos técnicos

Title

Title

Knowledge Center

How to install McAfee Agent on cloud instances using the McAfee Agent Deployment URL feature

Entorno

Resumen

Solución

Información relacionada

Archivo adjunto

Productos implicados

Idiomas:

Glosario de términos técnicos

Elija su región

Title

Title