Edit

Deploy Defender for IoT C# based security agent for Linux

  • Article

This guide explains how to install and deploy the Defender for IoT C#-based security agent on Linux.

In this guide, you learn how to:

  • Install
  • Verify deployment
  • Uninstall the agent
  • Troubleshoot

Prerequisites

For other platforms and agent flavors, see Choose the right security agent.

  1. To deploy the security agent, local admin rights are required on the machine you wish to install on.

  2. Create a Defender-IoT-micro-agent for the device.

Installation

To deploy the security agent, use the following steps:

  1. Download the most recent version to your machine from GitHub.

  2. Extract the contents of the package and navigate to the /Install folder.

  3. Add running permissions to the InstallSecurityAgent script by running chmod +x InstallSecurityAgent.sh

  4. Next, run the following command with root privileges:

    ./InstallSecurityAgent.sh -i -aui <authentication identity>  -aum <authentication method> -f <file path> -hn <host name>  -di <device id> -cl <certificate location kind>

    for more information about authentication parameters, see How to configure authentication.

This script performs the following actions:

  • Installs prerequisites.

  • Adds a service user (with interactive sign-in disabled).

  • Installs the agent as a Daemon - assumes the device uses systemd for legacy deployment model.

  • Configures sudoers to allow the agent to do certain tasks as root.

  • Configures the agent with the provided authentication parameters.

For additional help, run the script with the –help parameter: ./InstallSecurityAgent.sh --help

Uninstall the agent

To uninstall the agent, run the script with the –u parameter: ./InstallSecurityAgent.sh -u.

Note

Uninstall does not remove any missing prerequisites that were installed during installation.

Troubleshooting

  1. Check the deployment status by running:

    systemctl status ASCIoTAgent.service

  2. Enable logging. If the agent fails to start, turn on logging to get more information.

    Turn on the logging by:

    1. Open the configuration file for editing in any Linux editor:

      vi /var/ASCIoTAgent/General.config

    2. Edit the following values:

      <add key="logLevel" value="Debug"/>
<add key="fileLogLevel" value="Debug"/>
<add key="diagnosticVerbosityLevel" value="Some" />
<add key="logFilePath" value="IotAgentLog.log"/>

      The logFilePath value is configurable.

      Note

      We recommend turning logging off after troubleshooting is complete. Leaving logging on increases log file size and data usage.

    3. Restart the agent by running:

      systemctl restart ASCIoTAgent.service

    4. View the log file for more information about the failure.

      Log file location is: /var/ASCIoTAgent/IotAgentLog.log

      Change the file location path according to the name you chose for the logFilePath in step 2.

Next steps