Installing or updating a
Cloud Workload Protection
agent

Download the agent installation package from the
Cloud Workload Protection
console and install it on the instance. To update an existing agent, install the latest agent on the same instance. The older agent is updated to the latest version.
The agent automatically gets enrolled with the corresponding
Cloud Workload Protection
account during the installation process. You must restart the instance for the agent installation to take effect. After you install the agent and restart the instance, you can apply policy groups to the instances.
Before you begin, review the following:
To download and install the agent
  1. On the
    Cloud Workload Protection
    console, go to
    Settings > Downloads
    .
    Ensure that the selected service is
    Compute
    .
  2. Select the
    Operating System
    and the
    Variant
    of the instance where you want to install the agent.
    The agent installation package varies for different operating systems and variants. Ensure that you select the correct options.
  3. Based on the selected operating system and the variant, you may get the following options when you press
    Download
    :
    • Download Anti-Malware Definitions
      : Downloads only the Anti-Malware definitions.
    • Download Agent
      : Downloads only the agent installation package.
    • Download Agent + Anti-Malware Definitions
      : Downloads the agent installation package and the definitions. This option downloads two tar files - one for the agent installation package and one for the Anti-Malware definitions.
    If you download only the Anti-Malware definitions, you must extract the definitions at the instance after you install the agent, as described in step 8.If you do not download the Anti-Malware definitions, you can still install the agents with Anti-Malware capabilities. When the agent is connected to the Internet, the definitions are automatically downloaded from the Symantec LiveUpdate server.
  4. Optionally, you can press
    Show
    to view the
    Agent Enrollment Keys
    .
    The agent enrollment keys are authentication details that are included in the installation script. During agent installation, the script uses these details to automatically enroll the agent with your
    Cloud Workload Protection
    account.
    Do not share the authentication details with unauthorized personnel.
  5. Log on to the instance where you want to install the agent.
To install the Windows agent
  1. Copy and extract the agent installation package on the instance.
    Ensure that the path where you extract the package does not contain any spaces or special characters. It can contain an underscore (_).
  2. Go to the extracted package folder. Open command prompt as an
    Administrator
    and run the
    installagent.bat
    file.
    The script downloads the required agent components and installs them on the instance. The download size is approximately 165 MB.
To install the Linux agent
  1. Log on to the instance as a
    sudo
    user and perform the following steps:
  2. Copy and unzip the agent installation package on the instance:
    gunzip
    agent_installer_package_name.gz
  3. Extract the
    tar
    file:
    tar -xvf
    agent_installer_package_name.tar
  4. Provide access for the
    installagent.sh
    script to run:
    chmod 755 installagent.sh
  5. Run the
    installagent.sh
    script:
    ./installagent.sh
  6. If you had downloaded the Anti-Malware definitions as a separate package in step 3, you must perform the following steps:
    • Extract the file
      scwp_agent_unix_virus_def_package.tar
      .
    • From the extracted folder, copy the folder
      definitions
      to the following location:
      /opt/Symantec/sdcssagent/AMD/sef
  7. Restart the instance. If you do not restart the instance, the agent installation does not take effect. Check out the
    Agent Status
    column in the
    Instances
    page of the Cloud Workload Protection console to verify the agent installation on the instance. You can also view the agent status from the
    Support
    tab of the instance details page.