Configure your sensor for agentless automation

To configure automation on your sensor for an agentless appliance:

  • Use the ./addagentless CLI command on the sensor. Provide login credentials and other configuration settings to the sensor.
  • Use the ./addagentless CLI command on the sensor. Use a file to load login credentials and other configuration settings as a batch. See Configure sensor (agentless) automation settings using a file.

Before you begin

  • Root or administrative privileges are required.

Configure a sensor for agentless automation

  1. Log in to the sensor host.

  2. Go to the sensor CLI directory.

    cd install_dir/cli

    Where install_dir is the installation directory for the sensor.

  3. Run the addagentless command.

    • On Linux:

    ./addagentless.sh -type (BIGIP | NETSCALER | A10 | AWS | AWS-CLOUDFRONT)

    • On Windows:

    addagentless.bat -type (BIGIP | NETSCALER | A10 | AWS | AWS-CLOUDFRONT)

    • On Docker:

    docker exec -it <container-id/name> cli/addagentless.sh -type (BIGIP | NETSCALER | A10 | AWS | AWS-CLOUDFRONT)

    Where -type specifies the type of appliance you want to configure.

    When you enter the command, prompts appear for each setting you need to enter. At each prompt, enter the specific settings for your appliance and press Return.

The login password of the appliance you created on its respective console must meet the DigiCert password requirements so it will work with automation.

The password must contain lower and upper case letters, numbers, or symbols.

Allowed symbols:

  • A10: !@#$%^()-+_ {}[]~?:./
  • Citrix NetScaler: ~!@#$%^*()_+-|`{}[]:;?/,."
  • F5 BIG-IP: ~!@#$%^&*()_+`-={}[]|;:'"<>,./?

Run the docker ps command to get the container name or ID and its operating status.

There are two ways to configure the agentless on docker:

  1. Without signing in to the docker sensor container:
    Run the docker exec -it <container-id/name> cli/addagentless.sh -type (BIGIP | NETSCALER | A10 | AWS | AWS-CLOUDFRONT) command.
  2. By signing in to the docker sensor container:
    1. Run the docker exec -it <container-id/name> bash command to get a bash shell in the container.
    2. Go to the sensor installation directory and run the cli/addagentless.sh -type (BIGIP | NETSCALER | A10 | AWS | AWS-CLOUDFRONT) command.

For example:

The information you enter for a load balancer varies depending on the load balancer type you configure (BIGIP, NETSCALER, A10, AWS, or AWS-CLOUDFRONT).

addagentless.bat -type A10

xml 
C:\Program Files\DigiCert\DigiCert sensor\cli>addagentless.bat  -type A10

Sensor CLI. Copyright 2020, DigiCert Inc.
Add or change login credentials and specify data IP addresses for certificate automation.
Enter management IP address:10.141.17.192
Enter Management Port (443):443
If available, do you want to map this sensor with the previously voided loadbalancer (Y/N)?:N
Important: Enter an account that has admin (superuser) permission to manage all partitions on the A10 load balancer.
Enter admin username:admin
Enter admin password:
Confirm admin password:
Successfully added or changed the agentless.
IMPORTANT: After you run this command, return to Manage Automation Agents. Verify that the certificate host appears and is configured.

What's next?

Verify the agentless automation configuration. See Verify sensor (agentless) automation configuration.

Related topics:

About

DigiCert is the world's leading provider of scalable TLS/SSL, IoT and PKI solutions for identity and encryption. The most innovative companies, including 89% of the Fortune 500 and 97 of the 100 top global banks, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS and other digital certificates for PKI deployments at any scale through its certificate lifecycle management solution, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and market-leading security solutions. For the latest DigiCert news and updates, visit digicert.com or follow @digicert.

©2020 DigiCert, Inc. All rights reserved. DigiCert, its logo and CertCentral are registered trademarks of DigiCert, Inc. Norton and the Checkmark Logo are trademarks of NortonLifeLock Inc. used under license. Other names may be trademarks of their respective owners.