Skip to main content

Linux: Install a sensor

Compatible with Red Hat Enterprise Linux 7.x, 8.x, 9.x and Ubuntu 20.04 or later.

Before you begin

  • Verify your network meets all requirements.

  • Verify you meet all deployment requirements.

  • Verify your Linux system meets all hardware and software requirements.

  • You have experience working with Linux systems.

  • You have root or admin permissions to install the sensor.

  • You have the necessary permissions in CertCentral.

See Discovery workflow and permissions and Sensor installation requirements.

Note

Instruction summary:

Extract the .tar.gz file to a specified folder, run ./start.sh, then follow the prompts to activate the sensor.

Install sensor

Download the sensor from your CertCentral account

  1. In your CertCentral account, in the left main menu, go to Discovery > Manage Discovery.

  2. On the Manage scans page, select Add sensor.

  3. On the Set up a sensor page, under step 1 Download a discovery sensor in the Linux section, select Download.

    You can also download the sensor from here: Linux sensor.

Create the installation directory and install the sensor

  1. As a root user, log on to your Linux server.

    For example:

    $ su Password: ***************** #

  2. Create the installation directory.

    For example:

    mkdir ccsensor

  3. Go to the installation directory and extract the sensor .tar.gz file.

    For example:

    cd ccsensor

    tar -xzvf <sensor-file> .tar.gz

    Where ccsensor is the installation directory and <sensor-file> is the name of the file.

Note

The Sensor Linux service installation script is available as part of the package. Execute the script to install and run the sensor as a service.

Notice

Sensor activation note:You can activate the sensor now or later. However, you must activate the sensor before you can use it to set up a scan. If you choose to activate the sensor later, see Linux: Activate a sensor.

Activate the sensor

  1. Go to the installation directory and run start.sh.

    For example:

    cd ccsensor

    ./start.sh

    Where ccsensor is the installation directory.

  2. When asked to proceed with authentication, type y and enter your CertCentral username and password.

  3. Select the division you want to assign the sensor to.

    If you do not have divisions, we return the name of the organization for your account.

  4. When asked, enter a sensor name.

(Optional) Run sensor as a service

You also have the option to control the sensor using Linux service. This allows the sensors to operate uninterrupted in the background, even when your machine reboots.

Important

Make sure the sensor you want to run as a service is installed and activated.

Go to the sensor installation directory (for example, ccsensor). Run the service-install.sh script to install and start the sensor Linux service.

Note

If you already have a sensor running and would like to run the service, you must stop the sensor before installing the service. See Linux: Stop a sensor.

What's next

You are ready to set up and run a scan using this sensor. See Set up and run a scan.

If you are using multiple sensors, you may want to rename the sensors to make tracking or identifying them easier. See Rename a sensor.

In this section: