Deploying the agent installer to Linux endpoints

Procedure

1. Obtain the package from the Trend Vision One console.

   Important Each package is specific to your company. After installing the package, the endpoint starts reporting to your company's Trend Vision One console.

2. Verify that the system is running OpenSSL version 1.1.1 or later by executing the following command:
   openssl version
3. Extract the contents of the package by executing the following command:
   tar -xvf ${package_file}
4. Verify that the signature and issuer of the certificate are valid.
   1. Execute the following command:
      openssl cms -verify -binary -no_check_time -in checksum.p7 -inform DER -verify -content checksum -purpose any -certsout need_to_check.certs -out /dev/null
      The expected output is Verification successful.

      Note Use the need_to_check.certs certificate generated by the command in the subsequent verification steps.

   2. Verify that the certificate subject is Trend Micro, Inc and the issuer is DigiCert Inc by executing the following command:
      openssl crl2pkcs7 -nocrl -certfile need_to_check.certs | openssl pkcs7 -print_certs -noout

      The output should be:

      subject=C = US, O = "DigiCert, Inc.", CN = DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1

      issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4

      subject=businessCategory = Private Organization, jurisdictionC = TW, serialNumber = 23310837, C = TW, ST = Taipei City, L = Da\E2\80\99an District, O = "Trend Micro, Inc.", CN = "Trend Micro, Inc."

      issuer=C = US, O = "DigiCert, Inc.", CN = DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
   3. Verify that the checksum is valid by executing the following command:
      sha256sum -c checksum
      If the system does not return an error, you can begin installing the package.
5. Install the agent.
   • To install Trend Vision One Agent without a proxy, execute the following command:
     $ ./tmxbc install
   • To install Trend Vision One Agent with a specific proxy on the endpoint, execute the following command:
     $ ./tmxbc install --proxyURL <IPv4 or IPv6 address of proxy server>
     For example:
     $ ./tmxbc install --proxyURL http://10.1.1.1:80

     Important This command only supports HTTP proxies and does not support the use of proxy credentials.

   For a complete list of available CLI commands, see Linux CLI commands.