Step 6: Install the Component Controller (isap-agent)

This topic describes how to install the SecMaster controller (isap-agent) and manage the log collector node (ECS) on SecMaster.

Installing the Component Controller

When you finish Step 5: Configure Network Connection, on the page displayed, click Next in the lower right corner to go to the Verify Installed Script.
Click to copy the command for installing the component controller.
Install the component controller. You can install the component controller in either of the following ways: ECS agency (recommended) or IAM account and password.

Method 1: Using an ECS agency to install the component controller
1. Create an isap-agent agency and grant permissions to the agency on IAM.
  1. Log in to the IAM console as an administrator and choose Agencies in the navigation pane on the left.
  2. On the Agencies page, click Create Agency in the upper right corner. On the displayed page, configure the following parameters:
    - Agency Name: Enter isap-agent.
    - Agency Type: Select Cloud service.
    - Cloud Service: Select Elastic Cloud Server (ECS) and Bare Metal Server (BMS) from the drop-down list.
    - Validity Period: Select Unlimited.
    - Description: Provide a description if needed.
  3. Configure authorization based on IAM 3.0 or IAM 5.0.
    IAM 3.0 (IAM3): Click OK. In the displayed dialog box, click Authorize.
    
    IAM5.0 (IAM 5): On the Agencies page, configure parameters and click OK in the lower right corner. In the confirmation dialog box, click Cancel. Then, click Go to New Console in the upper right corner of the agency page to go to the identity policy page (IAM 5).
  4. Create custom identity policies based on IAM 3.0 or IAM 5.0.
    IAM 3.0 (IAM 3): On the displayed page, click Create Policy in the upper right corner. On the displayed page, configure the following parameters:
    - Policy Name: isap-agent-strategy is recommended.
    - Policy View: Select JSON.
    - Policy Content. Copy and paste the following content into the box to replace the existing content:
      { "Version": "1.1", "Statement": [ { "Effect": "Allow", "Action": [ "secmaster:workspace:get", "secmaster:node:create", "secmaster:node:monitor", "secmaster:node:taskQueueDetail" , "secmaster:node:updateTaskNodeStatus" ] } ] }
    - Description: You are advised to enter a brief description for action authorization for the isap-agent agency.
    IAM 5.0 (IAM 5): On the Identity Policies page, click Create Identity Policy in the upper right corner. On the Create Identity Policy page, configure the following parameters:
    - Policy Name: isap-agent-strategy is recommended.
    - Policy View: Select JSON.
    - Policy Content. Copy and paste the following content into the box to replace the existing content:
```
{
  "Version": "5.0",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "secmaster:workspace:get",
        "secmaster:node:create",
        "secmaster:node:monitor",
        "secmaster:node:taskQueueDetail",
        "secmaster:node:updateTaskNodeStatus"
      ]
    }
  ]
}
```
    - Description: You are advised to enter a brief description for action authorization for the isap-agent agency.
  5. Click Next in the lower right corner of the page. In the displayed dialog box, click OK.
  6. On the policy list page, select the created policy isap-agent-strategy, click Next, set the minimum authorization scope (All resources), and click OK in the lower right corner of the page.
  7. The Authorization successful message is displayed. Click Finish below. The isap-agent agency has been created and authorized.
2. Configure the ECS agency.
  1. Log in to the ECS console, choose Elastic Cloud Server in the navigation pane on the left, find the ECS used to install the component controller (isap-agent), and click the ECS name to go to the details page.
  2. On the Summary tab of the ECS details page, click next to Agency, select the isap-agent agency created in 3.a, and click . Complete the ECS agency.
3. Remotely log in to the ECS where you want to install the component controller.
  - Log in to the ECS console, locate the target server, and click Remote Login in the Operation column to log in to the server. For details, see Login Using VNC.
  - If your server has an EIP bound, you can also use a remote management tool, such as PuTTY, to log in to the server and install the component controller on the server as user root.
4. Run the command copied in 2 as the root user to install the controller on the ECS.
5. If you want to use the ECS agency, enter y as prompted.
  Figure 1 Installing the agent using an ECS agency
6. If install isap-agent successfully is displayed, the component controller is installed.
  Figure 2 Installation succeeded
  
  If the installation fails, rectify the fault by referring to Troubleshooting the Component Controller Installation Failure. If the system displays a message indicating that the memory is insufficient, rectify the fault by referring to Partitioning a Disk.
Method 2: Using an IAM account and password to install the component controller
1. Remotely log in to the ECS where you want to install the component controller.
  - Log in to the ECS console, locate the target server, and click Remote Login in the Operation column to log in to the server. For details, see Login Using VNC.
  - If your server has an EIP bound, you can also use a remote management tool, such as PuTTY, to log in to the server and install the component controller on the server as user root.
2. Run the command copied in 2 as user root to install the controller on the ECS.
3. Enter the IAM username and password created in Creating a Non-administrator IAM User as prompted.
4. If install isap-agent successfully is displayed, the component controller is installed.
  Figure 3 Installation succeeded
If the installation fails, rectify the fault by referring to Troubleshooting the Component Controller Installation Failure. If the system displays a message indicating that the memory is insufficient, rectify the fault by referring to Partitioning a Disk.
After confirming that the installation has been completed, return to the page for adding nodes (2) and click Confirm in the lower right corner of the page.

You can view new nodes on the Nodes tab.