Purchasing and Enabling HSS

Scenario

HSS helps you identify and manage the assets on your servers, eliminate risks, and defend against intrusions. There are also proactive protection and security operations functions available to help you easily detect and handle threats. For details about the protection functions of server security, see Specifications of Different Editions.

This document uses an ECS running EulerOS 2.9 as an example to describe how to purchase and enable HSS.

Step 1: Purchase HSS Quota

1. Log in to the management console.
2. Click in the upper left corner and select the region and project.
3. Click in the upper left corner and choose Security & Compliance > Host Security Service. The HSS console is displayed.
4. In the upper right corner of the Dashboard page, click Buy HSS.
5. Set the parameters for buying HSS as prompted.
   • Billing Mode: Select a billing mode as required. In this example, select Yearly/Monthly.
   • Region: Select the region where the server is located. In this example, select CN-Hong Kong.
   • Edition: Select the HSS edition. Different editions provide different protection functions. In this example, select Enterprise Edition.
   • Quantity: Set this parameter based on the number of servers. In this example, set the quantity to 1.
   • Specify other parameters as needed.

6. In the lower right corner of the page, click Next.
7. After confirming that the order, select I have read and agree to the Host Security Service Disclaimer.
8. Click Pay Now and complete the payment.
9. Click Back to Host Security Service Console.

Step 2: Install an Agent

1. Log in to the HSS console, in the navigation pane on the left, choose Installation & Configuration > Server Install & Config.
2. On the agent management tab, Click the value of Servers Without Agents area to filter the servers that have not installed agents.
3. In the Operation column of a server, click Install Agent.
   Figure 1 Installing an agent
   

4. In the dialog box, click Copy to copy the command for installing the agent.
5. Remotely log in to the server where the agent is to be installed.
6. Run the copied installation command as user root to install the agent on the server.

   If the command output shown in Installation completed is displayed, the agent is successfully installed.

   Figure 2 Installation completed
   

7. Run the following command to check the runtime status of agent:

   service hostguard status

   If the command output shown in Agent running properly is displayed, the agent is running properly.

   Figure 3 Agent running properly
   

Step 3: Enable Protection

1. In the navigation pane on the left, choose Asset Management > Servers & Quota.
2. In the Operation column of a server, click Enable.
3. In the dialog box that is displayed, select the mode.

   Set this parameter based on the edition of the purchased quota in Step 1: Purchase HSS Quota.

   • Billing Mode: Select Yearly/Monthly.
   • Edition: Select Enterprise Edition.

4. After confirming the information, select I have read and agree to the Host Security Service Disclaimer.
5. Click OK.
6. If the Protection Status of the target server is Protected, the protection is enabled successfully.
   Figure 4 Viewing the protection status