Installing the Agent on Third-party Servers

Scenario

You can enable HSS for servers only after installing the agent. For third-party cloud servers and on-premises data centers (IDCs) that can access the Internet, you can download and install the HSS agent through the Internet and connect the servers to the HSS console for protection management.

This section describes how to install the agent on a third-party server through the Internet.

Prerequisites

The settings of security group outbound ports, DNS server addresses, and third-party security software are appropriate and do not hinder agent installation. You have performed the operations in Preparing the Installation Environment.

Constraints

For details about the regions where third-party cloud servers and on-premises IDC can be connected to HSS through the Internet, see In What Regions Is HSS Available to Non-Huawei Cloud Servers?
If your server cannot access the Internet and needs to be connected to HSS for protection, refer to the following solutions:
- For CN East2 and Southwest-Guiyang1 regions: Connecting Third-party Servers to HSS Through Direct Connect and VPC Endpoints
- For regions other than CN East2 and Southwest-Guiyang1: Third-Party Servers Accessing HSS Through Direct Connect and Proxy Servers.

Installing the Agent on Third-party Linux Servers Using Commands

The following describes how to install the agent on the Linux server. You can select a method as required.

Installing the Agent on a Single Third-party Linux Server Using Commands

Log in to the HSS console.
Click in the upper left corner and select a region or project.
In the navigation pane, choose Installation & Configuration > Server Install & Config.
(Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
In the upper right corner of the page, click Install HSS Agent.
Select Third-party Cloud or Data Center Server and click Configure Now.
Select an installation method.
- Network Mode: Internet access
- Server OS: Linux
- Scale: Single
Click to copy the installation command.

Figure 1 Copying the installation command
Log in to the server as user root, and paste and run the installation command.

If the command output shown in Figure 2 is displayed, the agent has been installed.

Figure 2 Agent installed
Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.

If the Agent Status is Online, the agent has been installed.

Installing the Agent on Multiple Third-party Linux Servers Using Commands

Log in to the HSS console.
Click in the upper left corner and select a region or project.
In the navigation pane, choose Installation & Configuration > Server Install & Config.
(Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
In the upper right corner of the page, click Install HSS Agent.
Select Third-party Cloud or Data Center Server and click Configure Now.
Select an installation method.
- Network Mode: Internet access
- Server OS: Linux
- Scale: Batch
- Server Authentication Mode: Select Account and password or Key as needed.
Install the agent as prompted.
Perform the following operations on any server.
1. On the console, click linux-host-list.csv in the Install HSS Agent dialog box to download the template.
  Figure 3 Downloading linux-host-list.csv
2. Fill in the server information based on the requirements in the linux-host-list.csv template and save it.
3. Use the root account to remotely log in to any target server.
4. Use the SSH client to upload the template file linux-host-list.csv to the /tmp directory on the server.
5. Return to the HSS console and click to copy the installation command.
  Figure 4 Copying the installation command
6. Paste and run the installation command on the server to install the agent.
  If the command output shown in Figure 5 is displayed, the agent has been installed.
  
  Figure 5 Agent installed
7. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.
  If the Agent Status is Online, the agent has been installed.

Installing the Agent on Third-party Windows Servers Using a Script

The following describes how to install the agent on a Windows server. You can select a method as required.

Installing the Agent on a Single Third-party Windows Server Using a Script

Log in to the HSS console.
Click in the upper left corner and select a region or project.
In the navigation pane, choose Installation & Configuration > Server Install & Config.
(Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
In the upper right corner of the page, click Install HSS Agent.
Select Third-party Cloud or Data Center Server and click Configure Now.
Select an installation method.
- Network Mode: Internet access
- Server OS: Windows
- Scale: Single
Install the agent as prompted.
1. On the console, click installAgent.ps1 in the Install HSS Agent dialog box to download the installation script.
  Figure 6 Downloading installAgent.ps1
2. Log in as user Administrator to the server where the agent is to be installed.
3. Copy the installAgent.ps1 file to the C:\Users directory of the server where the agent is to be installed.
4. Right-click installAgent.ps1 and choose Run with PowerShell.
5. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.
  If no dialog box is displayed, skip this step.
  
  Figure 7 Changing the execution policy
6. After the execution, open the Task Manager and check whether hostguard.exe and hostwatch.exe exist. If they do, the agent has been installed.
  Figure 8 Agent installed
7. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.
  If the Agent Status is Online, the agent has been installed.

Installing the Agent on Multiple Third-party Windows Servers Using a Script

Log in to the HSS console.
Click in the upper left corner and select a region or project.
In the navigation pane, choose Installation & Configuration > Server Install & Config.
(Optional) If you have enabled the enterprise project function, select an enterprise project from the Enterprise Project drop-down list in the upper part of the page to view its data.
In the upper right corner of the page, click Install HSS Agent.
Select Third-party Cloud or Data Center Server and click Configure Now.
Select an installation method.
- Network Mode: Internet access
- Server OS: Windows
- Scale: Batch
Install the agent as prompted.
1. On the console, click windows-host-list.xlsx in the Install HSS Agent dialog box to download the template to the local PC.
  Figure 9 Downloading windows-host-list.xlsx
2. Enter server information based on the requirements in the windows-host-list.xlsx template and save it.
3. Return to the HSS console and click BatchInstallAgent.ps1 to download the installation script.
  Figure 10 Downloading BatchInstallAgent.ps1
4. Log in as user Administrator to a server where the agent is to be installed.
5. Copy the windows-host-list.xlsx and BatchInstallAgent.ps1 files to the C:\Users directory of the server where the agent is to be installed.
  Ensure that the port 5985 of the server is connected to that port of other servers where the agent is to be installed.
6. Right-click BatchInstallAgent.ps1 and choose Run with PowerShell.
7. (Optional) In the dialog box that is displayed, enter Y to run the script to install the agent.
  If no dialog box is displayed, skip this step.
  
  Figure 11 Changing the execution policy
8. After the script is executed successfully, check whether the BatchInstallAgent.log file exists in C:\Users\Administrator.
  If the BatchInstallAgent.log file exists, the agent has been installed.
9. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.
  If the Agent Status is Online, the agent has been installed.