How Do I Install HSS on MRS Cluster Nodes?

Scenario

Nodes in an MRS cluster can be managed by the Host Security Service (HSS) for risk prevention and intrusion detection. You can identify and manage information assets on MRS nodes and build a security system that defends against server attacks.

Constraints and Restrictions

HSS can be installed for MRS nodes run by OSs supported by the HSS agent.

Procedure

1. Check whether the OSs of the MRS nodes are supported by HSS agents.
   1. Log in to the MRS console.
   2. In the navigation pane on the left, choose Active Clusters. Click a cluster name to go to the cluster details page.
   3. Click the Nodes tab. Click the target node group and click any node in the list to access the basic information page of the server.
      Figure 1 Nodes tab
      
   4. On the displayed ECS page, click the Summary tab. Check the EulerOS version in the ECS Information area.

      If EulerOS_2.10_x86_64 is displayed in the image, the OS version is EulerOS 2.10 64-bit for Linux (x86).

      Figure 2 Viewing the OS version
      
   5. Check whether the OS version of the MRS node is supported by HSS agents.

      For details about the OSs supported by HSS agents, see Supported OSs.

      • If the OS version is supported, go to 2 to install HSS agents.
      • If it is not supported, HSS cannot be installed.

2. Purchase HSS quotas and log in to each node in the MRS cluster to install HSS agents. After the agents are installed, you can enable HSS.
   

   Ensure you have purchased HSS in your MRS cluster node region and have used the installation package or installation command in the region to install HSS agents on your nodes.

   For details about how to purchase HSS quotas, install agents, and enable HSS, see HSS Getting Started.

   Table 1 HSS enablement procedure

   Procedure		Description
   Step 1	Purchasing an HSS Quota	HSS comes in the basic, professional, enterprise, premium editions. For details about the functions and differences, see Function Differences. The number of protected servers must be the same as the number of nodes in the MRS cluster. Figure 3 Server quota
   Step 2	Install agents. Linux Windows	HSS agents execute detection tasks, scan all hosts, and monitor the status of servers in real time.
   Step 3	Enabling HSS	Bind a quota to a server and enable protection for the server.
   Step 4	Enabling Alarm Notification	Enable alarm notifications to receive notifications from HSS to get informed of security risks.
   Step 5	(Optional) Performing Basic Configurations	You can configure common login locations, common login IP addresses, an SSH login IP address whitelist, and automatic isolation and killing of malicious programs.

Related Operations

• For details about the agent status and troubleshooting, see How Do I Fix an Abnormal Agent?
• For details about handling agent installation failures, see What Should I Do If Agent Installation Failed?
• For details about agent uninstallation, see How Do I Uninstall the Agent?