Manual Installation of Delinea Privileged Control for Servers (PCS) Agents
Delinea Privileged Control for Servers (PCS) uses agents to manage privileges on servers, primarily Linux/UNIX and Windows servers. These agents allow servers to join Active Directory domains and zones for privilege elevation, auditing, and control. The process involves downloading the agent from your Delinea Platform tenant and installing it manually on each server. Below are the steps focused on manual installation.
Prerequisites
- Ensure the server runs a supported operating system (refer to Delinea documentation for the full list of supported OS versions).
- For Linux/UNIX servers: Install Perl with required modules (lib, File::Basename, File::Copy, File::Find, File::stat, Getopt::Long, Sys::Hostname, Text::ParseWords). Configure forward and reverse DNS entries for the server.
- For Windows servers: Install .NET Framework 4.8. The server must already be joined to an Active Directory domain and a Delinea Privilege Control zone.
- Set up your Delinea Platform with necessary components like the AD Connector and Platform Engine. Configure firewall ports, service accounts, and ensure access to the Download Center in your tenant.
- Log in as root (Linux/UNIX) or domain administrator (Windows) for installation.
Downloading the Agent Package
1. Log in to your Delinea Platform tenant.
2. Go to Marketplace > Download Center.
3. Search for “Agent” and select the appropriate package for your server’s OS (e.g., Linux RPM/DEB/TGZ or Windows ZIP).
4. Download the package and transfer it to the target server.
Manual Installation on Linux/UNIX Servers
1. Log in as the root user.
2. Create a temporary directory and extract the downloaded package (e.g., for a RHEL-compatible TGZ file):
- text
- mkdir delinea-agent
- tar -xzf rhel6-x86_64.tgz -C delinea-agent/
3. Navigate to the extracted directory:
- text
- cd delinea-agent/
4. Run the setup script, specifying your Active Directory domain:
- text
- ./agent_setup.sh --domain
- Use ./agent_setup.sh --help for additional options, such as custom configurations or silent mode.
5. Join the server to the Active Directory domain and the Delinea Privilege Control zone using the adjoin command (this requires appropriate AD privileges; refer to Delinea docs for syntax, e.g., adjoin -z ).
6. Reboot the server if prompted to activate the agent fully.
Manual Installation on Windows Servers
1. Log in as a domain administrator.
2. Extract the downloaded ZIP file to a local directory (e.g., C:\Temp\Agent-for-Windows-6.x.x.x).
3. Navigate to the extracted folder and double-click the 64-bit installer EXE (e.g., setup_x64.exe). Run as administrator if needed.
4. Follow the installation wizard:
- Accept the license agreement.
- Retain the default installation folder (or choose a custom one).
- Click Install to proceed.
5. After installation, select Run Agent Configuration Wizard.
6. In the wizard, click Add Service > select Privilege Elevation Service > OK.
7. Choose the appropriate Delinea Zone for privilege control and click Next.
Confirm adding Domain Admins (or other groups) to the zone if prompted, and click Yes.
Click Yes to Restart to reboot the server and activate the agent.
Post-Installation Verification
- In the Delinea Platform, navigate to Inventory > Computers (or Computer Assets) to check if the server appears with the agent version listed in the "Client Version" field.
- Run a Discovery job in the platform to synchronize and detect the new agent (go to Discovery section and initiate a scan).
- For Linux/UNIX: Enable additional features like Direct Audit if needed (e.g., dacontrol -i DelineaPlatformAudit, dacontrol -e, then verify with dainfo).
- For Windows: Use the Agent Configuration tool to add services like Auditing and Monitoring Service and enable DelineaPlatformAudit.
- Test functionality by logging in as an AD user or root, performing a privileged action, and checking session recordings in Insights > Session Review.
If you encounter issues (e.g., DNS resolution errors or zone join failures), check server logs (e.g., /var/log/centrifydc.log on Linux or Event Viewer on Windows) and ensure all prerequisites are met. For advanced configurations or troubleshooting, consult Delinea support or the full documentation. If this is for a specific OS version or setup, provide more details for tailored guidance.
