Installing a Sepio Agent

Installing a Sepio Agent

This article explains how to install and uninstall a Sepio Agent on a Host. The Sepio Agent is a security tool that provides in-depth visibility and enforces policies on assets built into and connected to the Host. The Platform Management system remotely manages the Sepio Agent.

Preparing for Installation

You can install Sepio Agent in one of two ways:
  1. Local Installation: Install the Sepio Agent directly on each user's computer as a standalone application. This method is typically simpler and more suitable for single computers or small networks.
  2. Network Deployment: Use a network deployment tool that supports MSI installation packages, such as Microsoft Endpoint Configuration Manager. This method is ideal for larger networks where centralized management and administration are required. Network deployment allows you to pre-configure setup parameters for a more streamlined installation process.
For a list of Agent system requirements go to Platform Requirements.

Firewall Configuration

Sepio Agent uses HTTPS for communication between Sepio Agent and the Platform Management. We recommend using the standard port 443.
Ensure it is enabled on Windows by adding to Windows Firewall and in Linux by running the required command.
If using any other port other than 443, contact Sepio Support.

Windows

Windows GUI

Before installing the Agent:
If you are modifying or disabling the Recovery Override mechanism, run the required command in the CLI. See section Modifying or Disabling the Recovery Override Mechanism (Optional) described below.

To install a Sepio Agent:
  1. Download the current version of the Sepio Agent for Windows from https://download.sepiofiles.com
  2. Double click 
     
  3. Click Next 
  4. Select I accept the terms in the License Agreement, then click Next.
  5. If required, click Browse to change the file location.
  6. Enter the Sepio Platform Management fully qualified domain name (FQDN) in one of the following formats:
    1. server.domain.com (shown in the above screenshot)
    2. -or-
    3. server.subsomain.domin.com
    4. Warning: Entering the Sepio Platform Management name FQDN in an incorrect format will disable connectivity with the Agent and may cause it high CPU usage.
       
  7. Click Install
     
  8. Click Finish
The Agent is installed, you can now log in to Sepio. 

Windows CLI

Run the Agent installation with the Platform Management (Server) address:
%SepioAgent_Win_64_<sepio agent version>.msi /q CENTRALIZEDIP=<Platform Management FQDN>
Enter the Sepio Platform Management fully qualified domain name (FQDN) in one of the following formats:
CENTRALIZEDIP=server.domain.com
CENTRALIZEDIP=server.subsomain.domin.com

Ensure the Sepio Agent is Running as a service on Windows

Open Windows Services and ensure the SepioAgent status is Running.
Navigation path varies depending on your Windows version.

Linux

The Sepio Linux Agent is currently provided for Debian, Ubuntu and Red Hat based systems.
The installation file consists of a compressed file that contains the following:
  1. Dependencies.txt
  2. LinuxInstallation[Deb/RH].sh
  3. LinuxUninstall[Deb/RH].sh
  4. Scripts.sh
  5. sepio.agent<version>.[deb/rpm]
  6. sepio.agent.[deb/rh].service

Installation Path

The installation path depends on the Linux distribution on which the Agent will be deployed.
Ubuntu: /debian/netcoreapp/opt/sepio.agent/Sepio.Agent
Redhat: /usr/local/bin/sepio.agent

Dependencies

The Dependencies.txt file lists all the necessary dependencies for the Sepio Linux Agent installation. If the Linux Agent is being installed on a system with Internet access, no further action is required—the installation scripts will automatically download the required dependencies from online repositories.
Notes
Red Hat Enterprise Linux (RHEL) customers should confirm that their organization has a valid and properly configured RHEL subscription to install the necessary dependencies. 
The Dependencies.txt file enables the Administrator to organize and manage the dependencies in advance, ensuring a smooth installation of the Linux Agent. This approach offers flexibility, particularly for installations on systems without Internet access.

Before Installing the Agent

  1. Download the Sepio Agent.
    1. Obtain the latest version of the Sepio Agent for Linux from https://download.sepiofiles.com.
    2. Ensure that you download the correct file for your specific Linux distribution.
  2. Extract the Files.
    1. Make sure all downloaded files are extracted and placed in the same directory. Use the following command to extract the files: tar -xzvf <filename including extension>
  3. Adjust the Recovery Override Mechanism.
    1. If needed, modify or disable the Recovery Override mechanism as detailed in this article.
    2. Note: The RHEL 9, the package that provides the /usr/lib64/libssl.so.1.1 and /usr/lib/libcrypto.so.1.1 libraries is compat-openssl11.
  4. Run the installation script.
    1. For Ubuntu
    2. Run the following command:
    3. ./LinuxInstallationDeb.sh CENTRALIZEDIP=<Platform Management FQDN>
    4. For Red Hat Enterprise Linux
    5. Run the following command:
    6. ./LinuxInstallationRh.sh CENTRALIZEDIP=<Platform Management FQDN>
When entering the Sepio Platform Management fully qualified domain name (FQDN), use one of the following formats:
  1. CENTRALIZEDIP=server.domain.com
  2. CENTRALIZEDIP=server.subsomain.domin.com
The script logs actions in the terminal console. If the script completes with a green line, the operation is successful. Log files are always stored in the SepioFiles/Logs directory installation folder.

Modifying or Disabling the Recovery Override Mechanism (Optional)

Once the Sepio Agent is installed, it can be updated as needed. However, the Recovery Override mechanism must be configured or disabled during the initial installation via the command line.
By default, if the Sepio Agent cannot locate the specified Sepio Platform Management, it will attempt to connect to a default Sepio Platform Management instance deployed in the cloud. This default behavior is primarily for Sepio to assist with troubleshooting instances of the Sepio platform that Sepio hosts for customers. Recognizing that some organizations may prefer not to use this default Platform Management, the option to disable the Agent Recovery mechanism was provided.

Windows

Before installing the Agent, if necessary, enter one of the following commands in the CLI to set the required parameters. You can use either a fully qualified domain name (FQDN) or an IP address:
To disable the Recovery Override:
  1. %SepioAgent_Win_64_<sepio agent version>.msi RECOVERY_OVERRIDE=0.0.0.0
To enter a alternate FQDN:
  1. %SepioAgent_Win_64_<sepio agent version>.msi RECOVERY_OVERRIDE=<Alternate FQDN>

Linux

Before installing the Agent, if needed, enter one of the following commands. You can use either a fully qualified domain name (FQDN) or an IP address:
To disable the Recovery Override:
  1. %./LinuxInstallationDeb.sh RECOVERY_OVERRIDE=<0.0.0.0>
To specify an alternate FQDN:
  1. %./LinuxInstallationDeb.sh RECOVERY_OVERRIDE=<Alternate FQDN>

    • Related Articles

    • Uninstalling a Sepio Agent

      Windows Go to Windows Control Panel ->Programs and Features ->Uninstall a program ->SepioAgent->Uninstall Navigation paths vary depending on your Windows version. Linux Run the LinuxUninstall[Deb/RH].sh script in the SepioFiles/Logs directory ...

    • Installing Sepio

      Before installing Sepio You can install the Sepio Platform using various deployment options and operating systems to meet your business needs. Before starting, ensure the following: You have the relevant installation files for your target deployment ...

    • Platform Requirements

      The preferred deployment mode for the Sepio Platform is SaaS. Customers that are required by internal regulations or compliance mandates to run from their own premises (on-premises) can install and manage Sepio. Please contact ...

    • Running the Intel® Auto Verify Tool (GUI version)

      The ThinkShield BuildAssure Intel® Auto Verify Tool is a standalone graphical user interface compatible with Windows® 10 and Windows® 11 operating systems. It provides two main functions: • Platform Certificate Validation: Verifies the Platform ...

    • Installing the Agent

      Types of Agent Releases: GA (General Availability): This is the fully tested and released agent recommended by SentinelOne for general use. EA (Early Availability): This agent is still in development and may include more features than the GA version. ...