Generate Data Loss Prevention Agents
This article describes process to generate Data Loss Prevention Agents.
Note: Before you begin Symantec DLP Agent generation process, confirm that you have installed and configured an Endpoint Server.
Generating agent installation packages
Packaging process creates a ZIP file that contains agent installer, SSL certificate and keys, and installation scripts to install DLP Agents. You generate a single agent installation package for each endpoint platform where you want to deploy DLP Agents.
For example, if you want to install multiple agents on Windows 64-bit endpoints, you generate a single AgentInstaller_Win64.zip package. If you specify more than one installer for packaging, such as Windows 64-bit agent installer and Mac 64-bit agent installer, system generates separate agent packages for each platform.
Step 1: Navigate to Agent Packaging page.
Log on to Enforce Server administration console as an administrator and
navigate to System > Agents > Agent Packaging page.
Step 2: Agent Packaging page appears.
Step 3: Select one or more DLP Agent installation files.
- Browse to folder on Enforce Server where you copied agent installer files:
Step 4: Verify uploaded agent installer files.
Step 5: Enter Server IP Address or Host Name
- Typically, you enter common name (CN) of Endpoint Server host,
- or you can enter IP address of server.
- Be consistent with type of identifier you use (CN or IP). If you used CN for Endpoint Server when deploying it, use same CN for agent package. If you used an IP address to identify Endpoint Server, use same IP address for agent package.
Step 6: Enter port number for server.
- Default port is 10443. Typically you do not need to change default port unless it is already in use or intended for use by another process on server host.
Step 7: Enter Endpoint tools password.
- A password is required to use Endpoint tools to administer DLP Agents. Endpoint tools password is case-sensitive. Password is encrypted and stored in a file on Enforce Server. If you have to change this password, you must regenerate agent package and redeploy agents. You should store this password in a secure format of your own so that it can be retrieved if forgotten.
Step 8: Re-enter Endpoint tools password.
- System validates that passwords match and displays a message if they do not.
Step 9: Enter target directory for agent installation.
- Default installation directory for Windows 32- and 64-bit agents is %PROGRAMFILES%\Manufacturer\Endpoint Agent. Change default path if you want to install Windows agent to a different location on endpoint host.
Note: Include drive letter if you plan to change default directory. For example, use C:\Endpoint Agent. Not including a drive letter causes agent installation to fail.
Step 10: Enter uninstall password key (optional, Windows only).
- Use of an agent uninstall password is supported for Windows 32 and 64 bit agents. Uninstall password is a tamper-proof mechanism that requires a password to uninstall DLP Agent.
- Generate Uninstallation Password with UninstallPwdKeyGenerator.exe
Step 1: Run UninstallPwdKeyGenerator with Administrator permission.
Step 2: Navigate to directory where UninstallPwdKeyGenerator.exe is stored.
Step 3: Run command UninstallPwdKeyGenerator.exe –xp=<password>
Where <password> is password that you want to use. Choose a unique password key (Preferably same as administrator password for easy access).
Step 4: Copy generated uninstall password.
This unique password contains 45 Digit encrypted key of your password.
Step 11: Click Generate Installer Packages.
- This action generates agent installer package for each platform that you selected in step 3.
- If you are generating more than one package generation process may take a few minutes.
Step 12: Save generated AgentInstaller.zip file.
Step 13: Verify generated agent installers.
Download attached file for screenshots.
Thank you.