/
How To: Install ConnectSecure Agent

How To: Install ConnectSecure Agent

Overview

This document will cover installing the ConnectSecure Vulnerability Scan Agent for V4 using different methods.

CS-Video.png

Instructions

Please review the https://cybercns.atlassian.net/wiki/x/nYA_fif you require policies for agent dependencies.

  1. You must be at the company level to see the installer options; they will not display globally.

  2. Tap on Overview > Agents > Download Agent icon.

image-20240715-173911.png

The agent ALWAYS installs as a Lightweight by default. You must use the Discovery Settings to convert the Lightweight to a Probe.

How To: Configure Company Discovery Settings

How To: Convert Lightweight Agent to Probe

  1. Select the desired operating system: Windows, Mac, Linux, or ARM.

image-20250121-145236.png

Windows

Web Installer (Download)

Tap this option to download the โ€˜cybercns_webinstaller,โ€™ which comes as a Windows Application (*.exe) and should use the โ€˜Run as Administratorโ€™ option when installing.

image-20250121-145312.png

The system will prompt you to save the application (.exe) to your desired location; choose and click save.

Browse to the location of the download. Itโ€™s called โ€˜cybercns_webinstaller_IDโ€™.

Run the application as administrator to install the agent.

image-20240216-212350.png

The command prompt will appear temporarily and display the installation progress.

image-20240216-212503.png

Once the CyberCNSAgent service is successfully started, the prompt will close out automatically.

Installation using Web Installer is completed.

Command Line (Download)

Tap on the download option to use the command prompt installation method.

image-20250121-145348.png

You will be prompted to save the application called โ€˜cybercnsagentโ€™ (.exe) to a location of your choice.

Tap save to continue.

To install, open the Command Prompt as Administrator.

image-20240216-213037.png

Use the change directory command and navigate to the location where you saved the โ€˜cybercnsagent.exeโ€™ application from the download step earlier.

Run the following command:

cybercnsagent.exe -c <CompanyID> -e <TenantID> -j <User_Secret> -i

^ Replace the <CompanyID>, <TenantID>, and <User_Secret> from the values found in the agent installation window.

image-20250121-145518.png

Agent installation should start and be completed with a successful message, and the CyberCNSAgent service should be started.

image-20240216-214510.png

Installation using Command Prompt is completed.

PowerShell (Copy to Clipboard)

(preferred installation method)

Tap the Copy to Clipboard button to copy the prebuilt PowerShell script to your clipboard.

image-20250121-145547.png

Open PowerShell as Administrator and run the script.

image-20240216-214729.png

The script will begin the agent download process first, which shows in the PowerShell window.

image-20240216-214840.png

Once the download completes, the script will need a return/enter to start and complete the installation.

Tap Enter.

image-20240216-214932.png

Once the CyberCNSAgent service is started, you can close PowerShell out.

image-20240216-215120.png

Installation using PowerShell (Copy to Clipboard) is completed.

MSI via GPO

Refer to our KB here: How To: Install ConnectSecure Agent MSI via GPO

Mac

MacOS Agent is signed with an official Apple Developer ID. This ensures:
โœ… System Trust: The agent meets Appleโ€™s security and permission requirements.
๐Ÿšซ No Security Warnings: Installation proceeds without gatekeeper alerts or trust prompts.
๐Ÿ”„ Seamless Updates: Signed code supports smooth agent updates and system integration.

Terminal (Copy to Clipboard)

  1. Select the Mac option, then use the Copy to Clipboard button.

image-20250121-194206.png

  1. Launch the MAC Terminal

  2. Execute: sudo su (enter the password)

  3. Execute: paste the command copied to the clipboard

image-20240520-145451.png

MAC Agent Install Completed

Installer PKG

  1. Select the Mac option, then tap the Download button.

image-20250121-194305.png

  1. Launch the Terminal

  2. Run the following commands

sudo su sudo installer -pkg ./cybercnsagent_darwin.pkg -target /; sudo /opt/install.sh -c XXXX -e XXXX -j XXXX -i

In the above command on line #2, you need to replace the values for โ€˜XXXXโ€™

-c XXXX = your Company ID

-e XXXX = your Tenant ID

-j XXXX = your User Secret

image-20250121-194500.png

MAC PKG Agent Install Completed

MacOS Agent โ€“ Required Permissions for MDM Deployment

The ConnectSecure macOS agent requires Full Disk Access to operate correctly. To avoid user prompts and ensure a smooth deployment through Ninja MDM or any other MDM platform, you must configure a PPPC (Privacy Preferences Policy Control) profile.

Required Values for the PPPC Profile

  • Team Identifier: Retrieved from the agent binary

  • Bundle Identifier: The bundle ID of the ConnectSecure macOS agent

  • Code Requirement: identifier "[Bundle ID]" and anchor apple generic and team identifier "[Team ID]"

How to Retrieve the Team Identifier
Run the following command on a device where the agent is installed:
codesign -dvvv /opt/CyberCNSAgent/cybercnsagent_darwin 2>&1 | grep 'TeamIdentifier'
This will return a value in the format:
TeamIdentifier=XXXXXXXXXX
Use this value in your PPPC profile

ConnectSecure does not currently provide a prebuilt mobileconfig or XML file.
Partners must create their own PPPC profile using the identifiers listed above

Linux

Terminal (Copy to Clipboard)

  1. Select the Linux option, then use the Copy to Clipboard button.

image-20250121-194706.png

  1. Launch the Terminal

  2. Execute: su root (enter the root password)

  3. Execute: paste the command copied to the clipboard

image-20240520-180329.png

Linux Agent Install Completed

ARM

Use ARM for installation with Raspberry Pi V4 or better. This is the only OS that supports both x32 and x64-bit architectures.

Terminal (Copy to Clipboard)

image-20250121-194921.png

Installing V4 Agent on AWS EC2 Server

Before installing the agent, you must configure your EC2 instanceโ€™s Security Group to permit communication with the ConnectSecure platform. This step is critical for proper Agent functionality in AWS.

The Security Group acts as a virtual firewall, and it must be updated to allow both inbound and outbound traffic required by the Agent. Without this configuration, the Agent may install successfully but will be unable to check in or transmit data to the ConnectSecure portal.

Find Your Required IP/Domains to Whitelist using the below link

Agent Dependency | POD/REGION IP WHITELISTING

ย 

Configure Your AWS EC2 Security Group

  • Log in to your AWS Management Console.

  • Navigate to the EC2 service.

  • In the left-hand menu, go to Network & Security > Security Groups.

  • Find and select the Security Group that is attached to your EC2 instance.

  • Select the Outbound Rules tab.

  • Click Edit outbound rules.

  • Add Allow rules for all the required IPs, domains, and ports from the Whitelisting document above.

  • Select the Inbound Rules tab, click Edit inbound rules, and add Allow rules for the exact same IPs, domains, and ports.

  • Save the rules for both inbound and outbound.

ย 

Step-by-Step Installation Procedure

These instructions are the standard V4 agent installation. You will retrieve a pre-configured command directly from your ConnectSecure portal.

Log in to your ConnectSecure portal - https://myconnectsecure.com/sign-in?tenant_name=CHANGEME

Navigate to the Company > Overview > Agents > Download Agent icon.

image-20251210-193120.png

A window will appear. Select the operating system that matches your EC2 instance (e.g., Windows or Linux).

image-20251210-193222.png

ย 

Windows Server EC2 Instance

  • Select the Windows tab.

  • Click the Copy to Clipboard button under the PowerShell option (this is the preferred method).

  • Log in to your Windows EC2 instance via RDP (Remote Desktop).

  • Open PowerShell as an Administrator.

  • Paste the script you copied from the portal and press Enter.

  • The PowerShell script will download the agent, install it, and start the service.

Linux EC2 Instance

  • Select the Linux tab.

  • Click the Copy to Clipboard button for the Terminal command.

  • Log in to your EC2 instance via SSH.

  • Elevate your privileges to root by running: sudo su

  • Paste the command you copied from the portal and press Enter.

  • The script will download, install, and configure the agent automatically.

For your reference, here is the main documentation article this guide is based on:

Once you have configured the Security Group and run the installation script, the agent should start the "CyberCNSAgent" service. Within a few minutes, you should see the new asset appear in your ConnectSecure portal under Overview > Agents.

image-20251211-142430.png

RMM or Script Install

NOTE: If you are planning to deploy ConnectSecure V4 Agent through your RMM or similar scripting engine(s), please use the following URL, which has no expiration:

https://configuration.myconnectsecure.com/api/v4/configuration/agentlink?ostype=windows

โ€‹>>supported ostype keys

  • image-20240213-134936.png

  1. For Windows -> windows

  2. For Linux -> linux

  3. For MAC -> darwin

  4. For ARM / Raspberry Pi. ย -> arm

Need Support?

Do you need help? You can access our support portal to create, view, and update tickets anytime.

https://cybercns.freshdesk.com

Click below to be directed to our secure support portal or email support@cybercns.com to open a ticket.

image-20231229-202028.png

ย