RMM: ConnectWise Automate Deployment

After Sept 30th, 2024 all scripted agent installs will require the -j $user_secret

NOTE: Installs will error out with “invalid token” in the logs if not supplied.



Although replacing the previously imported script could be used to complete updates for this change, the risk of affecting previous deployment methods/schedules is high. It is recommended to use the below process instead.

Existing Automate deployments utilizing scripts must make the following modifications:

  1. Change LINE 15 (install command)

    image-20240913-145805.png


    OLD: %ltsvcdir%\ConnectSecure\cybercnsagent.exe -c @CompanyID@ -e @TenateID@ -i;

    NEW: %ltsvcdir%\ConnectSecure\cybercnsagent.exe -c @CompanyID@ -e TenateID-Changeme -j UserSecret-Changeme -i

    Please replace TenateID-Changeme and UserSecret-Changeme, these values can be found in the ConnectSecure portal.

    When viewing a customer (1), and under agents (2) please find the CompanyID(3), and UserSecret (4)

    image-20240903-190720.png

  2. Replace the cybercnsagent.exe file in your LTshare or deployment website that is being utilized by the Automate script.


ConnectSecure Agent Deployment for Windows using ConnectWise Automate RMM

Table of Contents

Overview

ConnectSecure agents can be rapidly deployed using your ConnectWise Automate RMM by using a combination of EDFs and Scripting. Using this method you will enable a Client-based EDF that is enabled with a checkbox; screenshot below. This will push the ConnectSecure agent to all computers in that Client location once enabled based on what Group and Scheduling you configure.

ConnectSecure Automate Deployment Script Requirements

  1. ConnectWise Automate (hosted or on-premise versions are supported)

  2. Permission to import a script

  3. Download our XML script from the .zip file below.

  4. Login to your ConnectWise Automate Control Center desktop application

  5. Select System > General > Import > XML Expansion and choose the file download from below.

    NOTE: It is common to have import errors on first import attempt, please attempt the import twice. This is a known issue in Automate.

  6. Modify line 16.

  7. If agent deployment is desired for a client; the companyID must be saved on the client level.

ConnectSecure Automate XML Script Download

  1. Import the XML Automate script into your Automate server.

  2. Browse to the Labtech Expansion (.xml) file you downloaded from Step 3 above and choose Open.

 

  1. Choose YES when prompted

  1. Please replace TenateID-Changeme and UserSecret-Changeme (Line 15), these values can be found in the portal.

    When viewing a customer, and under AGENTS please find the TenateID (3), and UserSecret (4)

Deployment Prerequisites

  1. Before you can use any of the methods described below, you must upload the ‘cybercnsagent.exe' to your LTShare located on your Automate server at the following path: ‘LTShare\Transfer\ConnnectSecure\cybercnsagent.exe’

The download location for ‘cybercnsagent.exe’ will come from the company level; steps below.

If you are using hosted Automate (domain.hostedrmm.com) then you will need to setup WebDAV access to upload to your LTShare. Here is the link from ConnectWise Documentation on how to set this up: https://docs.connectwise.com/ConnectWise_Automate_Documentation/020/010/080

  1. You must setup each Automate client with their CyberCNS CompanyID from your CyberCNS portal. This comes when you use the ‘Probe/Agent’ download button at the Company level.

  1. In Automate, double-click on any client and find the Info > ConnectSecure tab to enter the company for ConnectSecure deployment. This is required for EACH company you wish to use the script to deploy agents.

Using the ConnectSecure Automate Deployment Script

Three Deployment Methods

  1. Manual: Computer Level Install

  2. Manual: Client Level Install (all computers at the Client level)

  3. Automated: Search/Group based auto installs by scheduled script

Method 1 and 2 - Manual: Computer Level Install or Manual: Client Level Install

Both manual methods (1 and 2) use the same steps outlined below

  1. Right-click on any computer with an Automate agent installed and choose 'Scripts > ConnectSecure > Connectsecure V4 Agent Installer - PSA Tickets Enabled

 

Once the script is selected, please confirm execution time.

 

 

Select OK the agent should start installation.

Method 3 - Automated: Using Search, EDF, Groups, and Scheduled Script

Configuring Search in Automate

  1. From Automate Control Center desktop application, browse to Automate > Searches > View Searches

  1. Tap the +Add button to create a new search

Tap on the to start and then click on ‘Computer.Antivirus.DefinitionFileAge.Days’ and then select Computer (2), Client (3), Extra Data Field (4), CyberCNS (5), and CyberCNS-Daily10AMDeploy (6)

 

 

Once the selection is made, give this Search a name (1) and choose save (2).

 

 

Search is completed and you can close out any of the ‘Search’ windows.

Configuring EDF in Automate

  1. From Automate choose Browse > Clients

  2. Double tap on the Client you wish to enable ConnectSecure agent deployment (1)

  3. Choose the Info tab (2)

  4. Choose the ConnectSecure tab (3) and use the checkbox options to enable auto deployment (4).

  5. Ensure you select ‘Save Additional Information’ and ‘Save’.

 

Retrieve the Company ID within the ConnectSecure portal

You must be at the Company level to see the installer options; it will not display at the Global level.

Tap on Overview > Agents

 

Once the agent parameters screen is displayed you will have your unique ‘CompanyID’ needed for the Automate EDF’s.

 

Copy these value and ensure they are entered into your EDF field as displayed below and choose Save (3) once you are finished.

Configuring Group in Automate

  1. Navigate to Browse > Groups tab > right-click on Groups and select ‘Create Group’

  1. Give the Group a name (1), associate your Search with the Group (2), check the ‘Limit to Search’ checkbox (3), and then Save/Create button (4).

 

Once you save you can proceed to setup the script scheduler using your preferences.

Configuring Scheduled Scripts in Automate

  1. From within the ‘Group’ created above, choose Computers (1) > Scheduled Scripts (2) > choose the ‘ConnectSecure\Connectsecure V4 Agent Installer - PSA Tickets Enabled’ script (3) > set the Daily schedule option (4) > and the target start time (5). Select ‘Add' when complete to complete adding the script to the group.

 

Then choose the Advanced Settings link

 

Validate the ‘Skip Offline Agents’ (1) and ‘Stagger Scripts’ (2) is configured to avoid any performance or network issues.

 

Tap the Add (3) button when completed.

You should see the script show in the multi-line preview below once saved.

If you have any issues or need assistance with the script steps please contact our Support Team by emailing support@cybercns.com and we will get in touch with technical support.