Deploying the Datto Endpoint Security agent

Interactive install

1. Run the installer as an administrator. The Datto EDR Installer modal is displayed.
   
2. In the Instance field, enter the cname or full URL of your EDR instance (such as https://mycompanyname.infocyte.com). The URL will be supplied to you via email or by your EDR representative.
3. If the agent should use a proxy account, in the Proxy field, enter the username, password, IP address, and port information in the format shown.
4. If desired, complete the Agent Friendly Name field.
5. Should you wish to automatically assign this agent to an organization and location, input a registration key. Doing so streamlines the process when you have hundreds or thousands of agents to manage at once. You can generate registration keys at > Admin > Agents > Registration Keys. For more information about managing organizations and locations, refer to Deploying the Datto Endpoint Security agent.
6. Verify the Installation Path. Make any necessary changes.
7. Click Submit.

Command line install

To install the agent via command line, run the executable within an administrator shell (such as PowerShell) in the following format:

SYNTAX:
windows64.exe [FLAGS] [OPTIONS] [SUBCOMMAND]

EXAMPLE:
windows64.exe --key <Registration Key> --url https://mycompany.infocyte.com
					
FLAGS:
 --debug Turn on debug logging
 --enforce-https-certs Use TLS certificate validation (only use if providing own cert!)
 --help Prints help information
 --ignore-versioning Don't update local binary to match server
 --no-extensions Don't run custom extensions
 --no-install Do not install the agent, default = install
 --no-intense-io Don't do any io-intensive file operations
 --no-rts Do not run in RTS mode, only normal scans
 --no-verify Don't verify the remote api is reachable
 --quiet Do not send output to console (only log file)
 --repl Launch lua repl with built in runtime extensions
 --service Run as a service
 --uninstall Remove HUNT Agent that was installed via --install
 --version Prints version information
 --verbose Turn on verbose logging

OPTIONS:
 --url <api-url>
 Sets the API URL (ex: https://192.168.1.1) to use for either generating a file or API communication

 --auth <auth> Authenticator to use for auto-registration (optional)
 --config <config> Use this as the configuration file
 --database-name <database-name> Name of database to use for persistent storage
 --extension <extension> Path to an extension or directory containing extensions
 --friendly <friendly> Set a friendly name for this agent on the HUNT Server
 --generate-config <generate> Create a new configuration file
 --install-dir <install-dir> Specify directory in which to install HUNT Agent
 --interval <interval> Sets the interval (in seconds) to use when pinging the API
 --log-dir <log-dir> Sets the directory in which to store log files
 --max-extension-run-time <max-extension-run-time> Max number of seconds an extension can run
 --proxy <proxy>
 Sets the optional HTTP proxy to use (ex: user:password@192.168.1.1:8080)

 --key <server-key> Registration key (optional)

SUBCOMMANDS:
 help - Prints this message or the help of the given subcommand(s)
 survey - performs only survey actions, saving data to disk and exiting

Installation process

1. After you download the installer, open a Terminal session on your Linux system and run the following command to make the installer executable.

chmod +x linux64.exe

2. Next, launch the installer as a super user. Replace all values in brackets with the values corresponding to your instance.

sudo ./linux64.exe --key [Registration Key] --url [https://mycompany.infocyte.com]

3. Follow the prompts to install the agent.

Prerequisites

• The Endpoint Security agent supports Apple endpoints with Intel x86 and Apple M1 (ARM) processors.
• There are 2 chipsets: Mac Silicon and Mac Intel. It is important to know your build when downloading the agent. To find the chipset on the endpoint, click the Apple icon in the upper-left corner and select About this Mac.

Download and Prepare

1. Locate/create the location registration key:
   1. Select Admin.
   2. In the left navigation menu, click Registration Keys. If you do not see your location in the list, click the Add New Registration Key button. Save this key because you will need to add it in the agent installation command line.
2. Download the agent:

   1. In the top navigation bar, click Organizations.

   2. Select the organization and the location to which you'll be deploying the agent. For more information, refer to Creating and managing organizations, locations, and devices.

   3. On the Location page, click the Download Agent button.
      
      
      
      

   4. The Download Agent modal will open.
      
      

   5. In the Processor drop-down list, select the appropriate agent for the endpoint's MacOS.
      

   6. To download the agent to your current computer, click the Download button.

   7. Save the file to the Downloads directory.
      

Installation process

1. On your Mac, open Terminal from the Launchpad.

2. Run the following command to navigate to the Downloads folder. To install the agent, you will be running commands from the Downloads folder.

cd ~/Downloads

3. Rename the file agent.macos.bin.

sudo mv ./agent.macos-amd64.<sha256 hash>.bin ./agent.macos-amd64.bin

4. Run the following command to make the installer executable. This will ensure the EDR agent has the correct permissions to run as an executable. By using the chmod command you are telling the MacOS this file is safe to run, a necessary step in the installation process.

chmod +x ./agent.macos.bin

5. Launch the installer as a super user.

sudo ./agent.macos.bin

NOTE   If the same user who downloaded the file is logged into the system, sudo privileges are not needed since the user already has the necessary permissions.

6. Follow the prompts to install the agent.

NOTE  Rosetta is a compatibility layer that allows Intel-based apps to run on Apple Silicon processors. If prompted, allow the installation to proceed to ensure the agent runs correctly.

Alternatively, the agent can be installed with a single command line:

sudo ./agent.macos-amd64.bin --url <instance URL> --key <registration key>

NOTE  The default installation directory is /usr/local/infocyte/agent. The service name will be HUNTAgent.