Windows Agent Setup

Setting up a Windows agent is straightforward. Follow the below steps to install and validate the agent on Windows Systems.

1. To check the current execution policy, run the following command in PowerShell                 Get-ExecutionPolicy
2. If the execution Policy is set to “Restricted” change it to “RemoteSigned” by running the following command on powershell                  Set-ExecutionPolicy RemoteSigned
   
3. If the execution policy is "RemoteSigned", you need to whitelist the SecOps Solution Code Signing Certificate in the "Trusted Root Certification Authorities" and "Trusted Publishers" folders on your local machine.
   

1. Enable rule for outbound HTTPS on port 443 for https://api.app.secopsolution.com and outbound WebSocket (WSS) rule on (port 443) for wss://socket.app.secopsolution.com.
   

2. Whitelist necessary domains for Windows and third-party application patches (Patch Management). Alternatively, customers can use PatchVault Add-On - SecOps' patch server repository to avoid whitelisting multiple domains. Talk to our team to know more about it.

• In the top navigation panel of the SecOps platform, click on the Asset module to access the asset management functionality.

2. Initiate the Onboarding Process

• Click on Add Asset to open the asset onboarding form.

• Select the Agent-based option to proceed.

3. Provide Agent Information

• Agent Mode: Select Endpoint to set up the agent directly on the target machines.

• Agent Name: Enter a name for the agent that aligns with your naming conventions for easy identification.

• Operating System: Choose the asset's operating system and its version from the available options.

• Asset Groups: Optionally, assign the asset to one or more asset groups to help categorize and manage it effectively.

• Criticality Level: Set the asset’s criticality level to determine its importance and impact in your operations.

4. Download Agent Details

• After completing the form, click on Download Agent to generate the agent details.

• Navigate to the Notifications section to retrieve the following:

1. Agent Download URL: The link to download the agent installation package.

2. License Key: A unique key to activate the agent during installation.

1. Download the installer file on the Windows machine.
2. Run the installer and select SaaS as the installation mode.
3. Enter the license key and follow the prompts to complete the installation.

1. Check the agent status in the assets section on the product.

2. Alternatively, verify the secops_server process is running in the Task Manager.

3. If the process is not running, start or restart the "SecopsService" from Windows Service.