Some servers are deployed in a private network such as Alibaba Finance Cloud or Virtual Private Cloud (VPC) network, and they cannot be accessed over a public network. This topic describes how to install the Security Center agent on these servers.

Prerequisites

If any third-party security software such as Fortinet or FortiGate is installed on your servers, you may fail to install the Security Center agent. We recommend that you check whether any third-party security software is installed on your server before you install the Security Center agent. If the third-party security software is already installed on your servers, we recommend that you disable or uninstall the software before you install the agent.

Procedure

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Settings.
  3. On the Settings page, click the Agent tab.
  4. On the Agent page, follow the steps and download the latest agent based on the operating system of your server.
    • Windows operating system
      1. On the Agent page, click Click to download to download the latest installation file to your local computer.
      2. Upload the installation file to the Windows server. For example, you can use an FTP tool to upload the installation file to the server.
      3. Run the Security Center agent installer on your Windows server as an administrator and follow the wizard to complete the installation.
        Note You may be required to enter the installation verification key when you install the Security Center agent. The key is used to associate the server with your Alibaba Cloud account. You can retrieve the installation verification key on the Agent page.
        Installation verification key for Windows
    • Linux operating system
      1. Click one of the following links to download the Security Center agent installer based on your Linux version. Linux install command
      2. Upload the Security Center agent installer to your Linux server. For example, you can use an FTP tool to upload the installation file to the server.
      3. Log on to your Linux server as an administrator.
      4. Go to the directory where the Security Center agent installer is stored, and run one of the following commands based on your Linux version.
        • 32-bit Linux: chmod +x AliAqsInstall_32.sh && . /AliAqsInstall_32.sh xxxxxx
        • 64-bit Linux: chmod +x AliAqsInstall_64.sh && . /AliAqsInstall_64.sh xxxxxx
        Note The xxxxxx string at the end of this install command is the installation verification Key. When you run the command, you must replace the xxxxxx part with the six-digit installation verification key displayed on the Agent page. This verification key is the same as that in the installation of Windows. It is used to associate the server with your Alibaba Cloud account.
    You can check the agent state of the server on the Assets page five minutes after the Security Center agent is installed. The agent state has changed from Close to Enable.

Verify the installation of the agent

Follow these steps to verify that your server has the Security Center agent installed.

  1. Check whether the AliYunDun and AliYunDunUpdate processes of the Security Center agent are running as expected on your server. For more information about the processes of the Security Center agent, see Security Center agent overview.
    • Windows OS

      Open Task Manager and check whether the processes are running.

      Windows
    • Linux OS

      Run the ps aux | grep AliYunDun command to check whether the processes are running.

      Linux
  2. Run the following telnet commands to check whether your server can connect to the Security Center servers.
    Make sure that you can connect to the following servers:
    • telnet jsrv3.aegis.aliyun.com 80
    • telnet update3.aegis.aliyun.com 80

For more information about installation failures, see Troubleshoot the problem of Security Center agent going offline.

Related topics

Install the Security Center agent on multiple Alibaba Cloud ECS instances

Install the Security Center agent on external instances