Some severs, such as servers that are deployed on Alibaba Finance Cloud or Virtual Private Cloud (VPC), cannot access the Internet. This topic describes how to install the Security Center agent on these servers.

Prerequisites

If third-party security software such as SafeDog or Yunsuo is installed on your servers, the Security Center agent may fail to be installed. Before you install the Security Center agent, we recommend that you check whether such software is installed on your servers. If third-party security software is installed on your servers, we recommend that you disable or uninstall the software before you install the Security Center agent.

Procedure

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Settings.
  3. On the Settings page, click the Agent tab.
  4. On the Agent tab, determine the operating system of your server. Then, follow the on-screen instructions to install the latest Security Center agent.
    • Windows
      1. On the Agent tab, click Download Agent to download the latest installation file for the Security Center agent to your computer.
      2. Upload the installation file to your Windows server. For example, you can use an FTP tool to upload the installation file to the server.
      3. On the Windows server, run the installer of the Security Center agent as an administrator and complete the wizard to install the agent.
        Note The system may prompt you to enter an installation verification key when you install the Security Center agent. The key is used to associate your server with your Alibaba Cloud account. You can find the key on the Agent tab.
        Installation verification key for Windows
    • Linux
      1. Click one of the following links based on your Linux version to download the installer of the Security Center agent: Installation command for Linux
      2. Upload the installer of the Security Center agent to your Linux server. For example, you can use an FTP tool to upload the installer to the server.
      3. Log on to your Linux server as an administrator.
      4. Go to the directory where the installer of the Security Center agent is stored, and run one of the following commands based on your Linux version:
        • Command for 32-bit Linux: chmod +x AliAqsInstall_32.sh && ./AliAqsInstall_32.sh xxxxxx
        • Command for 64-bit Linux: chmod +x AliAqsInstall_64.sh && ./AliAqsInstall_64.sh xxxxxx
        Note The xxxxxx string at the end of both the preceding installation commands is the installation verification key. When you run the command, you must replace the xxxxxx string with the six-digit installation verification key that appears on the Agent tab. This installation verification key is the same as that for the installation in Windows and is used to associate your server with your Alibaba Cloud account.
    About five minutes after the Security Center agent is installed, you can view the status of the client in the Agent column of the server on the Assets page. In the Agent column of the server, the status of the client changes from Close to Enable.

Verify the installation of the Security Center agent

To verify that the server has the Security Center agent installed, perform the following steps:

  1. Check whether the AliYunDun and AliYunDunUpdate processes of the Security Center agent are normally running on the server. For more information about the processes of the Security Center agent, see Security Center agent overview.
    • Windows operating systems

      Open Task Manager and check whether the related processes are running as expected.

      Windows
    • Linux operating systems

      Run the ps aux | grep AliYunDun command to check whether the related processes are running as expected.

      linux
  2. Run the following telnet commands to check whether the server can connect to the Security Center servers.
    Make sure that the server can connect to both the Security Center servers in the following commands:
    • telnet jsrv3.aegis.aliyun.com 80
    • telnet update3.aegis.aliyun.com 80

If the verification fails, you must troubleshoot why the Security Center agent is offline. For more information, see Troubleshoot why the Security Center agent is offline.

References

Install the Security Center agent on multiple ECS instances at a time

Install the Security Center agent on servers not deployed on Alibaba Cloud