Windows Agent

This section covers the following topics:

• Overview
• Supported Operating Systems
• Install the Node Agent
  • Verify Checksum for Node Agent Package File
• Configure the Node Agent
• Restart the Node Agent
• Uninstall the Node Agent
• Upgrade the Node Agent

Overview

There are two versions of the Windows Node Agent:

Install the Windows Node Agent with database runtime components if you intend to run scans on Microsoft SQL Server, IBM DB2, or Oracle databases.

Supported Operating Systems

Microsoft Windows Operating Systems

Ground Labs supports and tests ER2 for all Windows versions supported by Microsoft.

Prior versions of Windows may continue to work as expected. However, Ground Labs cannot guarantee support for these versions indefinitely.

Install the Node Agent

1. Log in to the ER2 Web Console.
2. Go to Settings > Agents > Node Agent Downloads.
3. On the Node Agent Downloads page, download the appropriate Windows Node Agent installer.
4. (Optional) Verify the checksum of the downloaded Node Agent package file.
5. If there is a previous version of the Node Agent installed, remove it first.
6. Run the downloaded installer and click Next >.
7. To install the Node Agent, select Install.
   

8. While the Node Agent is being installed, the installer prompts you to configure your Node Agent to connect to the Master Server.
   

   Get the Master Server public key from the Server Information page.
9. Fill in the fields and click Test Connection.
10. Click Finish to complete the installation.

Verify Checksum for Node Agent Package File

You can determine the integrity of the downloaded Node Agent package file by verifying the checksum before installing the Node Agent.

1. Download the Node Agent package file.
2. Run the commands in a terminal to generate the hash value for the Node Agent package file.

   • MD5 hash (128-bit)

     # Syntax: certutil -hashfile <path to Node Agent package file> MD5 certutil -hashfile er2_2.x.x-windows-x64.msi MD5
     Example MD5 hash: f65a2cd26570ddb7efb6a2a4318388ac

   • SHA1 hash (160-bit)

     # Syntax: certutil -hashfile <path to Node Agent package file> SHA1 certutil -hashfile er2_2.x.x-windows-x64.msi SHA1
     Example SHA1 hash: 33bcd6678580ae38a03183e94b4038e72b8f18f4

   • SHA256 hash (256-bit)

     # Syntax: certutil -hashfile <path to Node Agent package file> SHA256 certutil -hashfile er2_2.x.x-windows-x64.msi SHA256
     Example SHA256 hash: 1ee094a222f7d9bae9015ab2c4ea37df71000556b3acd2632ee27013844c49da

3. In the ER2 Web Console, go to the Settings > Agents > Node Agent Downloads page. The Hash column lists the expected hash values for each Node Agent package file.

4. Compare the generated hash values from Step 2 with the expected hash values listed in the Web Console; both hash values should be equal.

   If the hash values do not match, check that your network connection is stable, download the Node Agent package again from the Web Console, and verify the checksums again. If the issue still persists, contact Ground Labs Technical Support.

Configure the Node Agent

To configure the Node Agent (to point to a new Master Server, or update the Master Public Key):

1. On the Node Agent host, run the following file as an Administrator:

   C:\Program Files (x86)\Ground Labs\Enterprise Recon 2\er_config_gui.exe

2. Configure the following fields and click Test Connection.

   Setting	Description
   Master server IP Address or host name	Specify a Master Server's host name or IP address. For example, 10.1.100.100.
   Master server public key (optional)	Enter the Master Public Key. Get the Master Server public key from the Server Information page.
   Target Group (optional)	Specify Target initial group.

3. Click Finish to complete the installation.

Restart the Node Agent

To restart the Node Agent, run the commands in Command Prompt as Administrator:

net stop "Enterprise Recon 2 Agent" # stops the Agent net start "Enterprise Recon 2 Agent" # starts the Agent

Uninstall the Node Agent

Windows 64-bit Node Agent

To uninstall the Node Agent:

1. In the Control Panel, go to Programs > Programs and Features.
2. Search for Enterprise Recon 2 Agent (x64) in the list of installed programs.
3. Right click on Enterprise Recon 2 Agent (x64), select Uninstall, and follow the wizard.

To uninstall the Node Agent from the command line, open the Command Prompt as Administrator and run:

wmic product where name="Enterprise Recon 2 Agent" uninstall

Windows 32-bit Node Agent

To uninstall the Node Agent:

1. In the Control Panel, go to Programs > Programs and Features.
2. Search for Enterprise Recon 2 Agent (x32) in the list of installed programs.
3. Right click on Enterprise Recon 2 Agent (x32), select Uninstall, and follow the wizard.

To uninstall the Node Agent from the command line, open the Command Prompt as Administrator and run:

wmic product where name="Enterprise Recon 2 Agent" uninstall

Upgrade the Node Agent

See Agent Upgrade for more information.