Skip to content

AGENT Installation

This section covers EPAS AGENT systems installation within an existing EPAS MASTER instance. EPAS AGENTS are hardware appliances deployed in the customer data center, used extensively in the Enforcer deployment for load balancing and high availability during password change requests.

Info

This document focused on the tasks which are to be performed on the EPAS MASTER. Physical installation or IP address configuration of the EPAS AGENT are covered in the EPAS Operations Manual.

Adding an AGENT

The following steps should be performed, for each AGENT to be enrolled in the environment:

  1. Use an EPAS administrator account and navigate to the System » EPAS Systems page.
  2. Click on the New Agent button.
  3. In the New Agent Definition page, enter the following details:
    • Name of the AGENT system. This name is used to identify the AGENT system in EPAS configuration sections, and does not need to follow any naming convention. It is recommended to use the allocated system hostname.
    • Description: containing any additional details about the AGENT system, such as physical location, usage scopes, etc. (Optional)
    • IP Address: enter the IP address of the AGENT system, as configured on the serial console during the hardware installation.
    • TCP Port: TCP port number used for communication from the MASTER to the AGENT system. (Default: 22)
    • PQEnf Port: TCP port number user for communication from the enrolled systems to the AGENT system. (Default: 10443)
    • Force: option to force the initial connection towards the AGENT system. This option can be used to take over AGENT systems which were previously in use by other MASTER appliances. (Optional)
  4. Click the Save button to attempt to connect and validate the AGENT system. This operation can take up to a minute, depending on the network connection speed and / or the lack of DNS availability. Upon succesfull completion, the AGENT should appear in the list of systems.

Note

The Agent Systems page shows an overview of all the installed EPAS AGENTs (name, IP address, TCP port, serial number and version). Several maintenance actions are also available, such as: Reconnect, Test, Remove, Reboot or Shutdown.

It is not possible to use the Remove action while EPAS AGENTs are actively used in the Enforcer component.

Agent Systems section

Enabling EPAS Enforcer functionality for AGENT

After installation, EPAS AGENTs are not automatically added into the pool of actively used systems. To make sure that the AGENT system is active and available for Enforcer operations, navigate to Enforcer » Settings and click the Enable action for any AGENT system which is used in Enforcer. Other settings can be changed, such as the default timeout value between MASTER and AGENT communications, as well as the service port number.

AGENT listing in the Enforcer Settings

Warning

Once an AGENT is enabled and used in an Enforcer, it is no longer possible to disable it or change the settings. Should an AGENT be removed or disabled, make sure it is no longer used in any Enforcer » Server Groups » Servers, for any of the Primary or Failover roles.