Use > Server Automation > Manage the Server Agent > Install the SA Agent in third-party mode using ADT > Install SA Agent with third-party certificates directly

Install SA Agent with third-party certificate directly using ADT

  1. Launch the SA Client and connect to an SA Core installed in third-party certificate mode.
  2. Go to Administration > System Configuration > Configuration Parameters > Data Access Engine (spin) and make sure the spin.agent.bootstrap_enabled parameter is set to 0. For more information on this parameter, see The spin.agent.bootstrap_enabled parameter.
  3. Click the Save button and restart the SA Spin component if you have any pending changes.
  4. Go to Devices > Servers > SA Agent installation and scan for unmanaged servers using the IP or the hostname of the server.
    The server icon indicates agentless servers. If the servers are not powered on, the Install SA Agent option is disabled. See Server status icons.
  5. Right-click on the unmanaged servers on which you want to install the SA Agent and select Install SA Agent.
  6. In the Install SA Agent wizard, specify your installation options to control the way the Agent is installed on the server. See Install the SA Agent using ADT for information.

  7. In the Options section, enable Verify prerequisites, copy installer, and install agent.
  8. Click Start Job. SA starts the Agent installation and generates a certificate signing request (CSR) named agent.csr in the crypto_dir directory. The crypto_dir directory defaults to the location specified under the Advanced > Temporary directory field. To specify a different crypto_dir directory, add the --crypto_dir <your folder> parameter in the Advanced > Extra installer options field.
  9. Submit the agent.csr file to your third-party Certificate Authority (CA) for issuing a certificate. SA pauses the Agent installation job for maximum 3600 seconds, waiting for a valid signed certificate. To change the default waiting time of 3600 seconds, add the --cert_gen_timeout <your custom timeout value> parameter in the Advanced > Extra installer options field.

  10. Name the certificate agent.crt, and place it in the same directory where the SA Agent has generated the CSR. As soon as the SA Agent can pick the valid certificate from this location, the Agent installation resumes to completion.