Install an SA Agent using the CLI

--auth_path

Specifies the complete path to the file that contains the trusted authorities in PEM format.

--coreinstall

Install initialization scripts in the proper location for the core server.

--customer_id <customer>

Assigns the managed server to the specified customer. This option requires the --username and --password options. For more information about customers see Create and managing customers.

--del_opsw_gw_addr_list

Deletes the list of gateway addresses.

-f

Forces the Agent to be installed even if environment check errors occur. This option is useful when the server is not connected to an SA core.

When using the -f option, you must run the Agent installer as root on Unix operating systems and as the administrator on Windows operating systems.

--fingerprint

Specifies the fingerprint of the core certificate.

If you specify a value for this option, the Agent installer will verify that the Certificate Authority certificate used to sign the core's SSL certificate matches the value you provided. Specifying a value for this option increases security during the Agent installation process by ensuring that the Agent attaches itself to the correct core.

To obtain the correct value for the core certificate fingerprint option, log on to the core as root (you may need to have an SA System Administrator perform this task for you) and run the following command:

/opt/opsware/bin/openssl x509 -in /var/opt/opsware/crypto/agent/opsware-ca.crt -fingerprint -noout

The output looks like the following:

SHA1 Fingerprint=D2:3B:F8:72:B9:55:0D: DE:97:04:D5:C2:A5:6B:B2:09:5C:0A:0D:7F

The fingerprint is the string of hexadecimal numbers following the equal sign:

D2:3B:F8:72:B9:55:0D:DE:97:04:D5:C2:A5:6B:B2:09:5C:0A:0D:7F

--force_full_hw_reg

Causes a full hardware registration to be performed on the server after the Agent is installed. The default is for a minimal hardware registration to be performed. For more information, see Software and hardware inventory.

--force_sw_reg

Causes a software registration to be performed on the server after the Agent is installed. By default, the software registration is not performed until the regularly scheduled time. For more information, see Software and hardware inventory.

--force_virt_reg

Force full virtualization registration (default is no registration).

-h

Displays all the options available with the Agent installer command.

--logfile <path>

Specifies the path and file name of the Agent installer log file. By default, the current directory is set as the path. By default, the log file is:

opsware-agent-installer-<date>.log

--loglevel <level>

Sets the log level for log messages. <level> must be one of the following: trace, info, warn, or error.

The level error logs the least detail. The level trace logs all messages. By default, the log level is set to info.

--no_anonymous_ssl

Disables anonymous SSL. This option configures the Agent so that browsers cannot connect to its web interface without a valid certificate. This option applies to dormant Agents only. If specified, the dormant Agent will require clients that connect to its web interface to have a valid certificate.

--no_check_reachability

Suppresses a reachability check. The default is to perform a reachability check during fresh installs, and not to perform this check during upgrades.

--no_open_fw

Does not open the Windows firewall to communicate with the SA core.

By default, the Agent installer will modify the Windows firewall configuration on Windows 2003 (r2) or Windows 2008 servers to allow the core to contact the managed server on port 1002. If you specify this option, the firewall configuration will not be modified and the server may not be manageable by SA.

--no_opsw_gw

Specifies that no gateway is needed. Either this option or the --opsw_gw_addr option must be specified.

--no_start_agent

Prevents the Agent from starting after installation. By default, the Agent is started immediately after installation. See also Start an Agent after installation.

--opsw_gw_addr <host:port>

Specifies the host and port number of the gateways used during Agent installation. Either this option or --no_opsw_gw must be specified.

Connects to the core using the network interface that has the associated IP address, ${LOCAL_IP}.

LOCAL_IP will be used as the preferred IP address when the Agent attempt to create connections with the core. If the connection fails, then a new connection will be attempted again without LOCAL_IP. The OS automatically takes the IP address of the last successful connection and this IP address will be the new LOCAL_IP.

--password <password>

Specifies the password for the user specified in the --username option. This option is only used by the --customer_id option.

--reboot

Causes the server to be rebooted after the Agent is installed, but only if required.

During Agent installation on a Windows server, the Agent installer copies the file ogshcap.dll to the following location:

%SystemRoot%\system32\ogshcap.dll

If the file is open or is in use, the Agent installer is unable to copy this file. The Agent installer then asks the user whether to restart the machine and copies the file after restart.

You can also specify --reboot on the command line to initiate the reboot at the end of the Agent installation.

--remediate

Remediates the server against any software policies attached to the server, including all software policies specified in the --software_policy option. For more information, see "Software management" in the SA Use section

--resetconf

-r

Resets the Agent configuration file to the default settings.

--rpmbin <path>

Specifies the path to the RPM handler to use for RPM operations. Use this option, when an RPM handler is already installed on the server.

If an RPM handler is not already installed on the server, use the --withrpm option instead to install one.

It is not necessary to use this option with the --withrpm option.

--settime

-t

Sets the time on the server to that of the core.

If the managed server’s clock is significantly ahead of the clock on the SA Core, the clock on the managed server will be set back. Since this can cause problems, do not use the --settime option unless you are sure that this scenario is not a problem in your environment.

If a managed server’s clock is significantly behind the clock on the core, the Agent installation might fail. To install an Agent successfully, use the --settime option or manually set the time and date on the managed server before retrying the Agent installation.

--software_policy <ID>

Attaches the software policy <ID> to the server. <ID> must be the name of a software policy in the SA Library. If you want to remediate the software policy immediately, specify the --remediate option. For more information, see "Software management" in the SA Use section.

--spin_host

Specify the host name or IP address of the Data Access Engine component. If you specify this option, you must also specify the --no_opsw_gw option.

--username <name>

Specifies an SA user name. This option requires the --password option. This option is only used by the --customer_id option.

--withmsi

Installs Windows MSI 2.0 along with the Agent. If Windows MSI 2.0 is already installed, this option has no effect. Works with Windows 2000 and Windows 2003 or later.

--withrpm

Installs the RPM handler with the Agent. By default, an Agent is not installed. It is recommended that you always include the --withrpm option when you install Agents on Solaris servers.

Use this option only with the Agent installers for Solaris 5.8, 5.9 and 5.10. On Solaris 5.8 and 5.9, RPM 3.0.6 is installed in the directory /opt/opsware/rpm. On Solaris 5.10 x86, RPM 4.4.4 is installed in the directory /opt/opsware/rpm. The RPM database is installed in the directory /opt/opsware/rpm.

On AIX, RPM 3.0.5 is installed in the directory /opt/freeware and the RPM database is installed in the directory /var/opt/freeware/lib/rpm.

If an RPM handler is already installed, you can use the --rpmbin option.

--workdir <path>

Specifies the path to the Agent installer temporary working directory. Use this option if the default working directory causes problems with installation.

In third-party certificate mode, you can use an external Certification Authority (CA) to sign the SA Agent certificate. The Agent installer generates a Certificate Signing Request (CSR). You are responsible for signing this CSR and for providing the Agent installer with the certificate issued by your CA. The SA Agent installation completes only after the SA Agent can pick up the valid certificates from your specified location.

Arguments (double quote enclosed if more than one) for the WSUS configuration script:

--setupConnection (mandatory)

--wsusURL (optional) - specifies a WSUS URL that overrides any custom attributes already set for the selected managed servers.

--ignoreWSUSModeCheck (optional) - ignores that WSUS patching mode is not enabled on the core.