Skip to main content
McAfee Enterprise MVISION Cloud

Install a CWPP Agent via Command line on a VM

After the POP deployment is completed successfully and all the services are installed properly then agent deployment process can be done on an autoscaling instance or an EC2 instance created in the proper region. 

Before installation, verify the following:

  • Validate the options provided to the installation script 

  • Check permission for Installation, Space requirements, and Platform support 

  • DXL (Data eXchange Layer) Configuration files are downloaded from the CICD (Continuous Integration and Continuous Delivery) Service that the Installer Binary will use to communicate with the DXL Broker hosted in the POP. 

  • Installer binary is downloaded from the CICD Service and executed.

  • Logs are saved locally and showed on the console and sent to the CICD Service.

Once the agent deployment is successful, validate if the same is reported to the POP in MVISION Cloud in the Resources tab 

To install a CWPP Agent via command line: 

  1. Download the agent deployment package named PoPCICDPackage.tar from MVISION Cloud (Client Configuration Package) to the VM.


  1. Untar the downloaded PoPCICDPackage.tar by running following command:

tar -xf PoPCICDPackage.tar 

IMPORTANT: The command needs to be run on the same folder location where the certificates are stored. Make sure to point to the correct location before proceeding.  

  1. Download the Agent install script by running the following command:

curl -o --cacert ca-cicd.crt --key cicd-client.key --cert cicd-client.crt https://cwpp-cicd.cwpp.mcafee:8080/cwpp/cicd/v1/agent-installer/linux/pkg

Note:cicd.cwpp.mcafee is the address of API service running as part of the POP and is the same for all deployments. Its managed and setup during PoP installation.

  1. The CWPP Agent installation script is downloaded by invoking curl command and executed. 
  • Change the permission for agent installer script downloaded 

                chmod +x 

  •  Execute the agent installer script as sudoer or root user  

                sudo ./ cicdaddr=${cicdAddr} cicdcerts=${cicdCertsDir} cicdport=8080  

  1. Check cwpagentinstall.log for installation details and  'sudo servicecwpagentd --version' for currently installed version.
  2. Validate if the same is reporting health status to the POP in MVISION Cloud under Clients lists. 

You can also download an example file to automate the agent installation with information from a s3 bucket from here:

  • Was this article helpful?