Licences
Before using the corresponding component, a license granting usage rights must be activated. The license contains information that ties it to a specific machine and is signed with the Intrudect private key.
License creation and signing can be done in two ways:
Using API (recommended)
After logging into the https://portal.intrudect.com portal, create an API key. Copy the key value, as it is shown only once during creation.
After that, the generated key can be used to sign a license via the command line utility.
name
- Agent name, hostname, or another value that ties the license to the agent.comment
- Optional information field.type
- One of the following: network, syslog, egress or honeypot
Example (in machine running honeypot agent):
cd /opt/intrudect-honeypot/
./bin/intrudect-license -api 4e187867-37be-4d78-9770-b206a5cc1f25-f3bb27b4-0915-4db9-9135-3ffcfa66ff74 -name honeypot-1 -type honeypot -outfile ./etc/license.sig
Thats all, license is created and signed. Agent is ready to run. Use systemctl to start agent.
The license is also visible in the https://portal.intrudect.com
Manually in broswer
This method is less convenient and should only be used if the server cannot contact https://portal.intrudect.com over the network.
First, create the unsigned part of the license using the command-line utility:
Then, activate the new license by filling out a form with the following details:
- License name.
- The correct agent type (Netagent, Logagent, Egressagent, Honeypot).
- The full content of the generated
.csr
file.
The signed .sig
file should then be saved on the agent's machine as /opt/intrudect-<agent>/etc/license.sig
.