Licences

Before using the corresponding component, a license granting usage rights must be activated. The license contains information that ties it to a specific machine and is signed with the Intrudect private key.

License creation and signing can be done in two ways:

Using API (recommended)

After logging into the https://portal.intrudect.com portal, create an API key. Copy the key value, as it is shown only once during creation.

After that, the generated key can be used to sign a license via the command line utility.

intrudect-license 
    -api <api_key> 
    -name <license_name> 
    -type <type> 
    -outfile license.sig

• name - Agent name, hostname, or another value that ties the license to the agent.
• comment - Optional information field.
• type - One of the following: network, syslog, egress or honeypot

Example (in machine running honeypot agent):

cd /opt/intrudect-honeypot/
./bin/intrudect-license -api 4e187867-37be-4d78-9770-b206a5cc1f25-f3bb27b4-0915-4db9-9135-3ffcfa66ff74 -name honeypot-1 -type honeypot -outfile ./etc/license.sig

Thats all, license is created and signed. Agent is ready to run. Use systemctl to start agent.

systemctl restart intrudect-honeypot

The license is also visible in the https://portal.intrudect.com

Manually in broswer

This method is less convenient and should only be used if the server cannot contact https://portal.intrudect.com over the network.

First, create the unsigned part of the license using the command-line utility:

./intrudect-license -cmd csr -outfile license.csr

Then, activate the new license by filling out a form with the following details:

• License name.
• The correct agent type (Netagent, Logagent, Egressagent, Honeypot).
• The full content of the generated .csr file.

The signed .sig file should then be saved on the agent's machine as /opt/intrudect-<agent>/etc/license.sig.