Skip to content

Licenses

Before using the corresponding component, a license granting usage rights must be activated. The license contains information that ties it to a specific machine and is signed with the Intrudect private key. License creation and signing can be done in two ways:

After logging into the https://portal.intrudect.com portal, create an API key under API Keys > Add API key. Copy the key value, as it is shown only once during creation. After that, the generated key can be used to sign a license via the command line utility.

intrudect-license 
    -apikey <api_key> 
    -apicmd create | update
    -name <license_name> 
    -type <type> 
    -outfile license.sig
  • name - Agent name, hostname, or another value that ties the license to the agent.
  • comment - Optional information field.
  • type - One of the following: network, syslog, egress or honeypot.

Example (in machine running honeypot agent):

cd /opt/intrudect-honeypot/
./bin/intrudect-license -apikey 4e187867-37be-4d78-9770-b206a5cc1f25-f3bb27b4-0915-4db9-9135-3ffcfa66ff74 -apicmd create -name "honeypot-1" -outfile ./etc/license.sig -type honeypot

Thats all, license is created and signed. Agent is ready to run. Use systemctl to start agent.

systemctl restart intrudect-honeypot

The license is also visible in the https://portal.intrudect.com

licenses

Manually in browser

This method is less convenient and should only be used if the server cannot contact https://portal.intrudect.com over the network.

First, create the unsigned part of the license using the command-line utility:

./intrudect-license -cmd csr -outfile license.csr

Then, activate the new license by filling out a form with the following details:

  • License name.
  • The correct agent type (Netagent, Logagent, Egressagent, Honeypot).
  • The full content of the generated .csr file.

The signed .sig file should then be saved on the agent's machine as /opt/intrudect-<agent>/etc/license.sig.