You have two methods to change Trellix Agent mode on non-Windows systems. You can change the mode using local or remote provisioning using maconfig.
Perform the following:
Download and extract the Trellix Agent package (Example: MAxxxLNX.zip and MAxxxMAC.zip) to a temporary location.
Copy the
DXL.zipandcontrib.inifiles to the/var/McAfee/agent/data/contribfolder.
Remote provisioning
To change the mode using remote provisioning, run the following command:
maconfig -provision -managed -auto -dir "temp location to copy keys" -epo ePOServerMachine [-user ePO-User-name] [-password epo-admin-password]
Local provisioning (ePO - On-prem)
To change the mode using local provisioning, follow these steps:
On the target system, locate the
maconfigfile in the binaries subfolder of themafolder.Linux
/opt/McAfee/agent/binMacintosh
/Library/McAfee/agent/binOpen a terminal window on the target system.
Export
Sitelist.xml,srpubkey.bin,reqseckey.bin,req2048seckey.bin,sr2048pubkey.bin, andagentfipsmodefrom ePO - On-prem to a temporary location on the target system.Run the following command:
maconfig -provision -managed -dir "directory location where the sitelist.xml and security keys were exported"