Obtaining agent images using the offline portal

Using the CLI, you can obtain agent installation images for use by the Endpoint Security (HX) server using Trellix's Dynamic Threat Intelligence (DTI) offline portal. This section describes the necessary steps.

Note

Agent installation images obtained manually must be uploaded to the Endpoint Security (HX) server before they can be deployed to your host endpoints. This ensures that the correct agent configuration file and agent certificates are included in the agent installation package you deploy to your host endpoints.

Prerequisites

You must have an offline portal account. If you do not already have one, contact your Trellix sales representative.
Admin access

To obtain agent images from the offline portal and apply them to the Endpoint Security (HX) server:

Enable CLI configuration mode on the server:
host # enable
host # configure terminal
Enter the following command to put the server in an offline state:
<host> (config) # fenet op-mode local
Log into the DTI Offline Update Portal and download the femeta_HX_AGENT.ensig metafile from the portal to your machine. Then use scp (secure copy) to copy the file to the /data/updates directory on the server. For additional information, see the DTI Update Portal User Guide.
Enter the following command to refresh the agent metadata:
<host> (config) # fenet hx-agent metadata refresh
Download the file image-hx_agent-<version>.img (where <version> is the version number of the agent image) from the portal to your machine. Then use scp (secure copy) to copy the file to the /data/updates directory on the server. For additional information, see the DTI Update Portal User Guide.
Enter the following command.
```
<host> (config) # fenet hx-agent image fetch content-id <content-id>
```
where <content-id> is the ID of the agent image.
To see a list of the IDs available, enter the show fenet hx-agent metadata image available command.
Enter the following command to apply the agent image on your server.
<host> (config) # fenet hx-agent image apply content-id <content-id>
where <content-id> is the ID of the agent image you obtained in Step 6.

The agent image is downloaded and applied to your server and appears on the Agent Versions tab. You can then deploy it to your endpoints.