Press CTRL+K to open search

Using the RPM file to manually install agent software

  • Published on Sep 8, 2026
  • 2 minute(s) read
Prev Next

Use the compatible .rpm file to manually install agent software on your Linux endpoints running supported RHEL, CentOS, Amazon Linux, or SUSE versions.

To manually install the agent software on a single Linux endpoint using the .rpm file:

  1. Open a Terminal session on the Linux endpoint that has the agent installation .tgz package.

    username@localhost:~$

  2. Use the cd command to change to the Trellix directory you created in step 6 of Downloading a Linux agent installation package from the Web UI.

    username@localhost:~$ cd desktop

    username@localhost:~/Desktop$ cd Trellix

  3. Use the ls command to verify that the IMAGE_HX_AGENT_LINUX_[xAgent version].tgz file is in the Trellix directory.

    username@localhost:~/Desktop/Trellix$ ls

    IMAGE_HX_AGENT_LINUX_[xAgent version].tgz

  4. Use the tar zxf command to unzip and extract the files from the Linux agent installation image .tgz file:

    username@localhost:~/Desktop/Trellix$ tar zxf IMAGE_HX_AGENT_LINUX_[xAgent version].tgz.

    The .tgz package (Linux) includes the following files:

    • Agent .rpm files

    • Agent .deb files

    • Agent configuration file (agent_config.json).

  5. Use the ls command to view the files.

    username@localhost:~/Desktop/Trellix$ ls

    You will see a list of all the files in the agent installation package. You must have sudo access to perform steps 6-8.

  6. Use the -ihv command to run the .rpm script and install the agent software on your Linux endpoint. You must have sudo access to perform steps 6-8.

    username@localhost:~/Desktop/Trellix$ sudo rpm -ihv xagt-[xAgent version]-1.el6.x86_64.rpm

    Caution

    If FIPS mode is enabled (run fips-mode-setup --check to verify) on Linux endpoints running RHEL 8.x and above, or CentOS 8.x and above, the --nodigest flag must be set in the installation command: username@localhost:~/Desktop/Trellix$ sudo rpm -ihv --nodigest xagt-[xAgent version]-1.el6.x86_64.rpm

    Important

    Run the .rpm file that is compatible with your Linux environment. For example, if your Linux endpoints are running RHEL version 6.x8, run xagt-[xAgent version]-1.el6.x86_64.rpm, if your Linux endpoints are running SUSE 11.4, run xagt-[xAgent version]-1.sle11.x86_64.rpm, and if your Linux endpoints are running Amazon Linux AMI 2018.3, run xagt-[xAgent version]-1.el6.x86_64.rpm.

    The .rpm file automatically detects the version of Linux RHEL currently running on the endpoint. If the .rpm file is not compatible with the RHEL version running on the endpoint, an error message appears.

  7. After the .rpm installation script is complete, use the i option to import the agent configuration file from the /opt/fireeye/bin/xagt binary path:

    username@localhost:~/Desktop/Trellix$ sudo /opt/fireeye/bin/xagt -i agent_config.json

  8. Start the agent services on your Linux endpoint using the following command:

    username@localhost:~/Desktop/Trellix$ sudo systemctl start xagt

Note

If you have an older version of Linux you may require this command:

username@localhost:~/Desktop/Trellix$ sudo service xagt start

The "service" command is deprecated in most modern versions of linux.

:
Related articles