Pre-requisites for Installing Saner CVEM Agents using the Offline Deployer Tool

Overview

The Saner CVEM Offline Deployer Tool is designed to help organizations install Saner CVEM Agents on endpoints without requiring internet access on the target systems. It supports deployment across major platforms such as Windows, Linux, AIX, and macOS, using a central deployment system. This article outlines all the prerequisites that must be met on the deployment system to ensure a smooth and successful installation process. These include specific Python versions, required Python packages, additional platform-dependent dependencies, and utility configurations.

System Requirements and Pre-requisites

1. Python Installation

A compatible version of Python must be installed on the deployment system.

• Recommended Version: Python 3.12
• Also Supported: Python 3.10
  
  Note: Ensure Python is properly installed and added to your system’s environment path.

2. Required Python Packages

The following Python packages are required to run the Saner CVEM Offline Deployer Tool:

• paramiko
• ecdsa
• netaddr
• requests
• setuptools
  
  

All the required packages, except paramiko and setuptools, are bundled with the Saner CVEM Offline Deployer Tool.

 Installation Commands:

• To install setuptools (for all platforms):

pip install setuptools==69.5.1

•  To install paramiko (required for Linux systems):

pip install paramiko

Important: Ensure you run the pip install setuptools command after Python is successfully installed on the deployment system.

3. Additional Dependencies for Linux Systems

Python must be compiled with SSL support on Linux systems to allow secure communication.

• On Debian-based systems (e.g., Ubuntu):

sudo apt install libssl-dev

• On RHEL/CentOS systems:

sudo yum install openssl-devel

4. PsExec Utility (Windows Only)

The Saner CVEM Offline Deployer Tool uses PsExec.exe to deploy agents on remote Windows machines.

Default Behavior:

• The tool automatically downloads PsExec.exe from Microsoft and places it in the PsExecTool directory under the current working directory.

Custom Configuration Options:

• If you prefer to download PsExec.exe to a custom location:
  • Update the PSEXEC_DOWN_DIR variable inside the sp_agent_cloud_deployer.py file with the absolute path of the desired directory.
• If PsExec.exe is already present on your system:
  • Set the psexec_file_path variable in the run.py file to the absolute path of the existing executable.

Conclusion

By meeting all the prerequisites outlined above, you can ensure that the Saner CVEM Offline Deployer Tool functions correctly and that agents are deployed seamlessly across supported endpoints. Proper setup of Python, necessary libraries, and platform-specific tools like PsExec.exe ensures reliable execution of the deployment process. 

For any issues during setup or deployment, please reach out to SecPod Support for further assistance.