fais moi une documentation en francais sans rien enlever comme info : the installation command is important because if it's changed you can replacaplite it if there are any change.

this is the way we deploy on each server, any developpement tool but internally they use "bleedlogic"
we have to use the all command again

Installation de HarfangLab pour l'EDR de la Prépord Orange :

Ubuntu

```
HURUKAI_HOST=b67165551d9c6b61.hurukai.io HURUKAI_PORT=443 HURUKAI_PROTOCOL=https HURUKAI_KEY=1289f782a5b75ecb97207c1db36c1dab9e9eb41938bb808e43f16c66f07028ef HURUKAI_SRV_SIG_PUB=72fe399997655d777c4a6708395f1f5a6bba6daad01a5b4d7d20186cc9a572c7 HURUKAI_PASSWORD=wdzGKsn7JJtyfwcsS2wn
apt install ./agent-3.6.5_x64.deb HURUKAI_ADDITIONAL_INFO1=OB
```

Redhat

```
HURUKAI_HOST=b67165551d9c6b61.hurukai.io HURUKAI_PORT=443 HURUKAI_PROTOCOL=https HURUKAI_KEY=1289f782a5b75ecb97207c1db36c1dab9e9eb41938bb808e43f16c66f07028ef HURUKAI_SRV_SIG_PUB=72fe399997655d777c4a6708395f1f5a6bba6daad01a5b4d7d20186cc9a572c7 HURUKAI_PASSWORD=wdzGKsn7JJtyfwcsS2wn rpm -i agent-3.6.5_x64.rpm
HURUKAI_ADDITIONAL_INFO1=OB
```

Windows

```
msiexec /qn /i agent-3.6.5_x64.msi HOST=b67165551d9c6b61.hurukai.io PORT=443 PROTO=https SRV_SIG_PUB=72fe399997655d777c4a6708395f1f5a6bba6daad01a5b4d7d20186cc9a572c7 PASSWORD=wdzGKsn7JJtyfwcsS2wn HURUKAI_ADDITIONAL_INFO1=OB
```

the fact that the CPU is low is good so that means that they can use the application smootly.

security event if you have maultiple security event it become a alert.

Installation Redhat par KUMAR Inder OBS/CTIO

```
10.235.74.50 LX05051P
LX5052P 10.235.74.734
10.235.79.212 LX05084L
```

```
hurukai-agent
```

```
HURUKAI_HOST=b67165551d9c6b61.hurukai.io HURUKAI_PORT=443 HURUKAI_PROTOCOL=https HURUKAI_KEY=1289f782a5b75ecb97207c1db36c1dab9e9eb41938bb808e43f16c66f07028ef HURUKAI_SRV_SIG_PUB=72fe399997655d777c4a6708395f1f5a6bba6daad01a5b4d7d20186cc9a572c7 HURUKAI_PASSWORD=wdzGKsn7JJtyfwcsS2wn rpm -i agent-3.6.5_x64.rpm HURUKAI_ADDITIONAL_INFO1=OB
```

avec la commande on peut voir que l'agent est activé : 

```
systemctl status hurukai-agent
```

<img src="https://lh3.googleusercontent.com/u/0/drive-viewer/AKGpihaAFfvLnL0fog28NSCyFpOcjqi0zS8r9tcrN3Ca2l_9mcq3H6rvhU-DJ5xVJ7W9-bIx8TV7di7ZS8TKn63rftFTYTivWtlJiA=w1920-h542-rw-v1" class="ndfHFb-c4YZDc-HiaYvf-RJLb9c" alt="Affichage de systemctl status hurukai-agent.PNG" aria-hidden="true">



On peut vérifier dans `Endpoint` -> `Agents` que l'agent à bien était installé:

<img src="https://lh3.googleusercontent.com/u/0/drive-viewer/AKGpihb6nAHIFtw6QsPLXE-4UF92tVIy0pgxSSGkvEg6nf38YQ2sVjPPHDgJuLRsHFUpzZvyVP7YhauZRHxgEQRuLxTtYlw_Kn9cHw=w1920-h542-rw-v1" class="ndfHFb-c4YZDc-HiaYvf-RJLb9c" alt="Affichage de agent-harf-linux.PNG" aria-hidden="true">

Si l'on souhaite plus d'informations sur l'agent en cliquer sur  `i` :

<img src="https://lh3.googleusercontent.com/u/0/drive-viewer/AKGpihaXcIGl9tcgbWpPT2cwYR18ye2vDWfAZG0vP_K9_kS9z_HqLyy1VvbY867sIUl3a75PKol8XhEVIyA6JpeRQjzeqBzvzU8uiQ=w1920-h542-rw-v1" class="ndfHFb-c4YZDc-HiaYvf-RJLb9c" alt="Affichage de info-agent-harf-linux.PNG" aria-hidden="true">


Installation Windows par VERMA Vibhor OBS/GDO 

```
s03436d
```

En lançant la ligne de commande sur cmd.exe pour  : 
```
msiexec /qn /i agent-3.6.5_x64.msi HOST=b67165551d9c6b61.hurukai.io PORT=443 PROTO=https SRV_SIG_PUB=72fe399997655d777c4a6708395f1f5a6bba6daad01a5b4d7d20186cc9a572c7 PASSWORD=wdzGKsn7JJtyfwcsS2wn ADDITIONAL_INFO1=OB
```

On peut voir que le programme a bien était installé l'agent avec le programme :

<img src="https://lh3.googleusercontent.com/u/0/drive-viewer/AKGpiham5s2LWnocneuraeui09K68nUl2-t-rF1Uf_cMovVqJ2v7P4M5rVVdXNU7PiYmcDAKDxh3ZAEU413gh5hBGy7dn2Nr9NHw5w=w1920-h542-rw-v1" class="ndfHFb-c4YZDc-HiaYvf-RJLb9c" alt="Affichage de instalation-windows.PNG" aria-hidden="true">

<img src="https://lh3.googleusercontent.com/u/0/drive-viewer/AKGpihb7SbFeNfboJQ-UwIyAVi7beikDmoIVdg-pcnZMAHzZDzO-qoq3wJwJ4j4nbEdFrq8TbIir-4Vqqv9b-vKFvH4v9LN7eiNEE20=w1920-h542-rw-v1" class="ndfHFb-c4YZDc-HiaYvf-RJLb9c" alt="Affichage de windows-installation.PNG" aria-hidden="true">

Et maintenant sur Agents on vient bien nos deux machines : 

<img src="https://lh3.googleusercontent.com/u/0/drive-viewer/AKGpihZN62VSh-it_UDRSL0GDGOpzkoY0_WrvVtfK2N9hURwJVSHaEtLIs-oRvodIYy3nDCUhmc_6wue9YpXtpmWIkQS_QlrTxXbaw=w1920-h855-rw-v1" class="ndfHFb-c4YZDc-HiaYvf-RJLb9c" alt="Affichage de agent-harf-linux-and-windows.PNG" aria-hidden="true">



the challenge is to map the hostname and buisness name owner with the application buisness name owner

entit is the domain of the server
add adidionnat informaiton from orange_carto for exemple

un policie de pas impacter le serveur avec un regle qui ne pourrait pas être en mode bloquant, on a fait un sorte de disposition dans le bon groupe, il y a qu'une regle en ce moment qui est en alerte only. il est important dans l'isncription du serveur de pas affecter a ce serveur en mode bloquant à tous ces serveurs pour eviter des problèmes de charges sur les machines.

on a installer les deu agents, on peut utiliser les agents de par la console. Vibhor doit checker s'il n'y a pas d'impact de l'installation de cette agent

Quick synthesis of our HarfangLab Test of installation done yesterday morning.

Do not hesitate to modify if I forgot information or if I had transcribed them incorrectly

# Attendees: recipients of this mail

**2 agents have been installed and visible in the HarfangLab integration Consol**

- 1 on Red Hat 7.9 For the application TIPS Pack Accueil (Flexible Engine)
- 1 on Windows servers 2019 for the application Password Management Repository (VdR dc)

_HarfangLab Agent view :_

![](file:///C:/Users/YYPC6037/AppData/Local/Temp/1/msohtmlclip1/01/clip_image002.jpg)

**Thanks to all attendees for this successful first step**

# Details of the operation progress

- The command line to install the agent, available on the HarfangLab Consol, had to be adapted before working. After 4 tentatives for the RedHat server and 2 for the Windows one  (install / remove action), the agents have been installed.

- **ACTION : Modify the command Lines available on the HarfangLab Consol – François-Xavier Carré, Patrice Rousset**
- To be noted : installation time less than 2minutes without Machine interruptions

- The 2 Agents have been viewed few minutes after in the consol, and activities can be viewed

- **No perfornance impact have been identified**

- **ACTION : regularly verify that it is still the case – Inder / Shubhrant & Vibhor / Pankaj**

- In case of impact, contact Mickael / Christophe to take the decision to remove the agent

- A scan have been launched to create additionnal activities
- Some security events have been generated in the consol (not analysed at this stage, and it is still to soon to evaluate true vs false results)

- **Action : share the list of security events with Inder / Shubhrant & Vibhor / Pankaj – Michael / Isabelle / Christophe**

- To be noted :

- we have identified that we need to add the **Aplication Name** and the **OCarto ID** through the « Additional Information » (4 are available per agent, the 1st one is used to identify the OB group), It will help to send information to the right people / organization and to cross information with other inventories / data souces
- It would be interresting to use the 4th additionnal Information to identify a « **security group level** » which can help to manage the security policy rules (François Xavier remark)

**Decision have been taken to keep the 2 Agents online to identify potential mid terms impacts or side effects.**

# Next steps :

- **Install the agents with the Production HarfangLab Consol** (same application context)

- Prerequisites :

- Availability of **the Production HarfangLab Consol** (installation + tests) expected for **April 26th  - François Xavier / Patrice**
- **New version of Install command lines available in the HarfangLab consol - François Xavier / Patrice**
- **Decision regarding the « additionnal information » usage » and the associated nomentlature – Michael / Christophe with the support of François Xavier / Patrice**
- **First proposal regarding the HarfangLab rôles and associated habilitation - François Xavier / Patrice**

- **Action - Organise a new session of Agent installation with the HarfangLab Prodiction context – target date in 2 weeks (depending of the prerequisites availability) - Christophe P.**

- after a period of control, **install the agent on all Production machines of TIPS Pack Accueil and Password Management Repository**

**If progress is successful,**, close the Pilot phase and open **the first step of généralisation** (related to the Olympic Game context, 6 or 7 additionnal applications and between 150 to 170 agents), wich must be linked with the availabily of an OCD SOC.