3.3. ASGARD Agent Deployment¶
In order to register a new endpoint to the ASGARD Management Center, download and install the ASGARD agent on the system you want to register.
The ASGARD agent can be directly downloaded from the ASGARD login
screen through the button
Download Agent Installers. A list
of available agents for various operating systems appears.
After installation, the endpoints will connect to ASGARD, register
automatically and appear in the Asset Management Section in the tab
Requests. Please allow two or three minutes for systems to show
up. The agents use the hostname to connect to ASGARD, ensure that
your endpoints can resolve and reach the ASGARD hostname.
Full administrative privileges are required for the ASGARD agent and THOR to operate properly.
In the requests tab, select the agents you want ASGARD to manage and
Accept. After that, the endpoint shows up in the asset tab
and is now ready to be managed or scanned.
A registered agent will poll to the ASGARD Management Center at a given interval between 10 seconds and 600 seconds – depending on the number of connected endpoints (see Performance Tuning for details). If ASGARD has scheduled a task for the endpoint (for example: run THOR scan) it will be executed directly after the poll.
3.3.1. MacOS Full Disk Access¶
Since macOS version 13 (Ventura) the ASGARD Agent needs full disk access to function properly. After you have deployed the ASGARD Agent, you need to grant the service the required access permissions. Please keep in mind that administrative privileges on the machine are needed to perform this change.
To do this, navigate on your Mac to
System Settings >
Full Disk Access:
You need to enable the
There is no workaround to this step, since it is an integral
part of the security design of Apple devices. If you are having trouble
with THOR scans via ASGARD on macOS, please check if the
Access permission for the ASGARD agent was granted. Since macOS version
10.14 (Mojave), you need to grant the same permissions if you want to
scan removable volumes.
3.3.2. Uninstall ASGARD Agents¶
The following listings contain commands to uninstall ASGARD Agents on endpoints.
The commands contain names used by the default installer packages. In cases in which you've generated custom installer packages with a custom service and binary name, adjust the commands accordingly.
18.104.22.168. Uninstall ASGARD Agents on Windows¶
You need administrative privileges to remove the ASGARD Agent from Windows. Open a command prompt with administrative privileges and run the following commands:
1 2 3 4 5 6
C:\Windows\system32>sc stop asgard2-agent C:\Windows\system32>sc delete asgard2-agent C:\Windows\system32>sc stop asgard2-agent_sc C:\Windows\system32>sc delete asgard2-agent_sc C:\Windows\system32>rmdir /S /Q C:\Windows\System32\asgard2-agent C:\Windows\system32>rmdir /S /Q C:\ProgramData\thor
Line 3 and 4 are only necessary if the new service controller (on ASGARD 2.11+) has been installed.
22.214.171.124. Uninstall ASGARD Agents on Linux¶
user@host:~$ sudo yum remove 'asgard2-agent*' user@host:~$ sudo rm -rf /var/lib/thor
user@host:~$ sudo apt-get remove 'asgard2-agent*' user@host:~$ sudo rm -rf /var/lib/thor
root@host:~# /usr/sbin/asgard2-agent-amd64 stop root@host:~# /usr/sbin/asgard2-agent-amd64 uninstall root@host:~# rm -rf /usr/sbin/asgard2-agent-amd64 root@host:~# rm -rf /var/tmp/nextron/asgard2-agent root@host:~# rm -rf /var/lib/nextron/asgard2-agent root@host:~# rm -rf /var/lib/thor
126.96.36.199. Uninstall ASGARD Agents on macOS¶
user@mac:~$ sudo /var/lib/asgard2-agent/asgard2-agent --uninstall user@mac:~$ sudo rm -rf /var/lib/asgard2-agent/asgard2-agent user@mac:~$ sudo rm -rf /var/lib/thor