3.3. ASGARD Agent Deployment

In order to register a new endpoint to the ASGARD Management Center, download and install the ASGARD agent on the system you want to register.

The ASGARD agent can be directly downloaded from the ASGARD login screen through the button Download Agent Installers. A list of available agents for various operating systems appears.

Download Agent Installers from Login Screen

Download Agent Installers from Login Screen

Agents Overview

Agents Overview

After installation, the endpoints will connect to ASGARD, register automatically and appear in the Asset Management Section in the tab Requests. Please allow two or three minutes for systems to show up. The agents use the hostname to connect to ASGARD, ensure that your endpoints can resolve and reach the ASGARD hostname.

Note

Full administrative privileges are required for the ASGARD agent and THOR to operate properly.

In the requests tab, select the agents you want ASGARD to manage and click Accept. After that, the endpoint shows up in the asset tab and is now ready to be managed or scanned.

Accepting ASGARD Agent Requests

Accepting ASGARD Agent Requests

A registered agent will poll to the ASGARD Management Center at a given interval between 10 seconds and 600 seconds – depending on the number of connected endpoints (see Performance Tuning for details). If ASGARD has scheduled a task for the endpoint (for example: run THOR scan) it will be executed directly after the poll.

3.3.1. MacOS Full Disk Access

Since macOS version 13 (Ventura) the ASGARD Agent needs full disk access to function properly. After you have deployed the ASGARD Agent, you need to grant the service the required access permissions. Please keep in mind that administrative privileges on the machine are needed to perform this change.

To do this, navigate on your Mac to System Settings > Privacy & Security > Full Disk Access:

macOS 13 Privacy & Security

You need to enable the asgard2-agent-service slider:

macOS 13 Full Disk Access

Note

There is no workaround to this step, since it is an integral part of the security design of Apple devices. If you are having trouble with THOR scans via ASGARD on macOS, please check if the Full Disk Access permission for the ASGARD agent was granted. Since macOS version 10.14 (Mojave), you need to grant the same permissions if you want to scan removable volumes.

3.3.2. Uninstall ASGARD Agents

The following listings contain commands to uninstall ASGARD Agents on endpoints.

Note

The commands contain names used by the default installer packages. In cases in which you've generated custom installer packages with a custom service and binary name, adjust the commands accordingly.

3.3.2.1. Uninstall ASGARD Agents on Windows

You need administrative privileges to remove the ASGARD Agent from Windows. Open a command prompt with administrative privileges and run the following commands:

1
2
3
4
5
6
C:\Windows\system32>sc stop asgard2-agent
C:\Windows\system32>sc delete asgard2-agent
C:\Windows\system32>sc stop asgard2-agent_sc
C:\Windows\system32>sc delete asgard2-agent_sc
C:\Windows\system32>rmdir /S /Q C:\Windows\System32\asgard2-agent
C:\Windows\system32>rmdir /S /Q C:\ProgramData\thor

Note

Line 3 and 4 are only necessary if the new service controller (on ASGARD 2.11+) has been installed.

3.3.2.2. Uninstall ASGARD Agents on Linux

RPMs via yum

user@host:~$ sudo yum remove 'asgard2-agent*'
user@host:~$ sudo rm -rf /var/lib/thor

DPKGs via apt-get

user@host:~$ sudo apt-get remove 'asgard2-agent*'
user@host:~$ sudo rm -rf /var/lib/thor

Manual uninstall

root@host:~# /usr/sbin/asgard2-agent-amd64 stop
root@host:~# /usr/sbin/asgard2-agent-amd64 uninstall
root@host:~# rm -rf /usr/sbin/asgard2-agent-amd64
root@host:~# rm -rf /var/tmp/nextron/asgard2-agent
root@host:~# rm -rf /var/lib/nextron/asgard2-agent
root@host:~# rm -rf /var/lib/thor

3.3.2.3. Uninstall ASGARD Agents on macOS

user@mac:~$ sudo /var/lib/asgard2-agent/asgard2-agent --uninstall
user@mac:~$ sudo rm -rf /var/lib/asgard2-agent/asgard2-agent
user@mac:~$ sudo rm -rf /var/lib/thor