User Docs
PlatformProduct updates
  • Getting started
    • What is DSPM?
    • Use DSPM in your company
    • Choose how to run DSPM
  • Quick start
  • Deployment guide
    • Sizing
    • Installation
      • Understand installation requirements
        • K3S installation
        • Configuring a HA K3s cluster
        • Configuring Rancher and Fleet agent to run behind an HTTP proxy
        • Install Synergy/Focus/Enterprise using Helm without Rancher
        • Install Synergy/Focus/Enterprise using Rancher
        • Air Gap Installation
        • Uploads to Rancher
      • Upgrade K3s
        • K3s - Upgrade
      • Troubleshooting
        • K3s on RHEL/CentOS/Oracle Linux
        • Networking
        • Configuring Rancher and Fleet agent to run behind a HTTP proxy if cluster was previously registered
    • Estimate hardware capacity needs
  • Administration guide
    • Customer Support Portal
    • Pattern matching
    • Data Controls
    • Analytics
    • Detectors
    • Import custom TLS certificate
    • GQL Quick Guide
    • Critical & Sensitive Classification Attribute Modification
    • How to Check AI Mesh Version
    • Webhooks
    • AI Mesh Overview
    • Is Customer Data Saved by Getvisibility?
  • Enterprise setup
    • Authentication
      • Keycloak configuration
      • Single Sign-on (SSO)
        • Using Azure AD as Keycloak Identity Provider
      • Keycloak User Federation Configuration (LDAP/AD)
      • Enable 2FA
      • Role-Based Access Control (RBAC)
      • Keycloak User Federation using LDAP over SSL
  • Implementation
    • Configuring Taxonomies & Labels
  • Integrations
    • GQL
    • Template Language
    • Multi-Language Machine Learning
    • SIEM Integration
    • Google Drive Auto-labelling
  • Scan with Getvisibility
    • Configure detectors
    • Configure data sources
      • Scan Configuration Fields
      • AWS IAM
      • AWS S3
      • Azure AD
      • Azure Blob
      • Azure Files
      • OneDrive
      • SharePoint Online
      • SharePoint on-premise
      • Box
      • Confluence Cloud
      • LDAP
      • SMB
      • Google IAM
      • Google Drive
      • ChatGPT
      • iManage
      • Dropbox
    • Scanning
      • Data Source Permissions
      • Scan Scheduler
      • Types of Scan
      • Scan History
      • Scan Analytics
      • Supported Languages for ML Classifiers
      • Rescan Files
    • Streaming
      • What is DDR?
      • How to Configure DDR Rules
      • Import Data Controls
      • Monitoring New Files via DDR Streaming
      • DDR Supported Events
      • Lineage
      • Supported Data Sources
      • Azure Blob Streaming Configuration
      • Azure Files Streaming Configuration
      • Confluence Cloud Streaming Configuration
      • Sharepoint Online Streaming Configuration
      • SMB Streaming Configuration
      • OneDrive Streaming Configuration
      • Azure AD Streaming Configuration
      • AWS S3 Streaming Configuration
      • Google Drive Streaming Configuration
      • Google IAM Streaming Configuration
      • AWS IAM Streaming Configuration
      • Box Streaming Configuration
      • Dropbox Streaming Configuration
    • Enterprise Search columns meaning
    • Supported File Types
  • Glossary
  • FAQ
  • EDC - All Documents
    • Deployment - Onboarding
      • EDC-Server Installation Guide
      • EDC-Deployment Flow Guide
        • EDC-installerConfig.json and CLI config Details
      • Deploying the agent using ManageEngine
      • EDC-Mac Agent - Installation Guide
      • Windows Agent Precheck Script
    • Functionality - Guides
      • EDC - Admin Guide - v4
      • EDC -Guide for writing Visual Labels
      • EDC- Guide for Header Footer Options
      • EDC-Metadata Details
      • EDC Supported File Types
      • Agent V4 - Configuration Options for Expert Mode
      • File Lineage - Agent Activities
      • Endpoint Data Discovery
    • Troubleshooting Documents
      • Preventing Users From Disabling Agent
      • Generate Installation Logs
      • Troubleshooting Agent for Windows
      • Guide for missing suggestions
      • Reseller Keycloak Quick Installation Guide
      • Alternative authentication methods for agent
  • EDC - All Documents
Powered by GitBook
On this page
  • installerConfig.json
  • Configuration Options
  • CLI Configuration (agent version >= 4.0.0)
  • GVClient.Tools.SetupHelper
  • Example Configuration

Was this helpful?

Export as PDF
  1. EDC - All Documents
  2. Deployment - Onboarding
  3. EDC-Deployment Flow Guide

EDC-installerConfig.json and CLI config Details

installerConfig.json

The installerConfig.json file is utilized for configuring the initial environment settings of the agent being installed. It must be placed in the same directory as the .msi installer file.

Configuration Options

  • ServerAddress: The cluster's address (without schema and port). IPv6 is also supported; however, it requires internal verification.

  • ServerUseSsl: Determines if SSL is used (true by default). When enabled, port 443 is used; otherwise, port 80 is used. The agent does not switch to an insecure channel if SSL fails.

  • Language: Sets the agent's initial language. Options include ar, de, es, fr, he, it, pl, pt, th, zh. Default is en.

  • VisualStyle: Chooses between Light or Dark mode, with Dark mode set as the default.

  • KeycloakClientId: The ClientId in Keycloak, typically agent by default. It is recommended not to change this unless necessary.

  • KeycloakAuthType: Specifies the authentication method. Default is mTLS. Options include:

    • mTLS: Authentication via user certificate.

    • PasswordGrant: User password grant flow for authentication.

Authentication Configuration Details

For mTLS:

  • KeycloakUsername: Generally, agent with email agent@gv.com (default). Changing this is usually unnecessary.

  • KeycloakCertificateContent: The user's certificate in PEM format (excluding the BEGIN/END certificate lines).

  • KeycloakKeyContent: The user's private key in PEM format (excluding the BEGIN/END private key lines).

For PasswordGrant:

  • KeycloakUsername: Same as above.

  • KeycloakUserPassword: The encrypted password corresponding to KeycloakUsername. Use GVClient.Tools.SetupHelper for encryption.

  • KeycloakClientSecret: The encrypted client secret for the Keycloak client. Use GVClient.Tools.SetupHelper for encryption.

CLI Configuration (agent version >= 4.0.0)

As an alternative to installerConfig.json, configuration parameters can be provided via CLI arguments during installation:

msiexec /i "path_to_msi.msi" SERVERADDRESS="{server_address}" SERVERUSESSL="True" LANGUAGE="en" VISUALSTYLE="1" KEYCLOAKCLIENTID="agent_v2" KEYCLOAKAUTHTYPE="1" KEYCLOAKUSERNAME="agent" KEYCLOAKUSERPASSWORD="{pwd}" KEYCLOAKCLIENTSECRET="{secret}"

Ensure that all argument keys are in uppercase.

GVClient.Tools.SetupHelper

The GVClient.Tools.SetupHelper utility aids in creating a valid configuration for installation. It will walk through the configuration process and ultimately generate an installerConfig.json file and a corresponding CLI command.

Binaries:

  • Windows -

Example Configuration

For typical customer installations, altering the ServerAddress, Language, and VisualStyle is often sufficient:

{
  "ServerAddress": "123.example.abc.com",
  "Language": "en",
  "VisualStyle": "Dark"
}

Remember to adjust the configuration according to the specific requirements of the installation environment.

PreviousEDC-Deployment Flow GuideNextDeploying the agent using ManageEngine

Last updated 12 months ago

Was this helpful?

26MB
GVClient.Tools.SetupHelper.zip
archive