MacOS X agents¶
Open a session in your MacOS X agent host as root user. After that, you can register the Agent using
- Copy the CA (.pem file) to the
/Library/Ossec/etcfolder and run the
# cp rootCA.pem /Library/Ossec/etc # /Library/Ossec/bin/agent-auth -m 192.168.1.2 -v /Library/Ossec/etc/rootCA.pem
Note that this method must include the -v option that indicates the location of the CA. If this option is not included, a warning message will be displayed and the connection will be established without verifying the manager.
- Edit the Wazuh agent configuration to add the Wazuh server IP address.
In the file
/Library/Ossec/etc/ossec.conf, in the
<client><server>section, change the MANAGER_IP value to the Wazuh server address:<client> <server> <address>MANAGER_IP</address> ... </server> </client>
- Start the agent.
# /Library/Ossec/bin/ossec-control start