MacOS X agents

Open a session in your MacOS X agent host as root user. After that, you can register the Agent using agent-auth:

  1. Copy the CA (.pem file) to the /Library/Ossec/etc folder and run the agent-auth program:

# cp rootCA.pem /Library/Ossec/etc
# /Library/Ossec/bin/agent-auth -m 192.168.1.2 -v /Library/Ossec/etc/rootCA.pem

Note

Note that this method must include the -v option that indicates the location of the CA. If this option is not included, a warning message will be displayed and the connection will be established without verifying the manager.

  1. Edit the Wazuh agent configuration to add the Wazuh server IP address.

In the file /Library/Ossec/etc/ossec.conf, in the <client><server> section, change the MANAGER_IP value to the Wazuh server address:

<client>
  <server>
    <address>MANAGER_IP</address>
    ...
  </server>
</client>

  1. Start the agent.

# /Library/Ossec/bin/ossec-control start