MacOS X agents

Open a session in your MacOS X agent host as root user. After that, you can register the Agent using agent-auth:

  1. Copy the newly created certificate (.cert file) and its key (.key file) to the /Library/Ossec/etc folder and run the agent-auth program. For example, if the manager's IP address is 192.168.1.2:

    # cp sslagent.cert sslagent.key /Library/Ossec/etc
# /Library/Ossec/bin/agent-auth -m 192.168.1.2 -x /Library/Ossec/etc/sslagent.cert -k /Library/Ossec/etc/sslagent.key

  2. Edit the Wazuh agent configuration to add the Wazuh server IP address.

In the file /Library/Ossec/etc/ossec.conf, in the <client><server> section, change the MANAGER_IP value to the Wazuh server address:

<client>
  <server>
    <address>MANAGER_IP</address>
    ...
  </server>
</client>

  1. Start the agent.

# /Library/Ossec/bin/ossec-control start