Installing without a token

If you install the package without WAZUH_ENROLLMENT_TOKEN, the installation completes, but the Wazuh agent isn't enrolled and can't start until it is. On Linux, the installer displays this message and records it in ossec.log:

wazuh-agent: no manager configured [INFO_NO_MANAGER]: WAZUH_ENROLLMENT_TOKEN was not supplied, so the agent does not know where to connect.

On Windows, ossec.log has:

No manager configured [INFO_NO_MANAGER]: enroll the agent with Manage > Enroll in the agent GUI or with wazuh-agent-auth.exe, or reinstall with WAZUH_ENROLLMENT_TOKEN.

The other variables, such as WAZUH_AGENT_NAME and WAZUH_AGENT_GROUP, are still applied. To enroll the Wazuh agent later, save the token to a file and run wazuh-agent-auth as root or as an administrator. It uses the name and groups set during installation:

• Linux:

  # /var/ossec/bin/wazuh-agent-auth --token-file <TOKEN_FILE>
  

• macOS:

  # /Library/Ossec/bin/wazuh-agent-auth --token-file <TOKEN_FILE>
  

• Windows: in the Wazuh agent tray application, select Manage → Enroll and provide the token. Alternatively, run:

  > & "C:\Program Files (x86)\ossec-agent\wazuh-agent-auth.exe" --token-file <TOKEN_FILE>
  

Then start the Wazuh agent as shown in the deployment variables page for your operating system: Linux, Windows, or macOS. wazuh-agent-auth doesn't delete the token file, so delete it after enrolling.