Windows Agent Installation Prerequisites

Review the following steps before you install the Windows agent.

1. Verify that the agent supports the operating system and VM instance configuration on your Windows host machine. For more information, see Windows Agent Overview and System Requirements.

2. Before installing the agent on Windows Server 2012 R2 or Windows Storage Server 2012 R2, find the agent server URL to be used during installation using the instructions in Agent Server URL for Windows Server 2012 R2 and Windows Storage Server 2012 R2.

3. Verify that you can log in to your machine as an Administrator.

4. Verify that your machine can connect to the Internet.

5. To configure a network proxy for agent traffic, open a PowerShell terminal as an administrator and use the following command to verify that it is a WinHTTP proxy.

   netsh winhttp show proxy

   For more information, see Use a Network Proxy for Windows Agent Traffic.

6. Verify that your proxy and firewall applications allow access to the URLs listed in Connectivity Requirements.

7. In the Lacework Console, create or use an existing agent access token. For more information, see Agent Access Token.

8. Download the agent installer to your Windows host machine using the instructions in Download Windows Agent Installer.

9. If the Windows agent is already installed on your host machine, uninstall the agent. For more information, see Uninstall the Windows Agent.

   note

   Lacework recommends that you do not downgrade to an earlier version of the agent because it can cause data incompatibility.

10. (Recommended) Enable access to AWS tags and Google Cloud labels. For more information, see the following topics:

• Configure Access to Tags in AWS
• Configure Access to Labels in Google Cloud
  note

  No special configuration is required to enable access to tags in Azure.

Agent Access Token

The Lacework agent requires a valid access token to successfully authenticate with the Lacework server (API endpoint). You can use the Lacework Console to create a new access token or use an existing access token.

Create a New Access Token

To create a new access token in the Lacework Console:

1. In the Lacework Console, go to Settings > Configuration > Agent Tokens.
2. Click + Add New.
3. In the Name field, enter a unique name for the access token.
4. In the Description field, you can optionally specify a description.
5. Select Windows as the Operating System.
6. Click Save to create your new access token for the Windows agent.
7. Verify the new token in the Access Token list.
8. Click the ... icon in the row for the new token and select Copy to copy the access token for use during the installation process.

Use an Existing Access Token

To use an existing access token from the Lacework console:

1. In the Lacework Console, go to Settings > Configuration > Agent Tokens.
2. View the list of access tokens and sort by OS type (either Windows or Linux) in the OS column.
3. Select a Windows access token to use with your agent installation. An access token can be re-used for multiple agent installations.
4. Click the ... icon in the row for the token and select Copy to copy the access token for use during the installation process.

You can also create an access token via the Lacework API. For more information, see Access the Lacework API.