Install and Uninstall
Install EDR
Step 1: Install Armor Anywhere
To Install EDR on your device, users must first install the Armor Agent.
Armor security services are designed for workload protection, so users will need to install the Armor Agent with no services active.
To install the Armor Agent only, please follow Step 2, Optional Step 1 in the Armor Agent 3.0 documentation.
Step 2: Install EDR
Once installed, users can install EDR services using the CLI or Armor Toolbox.
Linux Command
/opt/armor/armor edr install
Windows Command
c:\.armor\opt\armor.exe edr install
Â
EDR can also be installed using the Armor Toolbox. Please see the documentation available on the Armor Toolbox and Agent 3.0 installation scripts.Â
Â
MacOS
For users looking to install EDR on macOS, please follow this documentation.
Supported Versions:Â Big Sur, Monterey, Ventura, and Sonoma.
Uninstall EDR
Users can install EDR services using the CLI or Armor Toolbox. To uninstall EDR, users must first acquire an Uninstall Code from the Armor Management Portal.
To obtain a code:
Navigate to the Infrastructure screen in AMP.
Select the appropriate Virtual Machine.
Click the Overview tab.
Click EDR.Click the Get Uninstall Code button.
Linux Command
/opt/armor/armor edr uninstall uninstall-code={uninstall-code}
Windows Command
Other EDR CLI Commands
Operation | Description |
---|---|
help | Displays a list of available commands. |
sync-agent-id | Sync CoreInstanceId to Carbon Black Endpoint Detection and Response. |
show-agent-id | Display Carbon Black registered Host ID. |
diagnostics | Diagnostics EDR Service. |
Fleet Management
Users looking to deploy EDR at scale can use the Armor Toolbox to schedule installation of EDR on multiple machines simultaneously. The Armor Toolbox is a self-service solution available to users in the AMP.
Users can learn more about scheduling installation tasks in the Armor Toolbox documentation.
Carbon Black User Roles
During EDR sign-up, a user is elected to be the Admin user for the Carbon Black account. That Admin user is configured as in the Carbon Black portal as Super Admin. The Super Admin user will have all privileges to perform within the Carbon Black portal. Users must be careful which actions are performed in the portal and be mindful of privileges that are granted to other users.
Permissions matrix table shows the permissions that are assigned to a particular role.