Getting started
Verify the connection
In the console
- Open Agents. A new host appears within a minute of the installation, with the status pending until an owner or admin approves it.
- The columns show the state (online or offline), the agent Version and Last seen.
- Open the host. The Summary tab shows the operating system, kernel, identity and exposure. The other tabs (Packages, Services, Listeners, …) fill with the first inventory.
An agent counts as offline when it has not been seen for a while; your environment sets the threshold (default 30 minutes, see Notifications).
On a Linux host
systemctl status sek-agent
active (running) means the supervisor runs and keeps the agent up. sec-agent.service is an alias of the same unit.
journalctl -u sek-agent -n 100 --no-pager
Shows the log lines of the agent and the supervisor (prefix sec-supervisor:).
sudo sec-supervisor status --dir /opt/sec-agent
Prints the supervisor state as JSON:
| Field | Meaning |
|---|---|
active |
The slot the agent runs from (a or b). |
trial |
An update that is being tried out, or empty. |
last_failure |
The last update that did not come up healthy and was rolled back. |
last_commit |
The last update that was accepted. |
sudo cat /opt/sec-agent/health.json
Written by the agent after each session in which SEK Systems confirmed a report: slot, version, time and process id. A recent time here is the simplest proof that the agent reached SEK Systems.
On a Windows host
Get-Service SEKSupervisor
Get-Content C:\ProgramData\SEC\agent.log -Tail 100
& "C:\Program Files\SEC\sec-supervisor.exe" status
More checks
| Command | What it tells you |
|---|---|
sudo sec-agent policy |
The effective local policy: profile, allowed actions, windows, limits, and its SHA-256. |
sudo sec-agent role status |
Which roles the local policy allows, and which roles SEK Systems asked for. |
sudo sec-agent update-check |
Whether an update is available, and for each update mirror whether it can be reached (and if not: why). Read-only. |
sudo sec-agent keys status |
How the agent's keys are stored on this host (for example sealed with the TPM, or protected files). |
sudo sec-agent collect |
Collects the inventory once and prints a summary; --json prints exactly what would be sent. Read-only. |
See the command reference for all commands. If the agent does not connect, see Agent problems.