Agent Installation

Agent Installation

Install the SSH-KLM agent on target hosts for deep discovery and automated key rotation.

Overview

The SSH-KLM agent is a lightweight daemon that runs on target hosts, providing:

• Real-time key discovery
• Automated key rotation
• Ephemeral key management
• Secure communication with SSH-KLM server

Installation Methods

Script Installation (Recommended)

# Download and run installer
curl -fsSL https://get.qcecuring.com/ssh-agent | sudo bash -s -- \
  --server https://ssh-klm.example.com \
  --token YOUR_REGISTRATION_TOKEN

Package Manager

Ubuntu/Debian:

curl -fsSL https://packages.qcecuring.com/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/qcecuring.gpg
echo "deb [signed-by=/usr/share/keyrings/qcecuring.gpg] https://packages.qcecuring.com/apt stable main" | sudo tee /etc/apt/sources.list.d/qcecuring.list
sudo apt update
sudo apt install ssh-klm-agent

RHEL/CentOS:

sudo dnf config-manager --add-repo https://packages.qcecuring.com/rpm/qcecuring.repo
sudo dnf install ssh-klm-agent

Docker

docker run -d \
  --name ssh-klm-agent \
  --restart unless-stopped \
  -v /etc/ssh:/etc/ssh:ro \
  -v /home:/home:ro \
  -e SSHKLM_SERVER=https://ssh-klm.example.com \
  -e SSHKLM_TOKEN=YOUR_TOKEN \
  qcecuring/ssh-klm-agent:latest

Configuration

Edit /etc/ssh-klm-agent/config.yaml:

server:
  url: https://ssh-klm.example.com
  token: ${SSHKLM_TOKEN}  # From environment

agent:
  hostname: ${HOSTNAME}
  labels:
    environment: production
    team: platform

discovery:
  enabled: true
  paths:
    - /home/*/.ssh
    - /root/.ssh
    - /etc/ssh
  interval: 1h

rotation:
  enabled: true
  backupKeys: true

Verify Installation

# Check agent status
sudo systemctl status ssh-klm-agent

# View agent logs
sudo journalctl -u ssh-klm-agent -f

# Test connectivity
sudo ssh-klm-agent status

Troubleshooting

Agent Not Connecting

# Check connectivity
curl -v https://ssh-klm.example.com/health

# Verify token
sudo ssh-klm-agent verify-token

Permission Denied

# Agent needs read access to SSH directories
sudo usermod -aG ssh-klm-agent $(whoami)

Related Pages

• Agent Configuration
• Agent Troubleshooting