Skip to content

Agent Installation

Install the SSH-KLM agent on target hosts for full key management capabilities.

Terminal window
curl -fsSL https://get.qcecuring.com/ssh-agent | sudo bash -s -- \
--server https://ssh-klm.example.com \
--token YOUR_REGISTRATION_TOKEN

Ubuntu/Debian:

Terminal window
# Add repository
curl -fsSL https://packages.qcecuring.com/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/qcecuring.gpg
echo "deb [signed-by=/usr/share/keyrings/qcecuring.gpg] https://packages.qcecuring.com/apt stable main" | \
sudo tee /etc/apt/sources.list.d/qcecuring.list
# Install
sudo apt update
sudo apt install ssh-klm-agent
# Configure
sudo ssh-klm-agent configure \
--server https://ssh-klm.example.com \
--token YOUR_TOKEN

RHEL/CentOS:

Terminal window
# Add repository
sudo dnf config-manager --add-repo https://packages.qcecuring.com/rpm/qcecuring.repo
# Install
sudo dnf install ssh-klm-agent
# Configure
sudo ssh-klm-agent configure \
--server https://ssh-klm.example.com \
--token YOUR_TOKEN
Terminal window
docker run -d \
--name ssh-klm-agent \
--restart unless-stopped \
-v /etc/ssh:/etc/ssh:rw \
-v /home:/home:rw \
-v /root:/root:rw \
-e SSHKLM_SERVER=https://ssh-klm.example.com \
-e SSHKLM_TOKEN=YOUR_TOKEN \
qcecuring/ssh-klm-agent:latest
- name: Install SSH-KLM Agent
hosts: all
roles:
- role: qcecuring.ssh_klm_agent
vars:
sshklm_server: https://ssh-klm.example.com
sshklm_token: "{{ vault_sshklm_token }}"
Terminal window
# Check service status
sudo systemctl status ssh-klm-agent
# Verify connectivity
sudo ssh-klm-agent status
# View logs
sudo journalctl -u ssh-klm-agent -f

Generate a token in the UI:

  1. Go to Settings → Agents
  2. Click Generate Registration Token
  3. Set expiry and host limit
  4. Copy token for installation
DirectionPortProtocolPurpose
Outbound443HTTPSAPI communication
Outbound8443gRPCAgent streaming