

MacOS X agents

Open a session in your MacOS X agent host as root user. After that, you can register the Agent using agent-auth:

  1. Copy the CA (.pem file) to the /Library/Ossec/etc folder and run the agent-auth program:
# cp rootCA.pem /Library/Ossec/etc
# /Library/Ossec/bin/agent-auth -m -v /Library/Ossec/etc/rootCA.pem

In the file /Library/Ossec/etc/ossec.conf, in the <client><server> section, change the MANAGER_IP value to the Wazuh server address:

  1. Start the agent.
# /Library/Ossec/bin/ossec-control start