Managing MS agents

Update an MS agent

Log in to SCM.
From the left-hand menu, select About.
Click the Download MS Agent icon and select Windows.
(Optional) If required, move the Sectigo_MS_Agent.exe file to the install location of the existing MS agent.
Right-click Sectigo_MS_Agent.exe and click Install.

The package automatically recognizes that there’s an existing version of the MS agent and initiates an update instead of a new install.
In SCM, navigate to the Private Key Agent page and verify that the agent is connected and showing the correct version.
Read the EULA, select I agree to the license terms and conditions, and click Install.
Click Next.
Read the EULA, select I accept the terms in the License Agreement, and click Next.
(Optional) Specify an installation location.
Click Next, Install, and Close.
In SCM, navigate to the MS Agents page and verify that the agent is connected and showing the correct version.

Log in to SCM.
Navigate to Integrations MS Agents.
Select the MS agent to be restored, and click Restore. The Sectigo_MS_Agent.exe file is automatically downloaded.
Save the displayed token, and close the Restore MS Agent dialog.
Stop the Active Directory Certificate service through Services.msc.
Run Sectigo_MS_Agent.exe file.
Read the EULA, select I agree to the license terms and conditions, and click Install.
Click Next.
Read the EULA, select I accept the terms in the License Agreement, and click Next.
Click Next, and paste the agent installation token.
If you do not need to modify any existing settings, click Next through the remaining installation pages and complete the installation.

During restoration, the existing agent configuration is restored automatically. For information about configurable installation settings, see Installing an MS Agent.
Start the Active Directory Certificate service through Services.msc.

Log in to SCM.
Navigate to Integrations MS Agents.
Select the MS agent to be restored, and click Restore. The Sectigo_MS_Agent.exe file is automatically downloaded.
Save the displayed token, and close the Restore MS Agent dialog.
Open the command prompt on the Windows Server as an administrator and navigate to the download location of the Sectigo_MS_Agent.exe file.
Stop the Active Directory Certificate service.
```
sc stop certsvc
```
Run the installation command and modify PROPERTY_TOKEN= to your agent installation token.
```
.\Sectigo_MS_Agent.exe /i /q PROPERTY_TOKEN=
```
During restoration, the existing agent configuration is restored automatically. For information about configurable installation settings, see Installing an MS Agent.
Start the Active Directory Certificate service.
```
sc start certsvc
```

Navigate to Settings Apps & features.
Search for Sectigo.
Select the Sectigo MS Agent and click Uninstall.
(Optional) Delete the files and logs associated with the MS agent.
1. Navigate to C:\ProgramData\Sectigo.
2. Delete the MS Agent folder.
  
  This cannot be undone. Only delete this folder if you want to completely remove all files and logs related to the MS agent.
In SCM, navigate to Integrations MS Agents.
Select the agent you want to delete.
Click the Delete icon.
Click Delete again.

When an MS agent is installed with Proxy MS Enrollment Protocols to SCM selected, the service commands are as follows:

Command Description

Command	Description
Start	Start an MS agent: `sc start CertSvc`
Stop	Stop an MS agent: `sc stop CertSvc`
Query	Query the status of an MS agent: `sc query CertSvc`

Start

Start an MS agent:

sc start CertSvc

Stop

Stop an MS agent:

sc stop CertSvc

Query

Query the status of an MS agent:

sc query CertSvc

When an MS agent is installed for discovery only (without Proxy MS Enrollment Protocols to SCM selected), the service commands are as follows: