Understanding MS agents

MS agents are installed on AD servers for use in certificate discovery and enrollment.

SCM uses MS agents to do the following:

  • Discover Certificates — An agent installed on a domain joined Windows server can discover assets such as web servers, domains, and certificates in Active Directory.

  • Proxy MS Enrollment Protocols to SCM — An agent installed on a domain joined Windows server can act as a proxy to issue private and public certificates by using MS AD certificate templates mapped to SCM certificate profiles.

As a redundancy measure, SCM enables you to create clusters of MS agents installed on different servers to act as a single agent. If any agent fails, the other agents in the cluster seamlessly continue certificate discovery and enrollment.

MS agents can be managed on the Integrations  MS Agents page.

MS Agents page

The following table describes the settings and controls of the MS Agents page.

Column Description

Name

The name of the agent

Active

Indicates whether the agent is active

Connected Nodes

For clustered agents, the number of nodes in the cluster, and the number of nodes that are currently connected

Status

The current connection status of the agent

The valid values are:

  • Connected — The agent is communicating with SCM

  • Disconnected — the agent is not communicating with SCM

  • Degraded - not all nodes of a cluster are connected

  • Pending — Initial connection after install has not occurred

Version

The version number of the installed agent software

CA Proxy

Indicates whether the agent was installed with Proxy MS Enrollment Protocols to SCM enabled

Table controls

Search

Enables you to search MS agents by name

Filter

Enables you to sort the table information using custom filters

Group

Enables you to sort the table information using predefined groups

Refresh

Refreshes the information presented in the table

Manage Columns

Enables you to select which table columns to display

Agent controls

Add

Opens the Add MS Agent dialog where you can add new MS agents

Create Cluster

Opens the Add MS Agent Cluster dialog where you can create an agent cluster

Delete

Removes the selected agent

Edit

Opens the Edit MS Agent dialog where you can manage agent properties

Commands

Opens the Commands dialog where you can view commands executed by the selected agent

View Audit

Opens the MS Agents Audit dialog where you can view or download audit logs

Restore

Downloads the agent setup file for existing agents

This is useful if you have already configured, downloaded, and installed the agent on a server but need to re-install it for some reason. The new agent setup file is configured with the same parameters specified for the initial agent.