Procedure 1. Download the relevant installation packages. - For manual installation: 1. Navigate to \> Agent Client Collector > Deployment > Agent Downloads. 2. Download the relevant .rpm or .deb installation file. 3. Download the relevant signature files to validate the installation files. - For command-line installation, run the following commands to download both the signature and installation files to your local machine: Note: Each curl command must appear on a single line. 2. (Optional) Verify the package signature. 1. Extract the installation file (if it is compressed) by running the following command: `unzip agent_client-collector-<version_number>-x86_64-rpm-rpm.zip` 2. Validate the installation file signature by running the indicated commands. - On an RPM-based system: Where `<ServiceNow DGST pem key>` is the .pem file extracted from the .zip file, and `<signature file>` is the .bin file extracted from the .zip file. Note: Each command must appear on a single line. - On a Debian-based system: `gpg --import ServiceNow_Digicert_Public.gpg` - On Debian 12 machines: `dpkg-sig --verify agent-client-collector-<version number>-<distro>_amd64.deb` - On other Debian machines: `sudo gpg --verify agent-client-collector-<version number>-<distro>_amd64.deb` Note: Each command must appear on a single line. 3. Install the Agent Client Collector package using the package manager associated with Linux distribution. | OS | Command | | --- | --- | | RHEL-based | `yum / dnf localinstall` | | SLES | `zypper install` | | Debian-based | `apt-get install` | Alternatively, if these commands are not configured correctly, you can use the core commands that are configured to run with the package manager commands. - RPM-based system: `# rpm -vi agent-client-collector-<version number>-x86_64.rpm` - Debian-based system: `# dpkg -i agent-client-collector-<version number>-<distro>_amd64.deb` Verify whether the package commands are configured correctly with your system administrator. Note: Some file systems may have restrictions enabled; for example, /var/ may be mounted with a noexec flag. Because the agent must execute Agent Client Collector plugins that are normally store in the /var/cache directory, you must deploy the application into specific folders by customizing the installation paths using the \--relocate option as an .rpm parameter. For example: `rpm -i --relocate /var/cache=/opt/cache agent-client-collector-<version_number>-x86_64.rpm` The following paths can be relocated: | Path | Notes | | --- | --- | | /etc | When updating, you must also update the allow-list parameter in the acc.yml file with the new path. | | /usr/share | N/A | | /var/cache | Updating the /var directory retains all /var subdirectories, nested under the new directory. | | /var/log | | /var/run | | /var | Review the paths in /usr/lib/systemd/system/acc.service to ensure that they appear as expected. 4. When installing a .deb package, configure the agent's acc.yml configuration file. 1. Copy the sample configuration file by running the following command. `# cp -p /etc/servicenow/agent-client-collector/acc.yml.example /etc/servicenow/agent-client-collector/acc.yml` 2. Rename the allow list file. `# cp -p /etc/servicenow/agent-client-collector/check-allow-list.json.default /etc/servicenow/agent-client-collector/check-allow-list.json` Note: This step is not relevant for .rpm packages, which come with acc.yml and check-allow-list.json files included in the base system. 5. When installing either a .deb or .rpm package, update the configuration file, adding check-allow-list.json to /etc/servicenow/agent-client-collector and copying the backend-url and api-key from the instance. For example: The allow-list feature, indicating the commands permitted to be executed by the agent, is enabled. 6. Configure sudoers. Configuration is typically automated by your Linux sysadmin. To configure manually if you want to ensure correctness before full configuration, run the following. 7. Configure the agent to run as a service. 1. Safeguard resource consumption by adding the indicated values to the /usr/lib/systemd/system/acc.service file. - CPUShares=128 - CPUQuota=10% - MemoryLimit=192M - BlockIOWeight=10 - LimitNICE=15 For example: 2. Run the reload daemon command If you modified the service file after enabling the acc service. `# systemctl daemon-reload` 3. Enable and start the service by running the following commands. `# systemctl enable acc` `# systemctl start acc` ## Sources [Install Agent Client Collector on a Linux system](https://www.servicenow.com/docs/bundle/washingtondc-it-operations-management/page/product/agent-client-collector/task/install-acc-linux.html)