Agent tool
TrustEdge agent tool provides device bootstrapping, Device Trust Manager communications, and certificate tool functionality.
Use cases and examples (command line)
Step 1: Initialize TrustEdge agent
Before running TrustEdge agent, it must be initialized to connect and authenticate to Device Trust Manager. This involves downloading the device’s bootstrap configuration zip file from Device Trust Manager.
In Device Trust Manager, go to Device management > Devices and select the device.
On the Device details page, select the Configuration tab and click Download Bootstrap configuration file to download the bootstrap configuration zip file (
<guid>.zip
).Note
The bootstrap configuration zip file (
<guid>.zip
) contains everything TrustEdge agent needs to connect and authenticate the device to Device Trust Manager. This includes bootstrap_config.json, bootstrap certificate and private key, and bundle of trusted certificates.Use a USB drive, secure copy (scp), or another method to transfer the zip file to your device.
scp <guid>.zip device@<device_ip_address>:~/.
Log in to the device and run the following command to initialize the service using the bootstrap zip file:
/etc/digicert/scripts/configure_trustedge.sh --bootstrap-zip ./<guid>.zip
Step 2: Start TrustEdge agent
Start TrustEdge agent with the following command:
sudo trustedge agent
To see the policies that have been successfully downloaded and applied, use:
cat /etc/digicert/conf/applied_policy.json
To view the policies that have failed to apply, use:
cat /etc/digicert/conf/failed_policy.json
(Optional) To reset the service, use:
sudo trustedge agent --reset