Initialize and start TrustEdge: TrustEdge agent

2 minute read

Step 1: Initialize TrustEdge agent

Before running TrustEdge agent, it must be initialized to connect and authenticate to Device Trust Manager. This involves downloading the device’s bootstrap configuration zip file from Device Trust Manager.

In Device Trust Manager, go to Device management > Devices and select the device.
On the Device details page, select the Configuration tab and click Download Bootstrap configuration file to download the bootstrap configuration zip file (<guid>.zip).
Note
The bootstrap configuration zip file (<guid>.zip) contains everything TrustEdge agent needs to connect and authenticate the device to Device Trust Manager. This includes bootstrap_config.json, bootstrap certificate and private key, and bundle of trusted certificates.
Use a USB drive, secure copy (scp), or another method to transfer the zip file to your device.
```
scp <guid>.zip device@<device_ip_address>:~/.
```

sudo trustedge agent --configure --trustedge-user trustedge --trustedge-group trustedge --bootstrap-zip ./<guid.zip>

Note

If your device uses just‑in‑time registration (JITR) with EST, SCEP, or CMPv2, you can run the TrustEdge agent directly on the device to download and apply the bootstrap configuration. For more information, see Use TrustEdge agent with JITR.

Step 2: Start TrustEdge agent

Start TrustEdge agent with the following command:
```
sudo systemctl start trustedge.service
```
To see the policies that have been successfully downloaded and applied, use:
```
cat /etc/digicert/conf/applied_policy.json
```
To view the policies that have failed to apply, use:
```
cat /etc/digicert/conf/failed_policy.json
```