You can install a TDR Host Sensor on the OS image you use to set up computers on your network. When you install a TDR Host Sensor, it automatically generates a unique identifier (UUID) that it sends to your TDR account. The unique identifier is different for each installed Host Sensor. If you want to install the Host Sensor in an OS image that you use to provision multiple computers, you must clear the unique identifier from the Host Sensor before you create the OS image.
To install the Host Sensor as part of an OS Image:
- On the computer used to create your OS image, install the Host Sensor and clear the Host Sensor UUID. The steps for each OS are described below.
- Create the OS image.
- Install the OS image on each computer.
When the Host Sensor starts on each computer, the Host Sensor generates a new UUID specific to that computer.
After you clear the UUID for the Host Sensor, do not restart the Threat Detection and Response service or reboot the computer before you make the disk image. If the Host Sensor restarts, it automatically generates a new UUID.
- Open the Services desktop app, and stop the Threat Detection and Response service.
- On the Windows host, open a command prompt.
- Change to the installation directory for the Host Sensor. :
cd \Program Files (x86)\WatchGuard\Threat Detection and Response\amd64\
- To clear the Host Sensor unique identifier, type this command:
host_sensor.exe /clearSensorUUID
- To verify that the Host Sensor UUID has been cleared, use the /getSensorUUID command:
host_sensor.exe /getSensorUUID
- On the Mac host, open the Terminal application.
- To stop the Host Sensor daemon, type this command:
sudo launchctl unload /Library/LaunchDaemons/com.watchguard.tdr.hostsensor.plist
- To change to the Host Sensor installation directory, type this command.
cd /usr/local/watchguard/tdr/amd64
- To clear the Host Sensor UUID, type this command:
sudo ./host_sensor --clearSensorUUID
- To verify that the Host Sensor UUID has been cleared, type this command:
sudo ./host_sensor --getSensorUUID
- On the Linux host, open a command prompt.
- To stop the Host Sensor service, type this command:
sudo service stop host_sensor
- To change to the Host Sensor installation directory, type this command.
cd /opt/watchguard/amd64
- To clear the Host Sensor UUID, type this command:
sudo ./host_sensor —clearSensorUUID
- To verify that the Host Sensor UUID has been cleared, type this command:
sudo ./host_sensor —getSensorUUID