FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
tnesh
Staff
Staff
Article Id 306215
Description

 

This article provides some tips for FortiSIEM Linux Agent user passwords with special characters

 

Scope

 

FortiSIEM v7.

 

Solution

 

  • It is required to create an agent user account in FortiSIEM Supervisor for agent registration/
    • Refer here for how to create a new agent user account.
  • Below are special characters that can be used when creating an agent user password:

!"#$%&()*+,-./:;<=>?@[\]^_`{|}~

 

  • Use single quotes (') to enclose a password (that does not contain any single quotes) when running the installation script in a Linux server:

    # bash fortisiem-linux-agent-installer-7.x.xxxxxxsh -s <SUPER_IP> -i <ORG_ID> -o <ORG_NAME> -u <AGENT_USER> -p '<AGENT_PWD>' -n <HOST_NAME>

 

Note:

If single quotes (') is used in the agent password:

  • Required to use Backslash (\) to escape.
  • Password does not need to be enclosed with single quotes (').
  • Best to avoid using single quotes with other special characters in the password, as it might break the installation script .
  •  

Sample installation script output:

1. Password that does not contain single quotes ('):

 

Agent Username

agtusr

Agent password

Fortinet123!"#$%&()*+,-./:;<=>?@[\]^_`{|}~

 

[root@centos]# bash fortisiem-linux-agent-installer-7.1.4.0177.sh -s 10.10.10.10 -i 2000 -o org -u agtusr -p 'Fortinet123!"#$%&()*+,-./:;<=>?@[\]^_`{|}~' -n centos.fortilab.com 

..... < truncated > .....

Agent parameters validated successfully
SUPER_IP:10.10.10.10
CUSTOMER_ID:2000
CUSTOMER_NAME:org
AGENT_REG_USERNAME:agtusr
AGENT_REG_PASSWORD:Fortinet123!"#$%&()*+,-./:;<=>?@[\]^_`{|}~

..... < truncated > .....

 

Note:

  • Use single quotes (') to enclose a password (that does not contain any single quotes):

2. Password that contains single quotes ('):

 

Agent Username

agtusr

Agent password

Fortinet123'

 

[root@centos]# bash fortisiem-linux-agent-installer-7.1.4.0177.sh -s 10.10.10.10 -i 2000 -o org -u agtusr -p Fortinet123\' -n centos.fortilab.com

..... < truncated > .....

Agent parameters validated successfully
SUPER_IP:10.10.10.10
CUSTOMER_ID:2000
CUSTOMER_NAME:org
AGENT_REG_USERNAME:agtusr
AGENT_REG_PASSWORD:Fortinet123'

..... < truncated > .....


Note:

  • Required to use Backslash (\) to escape.
  • Password does not need to be enclosed with single quotes (').
Contributors