Skip to main content
Anthony_E
Staff
Staff
October 29, 2024

Technical Tip: How to perform a forced agent re-enroll

  • October 29, 2024
  • 0 replies
  • 152 views
Description This article describes how to perform a forced agent re-enroll.
Scope FortiDLP.
Solution

Under some circumstances, it may be necessary to re-enroll a Reveal agent programmatically, for example via a non-interactive shell after the deployment of a new stack. This can be done via forced re-enroll.

 

In earlier versions of the Reveal Agent, it was necessary to first un-enroll the agent before enrolling again, but now, it is possible to force re-enroll directly.

 

Windows Command Prompt (Requires administrator privileges):

 

"C:\Program Files\Jazz Networks\Agent\agent.exe" enroll -f <bundle file path or enrollment code>

 

Windows PowerShell (Requires administrator privileges):

 

& "C:\Program Files\Jazz Networks\Agent\agent.exe" enroll -f <bundle file path or enrollment code>

 

Linux:

 

sudo jazz-agent enroll -f <bundle filename>

 

MacOS:

 

sudo /Library/Application\ Support/Ava/Reveal/agent/agent enroll -f <bundle filename>


Note:
 

The -f flag should not be used in scripts pushing out the agent via a software distribution mechanism such as System Configuration Center Manager (SCCM). In such cases it is possible that the same machine will be repeatedly re-enrolled, leading to duplicate entries and quickly using up enrollment bundle maximum use limits.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!