Technical Tip: How to perform a forced agent re-enroll
| Description | This article describes how to perform a forced agent re-enroll. |
| Scope | FortiDLP. |
| Solution | Under some circumstances, it may be necessary to re-enroll a Reveal agent programmatically, for example via a non-interactive shell after the deployment of a new stack. This can be done via forced re-enroll.
In earlier versions of the Reveal Agent, it was necessary to first un-enroll the agent before enrolling again, but now, it is possible to force re-enroll directly.
Windows Command Prompt (Requires administrator privileges):
"C:\Program Files\Jazz Networks\Agent\agent.exe" enroll -f <bundle file path or enrollment code>
Windows PowerShell (Requires administrator privileges):
& "C:\Program Files\Jazz Networks\Agent\agent.exe" enroll -f <bundle file path or enrollment code>
Linux:
sudo jazz-agent enroll -f <bundle filename>
MacOS:
sudo /Library/Application\ Support/Ava/Reveal/agent/agent enroll -f <bundle filename>
The -f flag should not be used in scripts pushing out the agent via a software distribution mechanism such as System Configuration Center Manager (SCCM). In such cases it is possible that the same machine will be repeatedly re-enrolled, leading to duplicate entries and quickly using up enrollment bundle maximum use limits. |
