Technical Tip: Installing the Reveal Agent on Ubuntu (with Secure Boot)

Prerequisites:

1. Verify that DKMS is installed.

This can be done by running the following command in the terminal:

dkms status

If the following message is returned by the command:

Run the suggested command to install the DKMS package:

sudo apt install dkms

2. Verify that the kernel headers are installed.

The version of the currently running kernel can be determined by running the following command:

uname -r

For example, the below output shows the running kernel version for this endpoint is 5.15.0-27-generic:

To verify that the kernel headers are installed for this kernel version, run the following command:

apt list linux-headers-$(uname -r)

[installed] should be visiblebesides linux-headers-x.xx.x-x-generic. If this is not present,  run the following commands to install the kernel headers:

sudo apt-get install linux-headers-$(uname -r)

3. Check the status of Secure Boot.

There are additional steps to install the Reveal Agent if Secure Boot is enabled. To know it is applied, run the following command:

mokutil --sb-state

The output should return one of:

• SecureBoot enabled.
• SecureBoot disabled.

Installing the Reveal Agent.

1. Obtain the DEB installer for the Reveal Agent from the Support Portal.
2. Run the command:

sudo apt-get update

3. Upgrade the system by running:

sudo apt-get upgrade -y

Note: 

Reboot the device if there is a kernel change. If this does occur, re-verify that the kernel headers for this version are installed.

4. Navigate to the directory where the DEB installer has been downloaded.
5. Install the dependencies by running:

sudo apt install ./agent-deb.deb

If Secure Boot is enabled, the following screen will appear: If Secure Boot is disabled, skip to step 9.

6. Select Ok
7. Configure a password for Secure Boot. Input this upon a reboot:

8. Verify the password:

9. Reboot the device. If Secure Boot is enabled, continue with the following steps. If Secure Boot is disabled, the installation process has been completed.
10. Upon reboot, the MOK management screen will be presented. Press any key to enter MOK management.
11. Select Enroll MOK:

12.  Select Continue

13. Select Yes.

14. Enter the password created in step 7:

15. Select Reboot: