Installation on Linux (Asset Mode)
XplicitTrust can run on Linux systems in two modes:
Client Mode: for regular users to access services (like SSH, HTTPS, remote desktop, etc).
Asset Mode: services (like SSH, HTTPS, remote desktop, etc) can be remotely accessed from an XplicitTrust client, or from another system running in asset mode.
On this page are the instructions for Asset Mode.
To install the XplicitTrust agent, run:
sudo apt update sudo apt --yes install wireguard wireguard-tools wget iptables ipset wget https://dl.xplicittrust.com/xtna-agent_amd64.deb sudo dpkg -i xtna-agent_amd64.deb
- To register the machine as an asset and (optionally) add it to the default policicy run:
sudo xtna-util -user <XplicitTrust admin email address> -default-policy
- Open the URL that xtna-util returns in a browser to authenticate.
Go to the admin console settings page
Create a new "Asset Creation Token", configure it, download and store it in a secure place
Use the token to register assets
sudo xtna-util -domain <tenant domain> -token <token>
Go to the admin console assets page
Click "Create new" button, fill out form, click "Apply"
Click "Download Config" icon at top of the form box:
Copy the configuration to the asset and run:
sudo xtna-util -import xtna-*.xtconfig
Tested Linux Distributions
Ubuntu 18.04, Ubuntu 20.04, Ubuntu 21.10, Ubuntu 22.04, Ubuntu 23.04, Debian Bullseye (11), Debian Bookworm (12)
If the registration fails or the agent is not able to get Online check that outgoing HTTPS connections (TCP port 443) are allowed. For the best experience, allow outgoing connections on UDP port range 51820 - 60000.
Consult the FAQ to learn more about troubleshooting firewalls.