Skip to content

Installation on OpenWrt (Asset Mode)

This guide provides instructions for installing the XplicitTrust agent on an OpenWrt device.

Asset mode means services (like SSH, HTTPS, remote desktop, etc) can be remotely accessed from an XplicitTrust client, or from another system running in asset mode.

Installation

  1. Download the .ipk package for your architecture from https://dl.xplicittrust.com/:
  2. In LuCI, navigate to System → Software → Upload Package.
  3. Upload the downloaded .ipk file and install it.

To install the XplicitTrust agent via the command line, run: 

ARCH="$(case "$(uname -m)" in x86_64) echo x86_64 ;; armv7l|armv7) echo arm_cortex-a7 ;; mipsel|mips) echo mipsel_24kc ;; *) echo "unsupported" >&2; exit 1 ;; esac)"
wget https://dl.xplicittrust.com/xtna-agent_${ARCH}.ipk
opkg install ./xtna-agent_${ARCH}.ipk

Configuration

Navigate to Services → XplicitTrust in the LuCI web interface to register the device. Registration

  1. To register the device as an asset: 
    xtna-util -user <XplicitTrust admin email address>
  2. Open the URL that xtna-util returns in a browser to authenticate.
  1. Go to the admin console settings page
  2. Create a new "Asset Creation Token", configure it, download and store it in a secure place.
  3. Use the token to register assets: 
    xtna-util -domain <tenant domain> -token <token>
  1. Go to the admin console assets page
  2. Click "Create new" button, fill out the form, and click "Apply".
  3. Click the "Download Config" icon at the top of the form box.
  4. Copy the configuration to the device and run: 
    xtna-util -import xtna-*.xtconfig

Status Monitoring

Navigate to Status → XplicitTrust in the LuCI web interface to see the connection status of the agent.

Registration

Troubleshooting

If the registration fails or the agent is not able to get Online, check that outgoing HTTPS connections (TCP port 443) are allowed. For the best experience, allow outgoing connections on UDP port range 51820 - 60000.

Consult the FAQ to learn more about troubleshooting firewalls.