Install the Secure Relay (CLI)

The following procedure installs the Secure Relay using the command line. Before you begin, check that you have the necessary prerequisites and required linking key as described in Secure Relay for Tenable Identity Exposure .

To install the Secure Relay using CLI:

  1. Download the installer from the Tenable Identity Exposure Downloads Portal to your VM.

  2. In Powershell, type the following command:

    Copy
    Secure Relay Installation
    <PATH>\tenable.ad_SecureRelay_v3.43.0.exe /qn OPTIONS

With the following options:

  • APPDIR=<path> (mandatory) — Path to the Relay installation folder. Choose a partition that is not the System partition because the Relay creates large log files.

  • EDIT_LINKINGKEY=<string> (mandatory) — The linking key you retrieved from your Tenable Identity Exposure instance.

  • EDIT_INSTANCENAME=<string> (optional) — The name of the Relay. If you do not set a name, Tenable Identity Exposure uses the name of the machine. You can modify this name in Tenable Identity Exposure. This name must be unique.

  • PROXY_ADDRESS=<IP or DNS> (optional) — The proxy address to use if your network requires a proxy server to reach Tenable domains. If you provide a proxy address, you must also provide a proxy port.

  • PROXY_PORT=<number> (optional) — The proxy port to use if your network requires a proxy server to reach Tenable domains. If you provide a proxy address, you must also provide a proxy port.

  • /L* <folder> (optional) — The path where the installation creates a file that contains only the Relay installation logs.

Copy

Example of Secure Relay Installation with Options

.\tenable.ad_SecureRelay_v3.43.0.exe /qn APPDIR=D:\Tenable\Tenable.ad\ EDIT_LINKINGKEY=eyJjZXRpRG5zIjoicWExc2Fhcy1yZWxheS50ZW5hYmxlLmFkIiwidG9rZW4iOiI4NkYwMzMzQS01MkI5LTQ4QTctQjMxMS05RDdGRkM5QjkzNTUifQ== EDIT_INSTANCENAME="US Network Area" /L* C:\Users\Administrator\Desktop\log.txt
Note: After you press Enter, the installation begins as a background task. Even though the CLI prompt returns immediately, it does not indicate that the installation has completed. If you selected the /L* option, you can look in the log file for confirmation that the installation completed successfully.

Examples

The following are examples of log entries indicating successful or failed installations:

Copy

Successful installation

MSI (s) (D8:EC) [17:39:04:383]: Product: Tenable.ad Secure Relay -- Installation completed successfully.

MSI (s) (D8:EC) [17:39:04:383]: Windows Installer installed the product. Product Name: Tenable.ad Secure Relay. Product Version: 3.43.0. Product Language: 1033. Manufacturer: Tenable. Installation success or error status: 0.

=== Logging stopped: 3/15/2023  17:39:04 ===
Copy

Failed installation

MSI (s) (74:38) [17:18:35:713]: Product: Tenable.ad Secure Relay -- Installation failed.

MSI (s) (74:38) [17:18:35:713]: Windows Installer installed the product. Product Name: Tenable.ad Secure Relay. Product Version: 3.43.0. Product Language: 1033. Manufacturer: Tenable. Installation success or error status: 1603.

=== Logging stopped: 3/15/2023  17:18:35 ===