Linux/Unix Client Installation

You can install the Tenable Patch client on Linux by installing the appropriate package and running the adaptivactl setup command. The setup command installs the TPM client, configure firewall rules, and run post-installation checks to ensure functionality. The setup progress prints to the terminal and exit with a 0 exit-code if successful. If the client setup fails for any reason, it exits with a non-zero exit-code.

The adaptivactl setup command checks for port availability before client setup. If a firewall is detected, setup creates firewall rules using the appropriate application: ufw with the DEB package, firewalld with the RPM package.

The client now runs post-setup checks to confirm connectivity with the server and other services. The setup waits for these checks to be completed. You can skip these checks using the --skip-connection-checks flag.

There are several different installation packages provided for cross-platform device installations. Be sure to use the correct one for your operating system. Locate the installers\cross-platform folder in the downloaded .zip file. Replace <version> with the appropriate version.

Linux Installation

  1. Open a Command terminal window, then run the following command to execute the package:

    • CentOS, RHEL - sudo dnf install ./tenable-patch-client-<version>-1.el9.x86_64.rpm

    • Debian, Ubuntu - sudo apt install ./tenable-patch-client-<version>-amd64.deb

      Note: When running the apt install interactively, you may ignore the following message if returned: N: Download is performed unsandboxed as root as file ‘/<path-to-install-package>’ couldn’t be accessed by user ‘_apt’. – pkgAcquire::Run (13: Permission denied)

  2. Run the following adaptivactl command in setup mode to configure the client:

    • sudo /opt/tenable/patchclient/bin/adaptivactl setup <flags>

      Note: The --server flag is required, and all other flags are optional. Refer to the following table for the available parameters. Example: sudo /opt/tenable/patchclient/bin/adaptivactl setup --server server.corp.example --server-guid 1cb07a9e-a88c-4db2-8fe3-2eb7748545d6

  3. Once the client installation is completed, the client performs a series of connection checks

    • [info] Running connection checks…

    • [info] The connection check ‘HTTP Connection’ has started

    • [info] The connection check ‘HTTP Connection’ has passed

  4. When the connection checks are completed, the Patch Client is fully online and ready to be managed.