End of support notice: On May 20, 2026, AWS will end support for Amazon Inspector Classic. After May 20, 2026, you will no longer be able to access the Amazon Inspector Classic console or Amazon Inspector Classic resources. Amazon Inspector Classic no longer available to new accounts and accounts that have not completed an assessment in the last 6 months. For all other accounts, access will remain valid until May 20, 2026, after which you will no longer be able to access the Amazon Inspector Classic console or Amazon Inspector Classic resources. For more information, see [Amazon Inspector Classic end of support](https://docs.aws.amazon.com/inspector/v1/userguide/inspector-migration.html). # Installing Amazon Inspector Classic agents You can install the Amazon Inspector Classic agent using the [Systems Manager Run Command](http://docs.aws.amazon.com/systems-manager/latest/userguide/execute-remote-commands.html) on multiple instances (including both Linux-based and Windows-based instances). Alternatively, you can install the agent individually by signing in to each EC2 instance. The procedures in this chapter provide instructions for both methods. As another option, you can quickly install the agent on all Amazon EC2 instances included in an assessment target by selecting the **Install Agents** check box on the **Define an Assessment target** page on the console. **Topics** + [ ## Installing the agent on multiple EC2 instances using the Systems Manager Run Command ](#install-run-command) + [ ## Installing the agent on a Linux-based EC2 instance ](#install-linux) + [ ## Installing the agent on a Windows-based EC2 instance ](#install-windows) **Note** The procedures in this chapter apply to all AWS Regions that are supported by Amazon Inspector Classic. ## Installing the agent on multiple EC2 instances using the Systems Manager Run Command You can install the Amazon Inspector Classic agent on your EC2 instances using the [Systems Manager Run Command](http://docs.aws.amazon.com/systems-manager/latest/userguide/execute-remote-commands.html). This enables you to install the agent remotely and on multiple instances (both Linux-based and Windows-based instances with the same command) at once. **Important** Agent installation using the Systems Manager Run Command is not currently supported for the Debian operating system. **Important** To use this option, make sure that your EC2 instance has the SSM Agent installed and has an IAM role that allows Run Command. The SSM Agent is installed, by default, on Amazon EC2 Windows instances and Amazon Linux instances. Amazon EC2 Systems Manager requires an IAM role for EC2 instances that processes commands and a separate role for users executing commands. For more information, see [Installing and configuring SSM Agent](http://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent.html) and [Configuring security roles for SSM](http://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-access.html). **To install the agent on multiple EC2 instances using the Systems Manager Run Command** 1. Open the AWS Systems Manager console at [https://console.aws.amazon.com/systems-manager/](https://console.aws.amazon.com/systems-manager/). 1. In the navigation pane under **Node Tools**, choose **Run Command**. 1. Choose **Run a command**. 1. For **Command document**, choose the document named **AmazonInspector-ManageAWSAgent** that is owned by **Amazon**. This document contains the script for installing the Amazon Inspector Classic agent on EC2 instances. 1. For **Targets**, you can select EC2 instances using different methods. To install the agent on all of the instances in the assessment target, you can specify the tags that were used to create the assessment target. 1. Provide your choices for the rest of the available options using the instructions in [Running commands from the console](https://docs.aws.amazon.com/systems-manager/latest/userguide/rc-console.html), and then choose **Run**. **Note** You can also install the agent on multiple EC2 instances (both Linux-based and Windows-based) when you create an assessment target, or you can use the **Install Agents with Run Command** button for an existing target. For more information, see [Creating an assessment target](inspector_applications.md#create_application_via_console). ## Installing the agent on a Linux-based EC2 instance Perform the following procedure to install the Amazon Inspector Classic agent on a Linux-based EC2 instance. **To install the agent on a Linux-based EC2 instance** 1. Sign in to your EC2 instance running a Linux-based operating system where you want to install the Amazon Inspector Classic agent. **Note** For information about the operating systems that Amazon Inspector Classic supports, see [Amazon Inspector Classic supported operating systems and Regions](inspector_supported_os_regions.md). 1. Download the agent installation script by running one of the following commands: + **wget https://inspector-agent.amazonaws.com/linux/latest/install** + **curl -O https://inspector-agent.amazonaws.com/linux/latest/install** 1. (Optional) Verify that the agent installation script is not altered or corrupted. For more information, see [(Optional) Verify the signature of the Amazon Inspector Classic agent installation script on Linux-based operating systems](inspector_verify-sig-agent-download-linux.md). 1. To install the agent, run **sudo bash install**. **Note** If you are installing the agent in a SELinux environment the Amazon Inspector Classic may be detected as an unconfined daemon. You can avoid this by changing the domain of the agent process from the default `initrc_t` to `bin_t`. Use the following commands to assign the `bin_t` context to the Amazon Inspector Classic run scripts before installing the agent for SELinux: **sudo semanage fcontext -a -t bin\$1t /etc/rc\$1.d/init\$1.d/awsagent** **sudo semanage fcontext -a -t bin\$1t /etc/init\$1.d/awsagent** **Note** As updates for the agent become available, they are automatically downloaded from Amazon S3 and applied. For more information, see [Amazon Inspector Classic agent updates](inspector_agents.md#agent-updates). If you want to skip this auto-update process, run the following command when you install the agent: **sudo bash install -u false** **Note** (Optional) To remove the agent installation script, run **rm install**. 1. Verify that the following files required for the agent to be successfully installed and functioning properly are installed: + `libcurl4` (required to install the agent on Ubuntu 18.04) + `libcurl3` + `libgcc1` + `libc6` + `libstdc++6` + `libssl1.0.1` + `libssl1.0.2` (required to install the agent on Debian 9) + `libssl1.1` (required to install the agent on Ubuntu 20.04 LTS) + `libpcap0.8` ## Installing the agent on a Windows-based EC2 instance Perform the following procedure to install the Amazon Inspector Classic agent on a Windows-based EC2 instance. **To install the agent on a Windows-based EC2 instance** 1. Sign in to your EC2 instance running a Windows-based operating system where you want to install the agent. **Note** For more information about the operating systems that Amazon Inspector Classic supports, see [Amazon Inspector Classic supported operating systems and Regions](inspector_supported_os_regions.md). 1. Download the following .exe file: `https://inspector-agent.amazonaws.com/windows/installer/latest/AWSAgentInstall.exe` 1. Open a command prompt window (with administrative permissions), navigate to the location where you saved the downloaded `AWSAgentInstall.exe`, and run the .exe file to install the agent. **Note** As updates for the agent become available, they are automatically downloaded from Amazon S3 and applied. For more information, see [Amazon Inspector Classic agent updates](inspector_agents.md#agent-updates). If you want to skip this auto-update process, run the following command when you install the agent: **AWSAgentInstall.exe AUTOUPDATE=No**