Management Agent (Worker)

About the Worker

To deploy VMs and run applications on VMs that use the CloudCenter platform (called worker VMs), you need a Management Agent (software installed on the worker to communicate with the Workload Manager) to be installed on each worker VM.

When the VM first boots up, the worker communicates with the bundle store to download the latest version of the agent and then start the agent. Once the Management Agent is started, it needs access to the Cisco hosted bundle store ( or to your locally-installed custom bundle store to download and start the service.

The Worker image provided or shared by Cisco contains the agent pre-installed using the CentOS 6 operating systems for some supported clouds. A Worker image becomes fully functional after you deploy the Worker VM to the cloud.

See Options to Install the Worker for details on how you can install the worker.

Management Agent Tasks

The Management Agent communicates with the CloudCenter Suite cluster, either directly or through Cloud Remote, and receives instructions to perform the following tasks:

  • Complete application deployment tasks

  • Perform provisioning tasks (for example running configuration scripts)

  • Run custom cleanup scripts (for example to de-provision or shutdown applications)

  • Enforce policies (for example, to reconfigure middle ware service during auto-scaling)

  • Collect system metrics based on policy requirements

  • Monitor data, provide status updates, and keep alive system heartbeats.

The Management agent (also called the agent) can be used in two modes.

VM ModeDescription


  • Refers to the non-dynamic bootstrapping mode.

  • You must install the agent (add custom code to the VM) when the image is launched as a VM.

  • The agent can be installed on VMs that have been imported into CloudCenter.

  • Use it to run custom actions on Imported VMs which were not deployed via the Workload Manager.

  • It is an alternate option for VMs that do not require the capability to launch applications but do require some basic CloudCenter functionality like performing platform actions.

  • If installed, the Virtual Machines page and the VM Details page display the icon and version.

  • See Virtual Machine Management > Management Agent for additional details.

Deployed by Workload Manager

  • Refers to the dynamic bootstrapping mode.

  • You do not need to install the agent as it is handled by Cisco. A custom image is not required by common public clouds as these clouds are capable of supporting cloud-init. However, if you prefer to use custom images in these clouds, you can.

  • Runs on workers created as part of applications deployed by the Workload Manager.

  • In this mode, it has all available capabilities listed in the About the Worker and Management Agent Tasks sections above.


  1. Question: Is the Management Agent required?
    : You do not need to install either the Management Agent  in the following cases:

    • If a service is defined as agentless (without an agent, see Custom Service Definition for additional details), then the applications running these services do not require an agent to be installed.

    • If you don't run custom scripts on imported VMs, you can continue use these VMs without installing the Management Agent.

  2. Question: How is the Management Agent different from the AgentLite?
    Answer: The legacy management agent used in CloudCenter Platform 4.x is no longer available. AgentLite was the interim lightweight agent that was used in CloudCenter Suite 5.0. Effective CloudCenter Suite 5.0, the term Management Agent refers to the agent in the CloudCenter Suite. The term AgentLite is no longer used in documentation. If you have a legacy agent installed, you can always update it to the CloudCenter Suite 5.x Management Agent.

  3. QuestionWhy is the Agent installed on Worker VM as part of Application deployment?
    : An agent is required to support on-demand actions and lifecycle actions defined in the Actions Library, service definition and application profile.

  4. Question: How does the worker get installed on a Workload Manager deployed VM?
    : Two ways:

    1. Create a pre-bootsrapped image: Use the worker installer for Linux or Windows, depending on your base OS, to manually create an image with the worker fully installed. Cisco also provides a Centos 6 pre-bootstrapped image as an appliance.

    2. Dynamic Bootstrapping Injection: When your VM-based application is launched in clouds that support an init string, Workload Manager passes an init string to the cloud provider that contains the first script needed in the worker install process. The cloud provider injects the script into the VM at deploy time. The script then executes when the VM is started and installs the worker.

  5. QuestionHow does the agent communicate with the CloudCenter Suite cluster?
    : Once the agent is installed, it needs to connect with the AMQP service in the CloudCenter Suite cluster. If the worker VM cannot initiate this connection due to firewall restrictions, you must install Cloud Remote (Conditional).

  6. QuestionWhich files are created as part of the agent installation process?
    : The list of file created as part of the agent installation process differs for Linux and Windows installations. See the Deployment Lifecycle Scripts > Lifecycle Action Script Definition for additional context.

  7. Question: Why is cliqruser permission required to run some scripts?
    Answer: By default, key-based authentication is configured using cliqruser permission – this user refers to the OS user in the Application VM (Worker). See the Deployment Lifecycle Scripts > Lifecycle Action Script Definition for script-specific details on when cliqruser permission is required.

  8. Question: Is the authorized_keys folder automatically deleted?
    Yes. After a VM launch the Workload Manager cleans up the authorized keys specified in the /root/.ssh/authorized_keys file for all OS types (except Ubunu) during the node initialization phase. For Ubuntu OS, the Workload Manager removes the authorized_keys from the /home/ubuntu/.ssh/ folder. After removing the authorized_keys file, the agent injects the specified or auto-generated keys associated with a cliqruser. The cliqruser credentials can be used to log into the VM.

    If you do not want the authorized_keys file to be automatically deleted, be sure to set the following flag in the worker image:

    touch /etc/opt/.cloudcenter_do_not_delete_authorized_keys && chmod 444 /etc/opt/.cloudcenter_do_not_delete_authorized_keys
  9. QuestionWhy does the agent program retain files in the C:\temp and C:\ directories?
    :  Some deployment scripts like resumeScript or reboot or restore take effect based on information retained in these directories. These scripts require information from those files to function as designed. Each script, the level at which it is defined, the script download location, the user running the script, and the location from which the script is run in provided in detail in the Deployment Lifecycle Scripts > Lifecycle Action Script Definition section for both Linux and Windows environments.

  10. Question: Does the worker installer for Windows install any open source tools on Windows workers?
    Answer: No, the Window worker installer does not install any open source tools on Windows. It does, however, install ccc_unarchiver, a proprietary tool to open TAR files.

  11. QuestionHow are application services different from the services created by the agent installation process?
    : The agent services and application services are independent of each other. 

    • Agent Services: Specific to the agent installer. When you install the agent, the Agent installer installs some services to help with the installation and maintenance of the management agent. These files include the CliQr Installer Service, Agent Service, and other services mentioned in Question 4 in this section.

  • No labels
Terms & Conditions Privacy Statement Cookies Trademarks