Administrator documentation.
Install, configure and run Tracemark on your own infrastructure.
What the guide covers.
The full administrator guide ships inside the Tracemark console, next to the settings it describes. Customers and trial users get it with their installation. This page shows what it covers.
Install the server
Run the Tracemark console and API on your own Linux server with Docker. Database migrations run on start, and a backup and restore runbook is included.
Enrol devices
Push the agent across an Active Directory domain with the Deployer, install the MSI with your software distribution tool, or install it by hand. Each method enrols the device into your tenant.
Organise devices
Group devices by host name patterns and dynamic rules such as operating system, organisational unit or agent version. Every policy targets groups.
Write policies
Choose what counts as sensitive, which channels are watched and what happens on a match. Start in audit mode, then warn, ask for a reason or block.
Investigate
Work incidents with their evidence, group them into cases and export reports on a schedule.
Keep agents current
Agents update themselves from your server in stages you control. Every build is signed and checked before it runs.
Control who can do what
Give administrators, analysts and auditors only the permissions they need. Each role sees only the pages and actions it can use.
Before you start.
- A Linux server with Docker for the console and API, reachable by your devices over HTTPS.
- A DNS name and a certificate for that server. A certificate from your own internal authority works; the Deployer can push its root to devices.
- An SMTP mailbox if you want reports and alerts by email.
- For domain deployment, a domain-joined Windows machine to run the Deployer. See Deploying across a domain.
Want a walkthrough?
We set it up with you on a test group of your own machines.