# Unable to run endpoint-security through Elastic Agent **URL:** \ **Category:** SIEM\ **Tags:** elastic-agent\ **Created:** [August 4, 2020, 12:01am UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631 "2020-08-04T00:01:09Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Post date:** [August 4, 2020, 12:01am UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/1 "2020-08-04T00:01:09Z")
Using the `endpoint-security-7.9.0-SNAPSHOT` based on commit hash `e221c95cd0b0e72d5d153fac57e86feec12db408`. OS: Windows 10 Enterprise Version: 2004 Build: 19041.388 Kernel: 10.0.19041.388 (WinBuild.160101.0800) Error in Elastic Agent: ```auto Failed to dispatch action 'action_id: 659a705e-5c8d-4bfc-8399-447b1a6453d2, type: CONFIG_CHANGE', error: operator: failed to execute step sc-run, error: operation 'Exec' failed: : operation 'Exec' failed: ``` Encountered the following error if running `.\endpoint-security.exe verify` in PowerShell: ```auto Program 'endpoint-security.exe' failed to run: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown sourceAt line:1 char:1 + .\endpoint-security.exe verify + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~. At line:1 char:1 + .\endpoint-security.exe verify + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ResourceUnavailable: (:) [], ApplicationFailedException + FullyQualifiedErrorId : NativeCommandFailed ``` ---
**Author:** ![NickFritts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickfritts/32/47189_2.png) [@NickFritts](https://discuss.elastic.co/u/NickFritts)\ **Post date:** [August 4, 2020, 1:11pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/2 "2020-08-04T13:11:58Z")
Good Morning, thanks for checking out endpoint-security. Currently the endpoint binary is only test signed in the snapshot builds. In order for it to run, test signing will have to be enabled on the machine you're attempting to run it on. Instructions for how to do so are here (The page is talking about test signed drivers, but it applies to user-mode applications with Code Integrity set as well): [https://docs.microsoft.com/en-us/windows-hardware/drivers/install/the-testsigning-boot-configuration-option](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/the-testsigning-boot-configuration-option) ---
**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Post date:** [August 4, 2020, 1:45pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/3 "2020-08-04T13:45:45Z")
Thank you @NickFritts. However, I am still receiving the same error even after the `testsigning` option was enabled. update: looks like reboot was required. It looks fine after rebooted. To be able to access the Endpoint UI in SIEM, I believe I will need an Enterprise license? I can see the data in ES, but not the UI in Kibana. ---
**Author:** ![caitlinbetz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/caitlinbetz/32/74246_2.png) [@caitlinbetz](https://discuss.elastic.co/u/caitlinbetz)\ **Post date:** [August 4, 2020, 2:51pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/4 "2020-08-04T14:51:41Z")
@hendry.lim - thanks for trying out Elastic Endpoint Security! The endpoint security capabilities are available in 7.9 are in the basic licensing tier. You should see these under the Security app (previously, the SIEM app) in the Kibana UI. Can you verify which version of Kibana you are using? (If you’re not using the 7.9.0 snapshot of Kibana, you will not see the Security app in the UI) ---
**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Post date:** [August 4, 2020, 2:58pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/5 "2020-08-04T14:58:52Z")
@caitlinbetz, yup, I am running the latest `7.9.0-SNAPSHOT`. I just found out (silly me) that the events have to be `endpoint` generated events for the button to be enabled. Will the license be changed to Enterprise in `7.10`? We will need to know this so we will be able to advise our customers accordingly. I can see that this is a "read only view", so I guess the full version of this will require Enterprise license. ---
**Author:** ![caitlinbetz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/caitlinbetz/32/74246_2.png) [@caitlinbetz](https://discuss.elastic.co/u/caitlinbetz)\ **Post date:** [August 4, 2020, 4:16pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/6 "2020-08-04T16:16:17Z")
> I just found out (silly me) that the events have to be endpoint generated events for the button to be enabled. Which button are you referencing? Regarding licensing, the capabilities available today will remain in Basic in 7.10. Future releases may have capabilities that will only be available in Gold + tiers. ---
**Author:** ![NickFritts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickfritts/32/47189_2.png) [@NickFritts](https://discuss.elastic.co/u/NickFritts)\ **Post date:** [August 4, 2020, 8:33pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/7 "2020-08-04T20:33:11Z")
@hendry.lim I'm glad the test signing option worked out. You had me slightly panicking until I saw your update. ---
**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Post date:** [August 4, 2020, 10:15pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/8 "2020-08-04T22:15:21Z")
It's the `Analyze event` hexagon shape icon on Hosts events tab. Thank you for sharing the licensing details for Endpoint. So I guess with that, we can close this thread. Thank you @caitlinbetz and @NickFritts for both your help. ---
**Author:** ![caitlinbetz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/caitlinbetz/32/74246_2.png) [@caitlinbetz](https://discuss.elastic.co/u/caitlinbetz)\ **Post date:** [August 4, 2020, 10:48pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/9 "2020-08-04T22:48:41Z")
Glad we were able to help @hendry.lim If you're interested/able to provide feedback on your experience, we'd love to know - 1. What made you want to try Elastic Endpoint? 2. How did you find the deployment experience? Thanks! ---
**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Post date:** [August 4, 2020, 11:00pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/10 "2020-08-04T23:00:11Z")
1. This is the first time that the Elastic Endpoint will be released under Basic, so this is my first chance to explore it. We have a Platinum Trial license, but this was only available in Enterprise license, hence the question regarding the licensing. In fact, I have been exploring and testing out different aspects of `7.9.0-SNAPSHOT` releases and reporting issues/bugs that I found to GitHub directly. In addition, one of our Elastic customers is planning to do pilot deployment of Elastic Agent when `7.9.0` is released, hence it is my responsibility to advise them on the gotchas/limitations on this first beta release. 2. Deployment was easy with the Elastic Agent, but I have never tried to deploy a standalone `endpoint-security` agent. However, in this version, there is not much configuration can be done on the `endpoint-security` agent. Just a little bit of background info, the company I am working with is an Elastic focus partner in SG. Our partner manager is Anthony Jose. ---
**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Post date:** [August 5, 2020, 3:59am UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/11 "2020-08-05T03:59:12Z")
Looks like I found an issue with the Resolver UI that it does not support CCS yet. Raised [#74330](https://github.com/elastic/kibana/issues/74330). ---
**Author:** ![tonymeehan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonymeehan/32/56524_2.png) [@tonymeehan](https://discuss.elastic.co/u/tonymeehan)\ **Post date:** [August 7, 2020, 6:50pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/12 "2020-08-07T18:50:28Z")
Thank you so much for filing that issue, @hendry.lim! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 4, 2020, 6:50pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631/13 "2020-09-04T18:50:32Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.