Skip to content

Download

import TabItem from "@theme/TabItem"; import Tabs from "@theme/Tabs";

import { DownloadButtons } from "./DownloadButtons";

The authentik Agent is a service that you install on Linux, macOS, and Windows devices to enable device compliance, local device login, SSH authentication, and CLI application authentication. The downloads on this page always provide the latest release.

Download for macOS or Windows

:::info Downloading the installer is only the first step. To create an enrollment token, install the package, and join the device to an authentik domain, follow the macOS or Windows deployment guide. For more than a handful of devices, use MDM or automated deployment instead. :::

Install on Linux

On Linux, install the authentik Agent from the authentik package repository rather than downloading a file.

<Tabs groupId="platform" defaultValue="debian" values={[ { label: "Debian-based", value: "debian" }, { label: "Red Hat-based", value: "rhel" }, ]}

  1. Open a Terminal session and install the required GPG key:
curl -fsSL https://pkg.goauthentik.io/keys/gpg-key.asc | sudo gpg --dearmor -o /usr/share/keyrings/authentik-keyring.gpg
  1. Add the repository:
echo "deb [signed-by=/usr/share/keyrings/authentik-keyring.gpg] https://pkg.goauthentik.io stable main" | sudo tee /etc/apt/sources.list.d/authentik.list
  1. Update your repositories and install the authentik Agent packages:
sudo apt update
sudo apt install authentik-cli authentik-agent authentik-sysd
  1. (Optional) To enable SSH server authentication and local device login, install two additional packages:
sudo apt install libnss-authentik libpam-authentik

  1. Open a Terminal session and run the following command to add the authentik repo and associated GPG key:
# This overwrites any existing configuration in /etc/yum.repos.d/authentik.repo
cat <<EOF | sudo tee /etc/yum.repos.d/authentik.repo
[authentik]
name=authentik
baseurl=https://pkg.goauthentik.io
enabled=1
gpgcheck=1
gpgkey=https://pkg.goauthentik.io/keys/gpg-key.asc
EOF
  1. Install the authentik Agent packages:
sudo yum install -y authentik-cli authentik-agent authentik-sysd
  1. (Optional) To enable SSH server authentication and local device login, install two additional packages:
sudo yum install -y libnss-authentik libpam-authentik

:::info To join the device to an authentik domain and configure NSS and PAM, continue with the Linux deployment guide. :::

Verify the installation

Check the version of all installed authentik components by running the following command:

ak version

You should see a response that starts with authentik CLI v<version_number>.

Next steps