AWS Security ChangesHomeSearch

AWS dcv documentation change

Service: dcv · 2025-11-22 · Documentation low

File: dcv/latest/sm-admin/agent.md

Summary

Added macOS support for DCV Session Manager agent and updated agent version from 2025.0.886 to 2025.0.888 across all platforms

Security assessment

The changes primarily add macOS installation instructions and update version numbers in download URLs. There's no mention of security vulnerabilities, patches, or security enhancements. Version updates could potentially include security fixes, but without explicit release notes or CVE references in the diff, this is speculative and doesn't constitute concrete evidence.

Diff

diff --git a/dcv/latest/sm-admin/agent.md b/dcv/latest/sm-admin/agent.md
index d0d1ef825..4a7263a33 100644
--- a//dcv/latest/sm-admin/agent.md
+++ b//dcv/latest/sm-admin/agent.md
@@ -7 +7 @@
-The agent must be installed on all of the Amazon DCV server hosts in the fleet. The agent can be installed on both Windows and Linux servers. For more information about the supported operating systems, see [Amazon DCV Session Manager requirements](./requirements.html).
+The agent must be installed on all of the Amazon DCV server hosts in the fleet. The agent can be installed on both Windows, Linux and macOS hosts. For more information about the supported operating systems, see [Amazon DCV Session Manager requirements](./requirements.html).
@@ -44 +44 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.886-1.amzn2023.x86_64.rpm
+                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-1.amzn2023.x86_64.rpm
@@ -48 +48 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.886-1.el8.x86_64.rpm
+                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-1.el8.x86_64.rpm
@@ -52 +52 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.886-1.el9.x86_64.rpm
+                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-1.el9.x86_64.rpm
@@ -56 +56 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent_2025.0.886-1_amd64.ubuntu2004.deb
+                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent_2025.0.888-1_amd64.ubuntu2004.deb
@@ -60 +60 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent_2025.0.886-1_amd64.ubuntu2204.deb
+                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent_2025.0.888-1_amd64.ubuntu2204.deb
@@ -64 +64 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent_2025.0.886-1_amd64.ubuntu2404.deb
+                $  wget https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent_2025.0.888-1_amd64.ubuntu2404.deb
@@ -68 +68 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $ curl -O https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.886-1.sles12.x86_64.rpm
+                $ curl -O https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-1.sles12.x86_64.rpm
@@ -72 +72 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $ curl -O https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.886-1.sles15.x86_64.rpm
+                $ curl -O https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-1.sles15.x86_64.rpm
@@ -78 +78 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.886-1.el7.x86_64.rpm
+                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.888-1.el7.x86_64.rpm
@@ -82 +82 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.886-1.amzn2023.x86_64.rpm
+                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.888-1.amzn2023.x86_64.rpm
@@ -86 +86 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.886-1.el8.x86_64.rpm
+                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.888-1.el8.x86_64.rpm
@@ -90 +90 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.886-1.el9.x86_64.rpm
+                $  sudo yum install -y ./nice-dcv-session-manager-agent-2025.0.888-1.el9.x86_64.rpm
@@ -94 +94 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo apt install ./nice-dcv-session-manager-agent_2025.0.886-1_amd64.ubuntu2004.deb
+                $  sudo apt install ./nice-dcv-session-manager-agent_2025.0.888-1_amd64.ubuntu2004.deb
@@ -98 +98 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo apt install ./nice-dcv-session-manager-agent_2025.0.886-1_amd64.ubuntu2204.deb
+                $  sudo apt install ./nice-dcv-session-manager-agent_2025.0.888-1_amd64.ubuntu2204.deb
@@ -102 +102 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $  sudo apt install ./nice-dcv-session-manager-agent_2025.0.886-1_amd64.ubuntu2404.deb
+                $  sudo apt install ./nice-dcv-session-manager-agent_2025.0.888-1_amd64.ubuntu2404.deb
@@ -106 +106 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $ sudo zypper install ./nice-dcv-session-manager-agent-2025.0.886-1.sles12.x86_64.rpm
+                $ sudo zypper install ./nice-dcv-session-manager-agent-2025.0.888-1.sles12.x86_64.rpm
@@ -110 +110 @@ The following instructions are for installing the agent on 64-bit x86 hosts. To
-                $ sudo zypper install ./nice-dcv-session-manager-agent-2025.0.886-1.sles15.x86_64.rpm
+                $ sudo zypper install ./nice-dcv-session-manager-agent-2025.0.888-1.sles15.x86_64.rpm
@@ -144 +144 @@ Windows host
-  1. Download the [ agent installer](https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-x64-Release-2025.0-886.msi).
+  1. Download the [ agent installer](https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-x64-Release-2025.0-888.msi).
@@ -180,0 +181,44 @@ Alternatively, if you want to disable TLS verification, set `tls_strict` to `fal
+macOS host
+    
+
+###### To install the agent on a macOS host
+
+  1. Download the [ agent installer](https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-macos-arm64.pkg) or use the command line:
+    
+        $ curl -O https://d1uj6qtbmh3dt5.cloudfront.net/2025.0/SessionManagerAgents/nice-dcv-session-manager-agent-2025.0.888-macos-arm64.pkg
+
+  2. Install the package. You can use either the command line or via agent installer:
+
+     * Command line:
+        
+                $ sudo installer -pkg ./nice-dcv-session-manager-agent-2025.0.888-macos-arm64.pkg -target /
+
+     * Agent installer: Double-click the `.pkg` file and follow the installation wizard.
+
+  3. Place a copy of the broker's self-signed certificate (that you copied in the previous step) in the `/etc/dcv-session-manager-agent/` directory on the agent.
+
+  4. Open `/etc/dcv-session-manager-agent/agent.conf` using your preferred text editor and do the following.
+
+     * For `broker_host`, specify the DNS name of the host on which the broker is installed.
+
+###### Important
+
+If the broker is running on an Amazon EC2 instance, for `broker_host` you must specify the instance's private IPv4 address.
+
+     * (Optional) For `broker_port`, specify the port over which to communicate with the broker. By default the agent and the broker communicate over port `8445`. Only change this if you need to use a different port. If you do change it, ensure that the broker is configured to use the same port.
+
+     * For `ca_file`, specify the full path the certificate file that you copied in the previous step. For example: 
+        
+                ca_file = '/usr/local/etc/dcv-session-manager-agent/broker_cert.pem'
+
+Alternatively, if you want to disable TLS verification, set `tls_strict` to `false`.
+
+  5. Save and close the file.
+
+  6. Start the agent service.
+    
+        $ sudo launchctl load /Library/LaunchDaemons/com.amazon.dcv.session-manager.agent.plist
+
+
+
+