Support

The Agent is installed via a single PowerShell command that downloads, configures, and starts it as a Windows Service automatically.

1. Open PowerShell as Administrator on your IIS server.
2. Run the following command:

The installer will prompt you for your subscription email address. Enter the email you used to purchase CyberSage and follow the on-screen steps.

Once complete, the Agent starts as a Windows Service named CyberSage Certificate Agent and the Configurator app opens automatically.

Run the install script on the new machine (see above). When prompted, enter the email address associated with your subscription — the Agent will activate automatically within a few seconds.

If activation fails, verify that:

• The email you entered matches the one used to purchase the subscription exactly.
• Your subscription is currently active (check your inbox for a cancellation notice if unsure).
• The server has outbound internet access to api.bytesled.com.
• You have not exceeded your maximum machine limit — each plan allows a set number of simultaneous activations.

CyberSage attempts renewal when a certificate is within 30 days of expiry. If renewal is not happening, work through this checklist:

1. Check the Agent logs — open the Configurator, go to the Certificates page, and review the renewal history. The log output will show the exact error from Let's Encrypt.
2. Confirm the Agent service is running — open Services (services.msc) and check that CyberSage Certificate Agent is Running.
3. Verify port 80 is accessible — Let's Encrypt uses HTTP-01 challenge validation over port 80. Ensure no firewall blocks inbound HTTP traffic to your server during renewal.
4. Check subscription status — renewals are paused if your subscription is inactive. You will have received an email notification if this is the case.
5. wacs.exe must be present — the simple-acme executable should be at C:\ProgramData\CyberSage\wacs\wacs.exe. The installer places it there; if it was accidentally removed, re-run the install script to restore it.

If the issue persists after working through the above, send us the log output via the contact form.

After purchasing a module, the Configurator needs to sync with the API to receive the updated entitlements. Do the following:

1. In the Configurator, navigate to any locked module page.
2. Click the I've Upgraded — Refresh button on the lock overlay.
3. The Configurator will restart the Agent service, which re-validates your subscription and pulls the updated module list. This takes a few seconds.

If the module is still locked after refreshing, wait 60 seconds and try again — there is a brief delay between payment confirmation and the API updating your account. If it remains locked after 5 minutes of purchasing, contact us with your subscription email and the module name.

Configuration changes made in the Configurator are written to the Agent's appsettings.json on disk. The Agent reads configuration on startup, so a service restart is required for changes to take effect.

Click Save & Restart Service whenever you:

• Enable or configure a module (Server Vitals, Database Utility, Cache Management).
• Change alert thresholds or DNS/endpoint monitoring settings.
• Add or modify cache routes.

The restart takes 2–3 seconds. The Agent resumes all background tasks automatically once it's back up.

The Server Vitals module checks CPU, memory, and disk usage every 60 seconds. An alert email is sent when a threshold is breached — and then suppressed for 60 minutes to avoid alert fatigue.

Default thresholds (configurable in the Configurator):

• CPU — alert when sustained above 85%
• Memory — alert when above 65% of total RAM
• Disk — alert when a drive is above 85% full

To adjust these, open the Configurator → Server Vitals → edit the threshold values → Save & Restart Service.

If you are receiving frequent alerts for a particular metric, it usually indicates a real resource pressure on the server. Investigate the IIS application pool, scheduled tasks, or log file growth as common culprits.

Use the Manage Subscription button in the CyberSage Configurator to open your Paddle billing portal, where you can update your payment method, view invoices, and cancel. If you need assistance, contact us at solutions@bytesled.com.

Cancellations take effect at the end of your current billing period. The Agent will continue operating until that date, after which automatic certificate renewals will stop.

Run the following in PowerShell as Administrator to stop and remove the Agent service and all its files:

The Agent's data files (logs, local database, configuration) are stored separately in C:\ProgramData\CyberSage. Remove that folder as well if you want a complete clean uninstall.

The Configurator can be deleted by removing its installation folder — it does not register itself in Programs & Features.