To assign tasks to Agents, check the Enable сlient agent option in the Axidian CertiFlow Configuration Wizard. 

Configure the following settings:

  1. To register agents in the system, set the Agent ID generation strategy for domain/non-domain computers:
    • Not set (default value)

    • Use machine GUID ('MachineGuid' of the workstation)

    • Generate new GUID (if several workstations share the same 'MachineGuid' value)
    • Use computer domain SID

    • Use computer SID (if an agent is used on a non-domain workstation)

      If you specify the Use machine GUID option, the agent ID receives 'MachineGuid' string value from the [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography] registry branch of the workstation.

      You can still change the agent ID generation strategy after you have completed the system configuration. Follow these steps:

      1. Stop the agentregistrationapi and agentserviceapi services on the CertiFlow server.
      2. Delete all client agents in the Agents section of the Management Console, or make a query to the system database to delete all registered agents and agent sessions.

      3. Apply your changes in the Configuration Wizard and distribute the modified agentregistrationapi configuration file to the CertiFlow server.

      4. Start the agentregistrationapi and agentserviceapi services.

  2. Check the Automatic agent registration option to register agents without confirmation from the administrator.

    Install an agent on a workstation and check the Automatic agent registration option. This agent is now listed as Registered in Agents section of the Management Console.

  3. Upload agent's root certificate with private key in JSON format (agent_root_ca.json).
  4. Select the level of agent's event log:
    • All
    • Errors only
    • Warnings and Errors only
  5. Set Frequency of receiving data from server (sec) and Interval of repeated performance of task canceled by user (sec) values.
  6. Change the HTTP request header name of agent certificate if you use a load balancer. Check Pass only certificate's Subject value in the HTTP request headers option to send only certificate's Subject value, rather than the full agent's certificate.
  7. Go to Results and Apply changes.


  • No labels