Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
The client part of Agent is installed onto user workstations. The parameters required to connect to Indeed CM server are configured during installation via Group Policy or Windows registry.
Info |
---|
To obtain the Indeed CM Agent installation package, please contact the Indeed Identity technical support. |
Run the IndeedCM.Agent.msi from Indeed CM installation package and complete the procedure, following the Wizard instructions. The Agent starts up automatically after installation.
Setting up the Agent parameters via Group Policy
To add an Indeed CM administrative template (ADMX), proceed as follows:
Copy the contents of IndeedCM.Client\Misc\ folder to the central ADMX file storage of domain controller C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.
Info When using local ADMX file storage, the Indeed CM templates are to be placed to C:\Windows\PolicyDefinitions folder.
- Open the Group Policy Management console.
Create a new group policy object in the console tree or select an existing one.
- Open the context menu and select the Edit item.
- In the opened Group Policy Management Editor select Computer Configuration > Policies > Administrative Templates > Indeed CM > Agent.
Scroll Pagebreak - Enable the Agent's URL Settings policy and specify its values:
- Specify the path to the agentregistrationapi application, located at the Indeed CM server, in the Agent registration service URL parameter.
Specify the path to the agentserviceapi application in the Agent service URL parameter.
Info icon false title For example: Agent registration service URL: https://srv.demo.local:3003/agentregistrationapi/
Agent service URL: https://srv.demo.local:3003/agentserviceapi/
- Link this policy object to a group, where Indeed CM user workstations reside.
- Click Apply and perform policy update.
Note |
---|
Policies are updated when the workstation is rebooted with the client agent installed. To force Group Policy updates without rebooting, run the gpupdate /force command. |
Configure additional policies that define the work of Agents, if required:
Agent's timeouts settings
This policy defines:
- Timeout of requests to agent services (default: 30 sec.)
- Frequency of agent status update request (default: 300 sec.)
Scroll Pagebreak - Frequency of agent settings, bindings, tasks and sessions update request (default: 30 sec.)
- Timeout request to disconnect the agent from the server (default: 3 sec.)
Events caching settings
This policy defines the period in minutes during which the agent will try to send events from the cache to the Indeed CM Server (default: 10 min.) and number of events sent to the server per one request (default: 500 events).
Proxy server settings
The policy defines the proxy server settings for connection to Indeed CM server.
If the policy is not defined or is disabled, then proxy server will not be used.
Set proxy server address in "Proxy server" field.
Event log settings
This policy defines events level for Indeed CM Server Event Log:
- All (default)
- Errors only
- Warnings and errors only
Tasks caching settings
This policy defines:
- Frequency of updating the task cache and sending the task execution status to the server if sending failed for the first time (default: 60 sec)
- Timeout at which the tasks will be removed from the cache during the next cache update (default: 300 sec.)
- Timeout after which it will be possible to rerun the task canceled by the user (default: 60 sec.)
Smart card status update settings
This policy defines smart card status update (default: 30 sec.):
- Lock user\administrator PIN
- User\administrator PIN input retries
Setting up the Agent parameters via Registry
Create a registry file (.reg) file with the following contents:
Code Block | ||
---|---|---|
| ||
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IndeedCM\Agent] "AgentRegistrationServiceUrl"="" "AgentServiceUrl"="" "ProxyEnable"="" "ProxyServer"="" |
Tip |
---|
For 32-bit systems, the parameter branch is: [HKEY_LOCAL_MACHINE\SOFTWARE\IndeedCM\Agent] |
The AgentRegistrationServiceUrl parameter specifies a link and port to connect to agentregistrationapi application.
The AgentServiceUrl parameter specifies a web-address and port to connect to agentserviceapi application.
If a proxy is used on workstations where the client agent is installed, specify the ProxyEnable and ProxyServer parameters (proxy server URL).
Scroll Pagebreak |
---|
Possible parameter values:
- ProxyEnable = "0": proxy is not used
- ProxyEnable = "1" и ProxyServer = "": default proxy settings are used
- ProxyEnable = "1" и ProxyServer = "<some url>": the proxy server specified in the setting is used
Here is an example of .reg file to connect to Indeed CM server named srv.demo.local via https protocol and 3003 port using the proxy server https://192.168.10.10:443.
Code Block | ||||
---|---|---|---|---|
| ||||
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IndeedCM\Agent] "AgentRegistrationServiceUrl"="https://srv.demo.local:3003/agentregistrationapi/" "AgentServiceUrl"="https://srv.demo.local:3003/agentserviceapi/" "ProxyEnable"="1" "ProxyServer"="https://192.168.10.10:443" |
Warning |
---|
Distribute the registry file and make changes to user workstations’ settings. For the changes to take effect, restart the workstation with Indeed CM Agent installed or restart Indeed CM Agent Service service. |