The client part of Agent is installed onto user workstations. The parameters required to connect to Indeed CM server are configured during installation via Group Policy or Windows registry.
To obtain the Indeed CM Agent installation package, please contact the Indeed Identity technical support. |
Run the IndeedCM.Agent.msi from Indeed CM installation package and complete the procedure, following the Wizard instructions. The Agent starts up automatically after installation.
To add an Indeed CM administrative template (ADMX), proceed as follows:
Copy the contents of IndeedCM.Client\Misc\PolicyDefinitions folder to the central ADMX file storage of domain controller C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.
When using local ADMX file storage, the Indeed CM templates are to be placed to C:\Windows\PolicyDefinitions folder. |
Create a new group policy object in the console tree or select an existing one.
Specify the path to the agentserviceapi application in the Agent service URL parameter.
Agent registration service URL: https://srv.demo.local:3003/agentregistrationapi/ |
Policies are updated when the workstation is rebooted with the client agent installed. To force Group Policy updates without rebooting, run the gpupdate /force command. |
Configure additional policies that define the work of Agents, if required:
This policy defines:
This policy defines the period in minutes during which the agent will try to send events from the cache to the Indeed CM Server (default: 10 min.) and number of events sent to the server per one request (default: 500 events).
The policy defines the proxy server settings for connection to Indeed CM server.
If the policy is not defined or is disabled, then proxy server will not be used.
Set proxy server address in "Proxy server" field.
This policy defines events level for Indeed CM Server Event Log:
This policy defines:
This policy defines smart card status update (default: 30 sec.):
Create a registry file (.reg) file with the following contents:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IndeedCM\Agent] "AgentRegistrationServiceUrl"="" "AgentServiceUrl"="" "ProxyEnable"="" "ProxyServer"="" |
For 32-bit systems, the parameter branch is: [HKEY_LOCAL_MACHINE\SOFTWARE\IndeedCM\Agent] |
The AgentRegistrationServiceUrl parameter specifies a link and port to connect to agentregistrationapi application.
The AgentServiceUrl parameter specifies a web-address and port to connect to agentserviceapi application.
If a proxy is used on workstations where the client agent is installed, specify the ProxyEnable and ProxyServer parameters (proxy server URL).
Possible parameter values:
Here is an example of .reg file to connect to Indeed CM server named srv.demo.local via https protocol and 3003 port using the proxy server https://192.168.10.10:443.
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IndeedCM\Agent] "AgentRegistrationServiceUrl"="https://srv.demo.local:3003/agentregistrationapi/" "AgentServiceUrl"="https://srv.demo.local:3003/agentserviceapi/" "ProxyEnable"="1" "ProxyServer"="https://192.168.10.10:443" |
Distribute the registry file and make changes to user workstations’ settings. For the changes to take effect, restart the workstation with Indeed CM Agent installed or restart Indeed CM Agent Service service. |