Installing the Access Manager Agent on Windows
Last updated
Was this helpful?
Last updated
Was this helpful?
In order to install the Access Manager Agent, the following prerequisites must be met
Windows 10 or Windows Server 2016 or later
4.7.2 or later installed for x86 and x64 versions of Windows
4.8.1 or later installed for arm64 versions of Windows
We recommend using a configuration management tool such as SCCM to deploy the agent to your fleet.
Active Directory-joined devices can use their machine identity to automatically authenticate to the AMS server.
Microsoft Entra-joined devices can use their Entra certificate to automatically authenticate to the AMS server.
Other devices must use a registration key, obtained from the AMS server to authenticate. These devices will create their own authentication certificate, and use the registration key a single time, to register their certificate with the server. Once this is successful, they will no longer need the registration key, and it will be deleted from the system.
Download the latest version of the agent from the page. Take note that you must install the x64 version on 64-bit machines, and the x86 version on 32-bit machines.
Run the agent installation package. When prompted, enter the server name, and choose the registration mode you'd like to use for the agent
If the hostname provided does not match exactly the External host name value configured on the , the agent will fail to connect to the server
You can install the MSI packages silently using the following command lines
Use the following command line to install the agent in Active Directory authentication mode
Use the following command line to install the agent in Microsoft Entra mode, replacing the SERVER value as appropriate
Use the following command line to install the agent in AMS registration mode, replacing the SERVER and REGISTRATIONKEY values are appropriate
On the Access Manager server, go to the Access Manager Agent/Devices page, and ensure that the devices you installed the agent on have appeared in the device list. If you configured your registration key to require manual approval, you must approve the devices before they can be accessed.
Basic logs entries can be viewed using the Windows Event Viewer, but more detailed log information can be found in %ProgramFiles%\Lithnet\Access Manager Agent\logs
If you need to change the agent configuration, you can do so at any time by running
If the agents are joined to an Active Directory domain, you can use to configure the server that agents should connect to.