Deploy the Imprivata Agent via MSI Push

When you distribute the Imprivata agent to multiple endpoint computers by using an MSI push, you need the MSI file for the agent.

NOTE:

Installing the Imprivata agent does not require an Internet connection. However, the endpoint computer must have an Internet connection for the Chrome browser to acquire the Imprivata OneSign extension from the Chrome Web store. Without it, Enterprise Access Management with SSO will not work for Chrome profiled applications.

An Internet connection is also required when any updates or upgrades are applied to the extension through the Chrome Web store. To confirm the Imprivata OneSign extension was installed, use the "Customize and control Google Chrome" tab to the right of the search bar. Click More tools > Extensions to view the Imprivata OneSign extension.

You can download the MSI file directly from Imprivata Admin Console: go to the Computers menu > Deploy agents option.

Each endpoint on which the Imprivata agent is installed needs an IPTXPrimServer value that tells the agent where to download Imprivata enterprise information when the agent first communicates with the Imprivata enterprise.

Also in the registry is the setting that controls the Imprivata agent behavior:

  • Type 1 — The Imprivata agent for single-user computers

  • Type 2 — The Imprivata agent for shared kiosk workstations

  • Type 3 — The Imprivata agent for Citrix or Terminal servers

IMPORTANT:

If your enterprise is only licensed for Imprivata Enterprise Access Management with MFA (formerly Imprivata Confirm ID), only the Single-User Computer agent (Type 1) is supported.

The IPTXPrimServer value and agent type are located at HKEY_LOCAL_MACHINE\SOFTWARE\SSOProvider\ISXAgent. The IPTXPrimServer value is formatted as https://<fully-qualified domain name>/sso/servlet/messagerouter