Distributing the Imprivata Agent from the Command Line

Running the Imprivata agent installer from the command line requires elevated (administrator) priviliges.

The following properties can be used when distributing the Imprivata agent from the command line:

Property

Value
IPTXPRIMSERVER

Points the agent to a specific Imprivata appliance for initial boot. There is no default value.

https://<fully-qualified domain name>/sso/servlet/messagerouter

IPTXALTSERVERS

Points the agent to a semicolon-delimited series of alternative Imprivata appliances for initial start if PrimServ is unavailable. This is seldom necessary.

https://<host|IP2>/sso/servlet/messagerouter; https://<host|IP3>/sso/servlet/messagerouter; https://<host|IP4>/sso/servlet/messagerouter

No default value. Should be appliances in the same site as the agent’s computer.

AGENTTYPE

Selects the agent type to install. Possible values (default value is 1, the single-user agent):

  • 0 = test agent;

  • 1 = single-user computer agent;

  • 2 = shared kiosk agent;

  • 3 = Citrix or Terminal Server agent.

Agent type = 0 by default if installation is performed in full UI mode.

IMPORTANT:

If your enterprise is only licensed for Imprivata Enterprise Access Management with MFA (formerly Imprivata Confirm ID), only the Single-User Computer agent (Type 1) is supported.

AGENT_LAUNCH_TYPE

Defines if and how agent is started. Default (undefined): SSOManHost service starts agent.
Possible values: WINDOWS (Windows starts agent) or SKIP (agent is not started)

INSTALLDIR

Target folder for agent installation: <full folder path>

Default value: <ProgramFiles>\Imprivata\OneSign Agent

The specified drive must exist, but the folder does not have to exist.

INSTALL_SSLVALIDATION Require valid SSL certificate. A valid certificate is required for e-prescribing controlled substances. Possible values: TRUE or FALSE. Default value: FALSE

INSTALL_AUTHENTEC

Install AuthenTec SDK and driver. Possible Values: TRUE or FALSE.
Default value is FALSE unless AuthenTec device is detected.

INSTALL_UPEKDRIVER

Install driver for the UPEK scanner. Possible values: TRUE or FALSE. Default value: TRUE
INSTALL_JAVA_
SSO		 Install Java SSO components (Java Access Bridge and JavaHook). Possible Values: TRUE or FALSE.
Default value is TRUE.

MIGRATE_SETTINGS

Migrate Imprivata agent settings (offline data and registry) during upgrade. Values: TRUE or FALSE. Default value is TRUE. Credential Provider settings are always preserved. The agent downloads settings from the appliance when it comes online.

IGNORE_MIGRATE_
ERROR

If there is an error related to migration of settings, continue the upgrade without migration. Possible values: TRUE or FALSE. Default value: FALSE

TRANSFORMS

Use a transform to select the language of the MSI InstallShield Wizard..
The number corresponds to the language of the .mst file: <full path to .mst file>

  • https://<appliance>/sso/transforms/x64/<value>.mst

Possible values:

  • 1025 = Arabic (Saudi Arabia)

  • 1029 = Czech

  • 1030 = Danish

  • 1031 = German

  • 1033 = US English (default)

  • 1034 = Spanish

  • 1035 = Finnish

  • 1036 = French

  • 1040 = Italian

  • 1043 = Dutch

  • 1046 = Brazilian Portuguese

  • 1053 = Swedish
DISABLE_CREDPROV_WRAP Set to TRUE to prevent Imprivata from wrapping credential providers. Possible values: TRUE or FALSE.

Example

Install an English-language Single-User Agent, Verbose Logging, Basic UI, and No Restart

Copy 
msiexec.exe /i "<path_to>\ImprivataAgent_x64.msi" IPTXPRIMSERVER="https://hq.primavita.eng/sso/servlet/messagerouter" /l*v c:\ISXAgent.log /qb /norestart

NOTE: AGENTTYPE and TRANSFORMS not needed because they use the default values.

Example

Install an Italian-Language Kiosk Agent with Verbose Logging, No UI, and No Restart

Copy 
msiexec.exe /i "<path_to>\ImprivataAgent_x64.msi" IPTXPRIMSERVER="https://hq.primavita.eng/sso/servlet/messagerouter" AGENTTYPE=2 TRANSFORMS="<path_to>\1040.mst" /l*v c:\ISXAgent.log /qn /norestart

For standard msiexec options, you may want to run "msiexec /?" on the target OS (these can vary by Windows Installer version). If that is not an option, you can find good references by searching for command-line switches for the Microsoft Windows Installer Tool at at http://msdn2.microsoft.com.