Deploying the Imprivata Agent to Individual Users for Self-Installation

You can have some users install the Imprivata agent themselves. In the Imprivata Admin Console, go to the Computers menu > Deploy agents option.

IMPORTANT:

When installing the Imprivata agent, an Internet connection is not needed. However, the endpoint computer must have an Internet connection for the Chrome browser to acquire the Imprivata OneSign extension from the Chrome Web store. Without it, Imprivata OneSign will not work for Chrome profiled applications. Also, an Internet connection will be necessary when any updates or upgrades are applied to the extension through the Chrome Web store. To confirm the Imprivata OneSign extension was installed, use the "Customize and control Google Chrome" tab to the right of the search bar. Click More tools > Extensions to view the Imprivata OneSign extension.

IMPORTANT:

If your enterprise is only licensed for Imprivata Enterprise Access Management with MFA (formerly Imprivata Confirm ID), only the Single-User Computer agent (Type 1) is supported.

Installation of the Imprivata agent requires Administrator privileges on the target computer. Imprivata includes an Imprivata agent Installer Account feature that lets you allow users to install or update the Imprivata agent on their own computers even if they lack Administrator privileges on them. To accomplish this, Imprivata securely stores credentials for an administrative account with the appropriate privileges on the Imprivata server. The Imprivata agent installer accesses the privileges as needed.

To enable the Imprivata agent Installer Account:

  1. In the Imprivata Admin Console, go to the Computers menu > Deploy agents option.

  2. In the Self-install procedure section > Step 1, click the here link to enter an Administrator username, password, and domain. This account will be used to install and upgrade the Imprivata agent on all computers, so it must have privileges to copy files and write to the registry on target computers.

  3. Click OK.

Users who will self-install the Imprivata agent need to know the location from which to download the agent.

To notify users:

  1. In the Self-install procedure section > Step 2, click notification message; see Notifying Users.

  2. Click users list and select the users to be notified.

  3. Click the Notify button.

  4. Select the agent type for the user. Imprivata confirms that you want to send the notification email.

  5. Imprivata generates and sends the edited notification email to all selected users. Each user’s User Status immediately changes to Notified on the Users page. As each user installs the Imprivata agent, restarts the workstation, and logs in, their User Status then changes to Enrolled.

BEST PRACTICE: The Imprivata appliance can service many simultaneous downloads before performance begins to degrade. Notify no more than a few hundred users at a time. In the users list you can view how many users have enrolled, and can then notify additional users in turn.

Self-installation works best for experienced users. It is an easy way to roll out Imprivata software to your early adopter group.

To notify users for self-install, edit and send a notification email from the Imprivata Admin Console (see Setting the Mail Server and Standard Messages). The notification email tells the user what to expect, and includes a link to the desired agent.

To self-install the Imprivata agent:

  1. Open the Imprivata New User Welcome page by clicking on the link in the notification email.

  2. The File Download window opens.
  3. The Imprivata Installer starts. It checks for user rights and prompts for user credentials if the user does not have the appropriate rights on the computer. Then it downloads and starts the Imprivata Installer package.

  4. Click Open to run the InstallShield Wizard, and complete the wizard by entering appliance details and agent type.

  5. On the Installation Options page, you must enter a fully-qualified domain name in the Appliance DNS field.

    After the computer has restarted and a user authenticates:

    • The Imprivata icon appears in the Windows Notification area.

    • The computer is listed in the computers list on the Computers page.