Distributing the Imprivata Agent from the Command Line

The following properties can be used when distributing the Imprivata agent from the command line:

Property

Value
IPTXPRIMSERVER

Points the agent to a specific Imprivata appliance for initial boot. There is no default value.

https://<fully-qualified domain name>/sso/servlet/messagerouter

IPTXALTSERVERS

Points the agent to a semicolon-delimited series of alternative Imprivata appliances for initial start if PrimServ is unavailable. This is seldom necessary.

https://<host|IP2>/sso/servlet/messagerouter; https://<host|IP3>/sso/servlet/messagerouter; https://<host|IP4>/sso/servlet/messagerouter

No default value. Should be appliances in the same site as the agent’s computer.

AGENTTYPE

Selects the agent type to install. Possible values (default value is 1, the single-user agent):

  • 0 = test agent;

  • 1 = single-user computer agent;

  • 2 = shared kiosk agent;

  • 3 = Citrix or Terminal Server agent.

Agent type = 0 by default if installation is performed in full UI mode.

IMPORTANT:

If your enterprise is only licensed for Imprivata Enterprise Access Management with MFA (formerly Imprivata Confirm ID), only the Single-User Computer agent (Type 1) is supported.

AGENT_LAUNCH_TYPE

Defines if and how agent is started. Default (undefined): SSOManHost service starts agent.
Possible values: WINDOWS (Windows starts agent) or SKIP (agent is not started)

INSTALLDIR

Target folder for agent installation: <full folder path>

Default value: <ProgramFiles>\Imprivata\OneSign Agent

The specified drive must exist, but the folder does not have to exist.

INSTALL_SSLVALIDATION Require valid SSL certificate. A valid certificate is required for e-prescribing controlled substances. Possible values: TRUE or FALSE. Default value: FALSE

INSTALL_AUTHENTEC

Install AuthenTec SDK and driver. Possible Values: TRUE or FALSE.
Default value is FALSE unless AuthenTec device is detected.

INSTALL_UPEKDRIVER

Install driver for the UPEK scanner. Possible values: TRUE or FALSE. Default value: TRUE
INSTALL_JAVA_
SSO		 Install Java SSO components (Java Access Bridge and JavaHook). Possible Values: TRUE or FALSE.
Default value is TRUE.

MIGRATE_SETTINGS

Migrate Imprivata agent settings (offline data and registry) during upgrade. Values: TRUE or FALSE. Default value is TRUE. Credential Provider settings are always preserved. The agent downloads settings from the appliance when it comes online.

IGNORE_MIGRATE_
ERROR

If there is an error related to migration of settings, continue the upgrade without migration. Possible values: TRUE or FALSE. Default value: FALSE

TRANSFORMS

Use a transform to select the language of the MSI InstallShield Wizard..
The number corresponds to the language of the .mst file: <full path to .mst file>

  • 32—bit Agent https://<appliance>/sso/transforms/<value>.mst

  • 64—bit Agent https://<appliance>/sso/transforms/x64/<value>.mst

Possible values:

  • 1025 = Arabic (Saudi Arabia)

  • 1030 = Danish

  • 1031 = German

  • 1033 = US English (default)

  • 1034 = Spanish

  • 1035 = Finnish

  • 1036 = French

  • 1040 = Italian

  • 1043 = Dutch

  • 1046 = Brazilian Portuguese

  • 1053 = Swedish
DISABLE_CREDPROV_WRAP Set to TRUE to prevent Imprivata from wrapping credential providers. Possible values: TRUE or FALSE.

Example

Install an English-language 32-bit Single-User Agent, Verbose Logging, Basic UI, and No Restart

Copy 
msiexec.exe /i "<path_to>\OneSignAgent.msi" IPTXPRIMSERVER="https://hq.primavita.eng/sso/servlet/messagerouter" /l*v c:\ISXAgent.log /qb /norestart

NOTE: AGENTTYPE and TRANSFORMS not needed because they use the default values.

Example

Install an Italian-Language 64-bit Kiosk Agent with Verbose Logging, No UI, and No Restart

Copy 
msiexec.exe /i "<path_to>\OneSignAgentx64.msi" IPTXPRIMSERVER="https://hq.primavita.eng/sso/servlet/messagerouter" AGENTTYPE=2 TRANSFORMS="<path_to>\1040.mst" /l*v c:\ISXAgent.log /qn /norestart

For standard msiexec options, you may want to run "msiexec /?" on the target OS (these can vary by Windows Installer version). If that is not an option, you can find good references by searching for command-line switches for the Microsoft Windows Installer Tool at at http://msdn2.microsoft.com.