How to install the EPM Windows agent

This document provides information on how to install the EPM Windows agent on your workstation.

You can also install the EPM Windows agent via the command line, using the msiexec command. More information in How to install the EPM Windows client via CMD.

Requirements

• Dependencies and supported Windows versions. More information in EPM Windows agent requirements.
• Administrative permission on the user's workstation.
• If there is a need to use functions that are linked to the use of PAM credentials, it will be necessary to have a user registered on the Segura® Platform with the same username as the workstation.

Step 1: Get the installer

1. Access the support portal.
2. Log in to the site.
3. Find the version of the EPM Windows agent that is compatible with your version of the Segura® Platform.
4. In the Link column, click Download to download the installer.

Step 2: Install the agent

1. On Windows, go to the desktop.
2. Access File Explorer and locate the EPM Windows installer compressed folder.
3. Extract the installer to the desired location and run it.
4. Select the installer language (not available in the legacy version):
   1. Portuguese.
   2. English.
5. Click OK.
6. Click Next to continue.
7. Read the End User License Agreement ("EULA") carefully. If you agree, check the checkbox I accept the terms of the License Agreement and click Next.
8. Choose the installation type:
   1. Complete: this option installs all features: Core, Automation, and Vault.
   2. Custom: choose which features you want to install. The Core application is mandatory. More information about the features in About the EPM Windows Architecture.
9. Click Next.
10. In the window that requests approval, select Yes to proceed.
11. Click Finish.

Step 3: Ensure communication

After installation, it is necessary to relate the EPM Windows agent to your Segura® Platform server, using a bootstrap token and the IP (or domain, in cases where DNS is configured).

To obtain the required token to activate the EPM Windows agent, see the following steps:

1. On Segura® Platform, in the navigation bar, hover over the Products menu and select EPM.
2. In the side menu, select Management > Settings and click Parameters.
3. In the EPM menu, copy the token displayed in the Vault token field.

In the EPM application, enter the IP or domain in the Enter the backend address field and the token in the Enter the bootstrap token field when running EPM for the first time.

This setup is required exclusively during the initial access; once installed, the token is renewed automatically if any issues arise.

Step 4: Register EPM user on PAM Core

If you need a user to use resources that require their credentials to be redeemed in the Segura® Platform, it’s necessary to create this user on PAM Core. To do it, see the following steps:

1. On Segura® Platform, in the navigation bar, hover over the Products menu and select EPM.
2. In the side menu, select Management > Installation and click Users.
3. Select the user you want to enable the impersonation feature and click Actions > Create vault user.

More information about the fields for creating a user on PAM in How to manage users.

Next steps

• Workstation report.
• Users report.
• Access policies.