Install the EPM Windows agent

Install the EPM Windows agent on your workstation. You can also install the EPM Windows agent via the command line, using the msiexec command. More information in the Install the EPM Windows client via CMD.

Requirements

• Dependencies and supported Windows versions. More information in EPM Windows agent requirements.
• Your Segura® application must be running a version compatible with the agent. See EPM Windows agent requirements for the minimum supported version.
• Administrative permission on the user's workstation.
• If you use functions linked to PAM credentials, register a user on the Segura® Platform with the same username as the workstation.

Step 1: Get the installer

1. Access the support portal.
2. Log in to the site.
3. Find the version of the EPM Windows agent that is compatible with your version of the Segura® Platform.
4. In the Link column, click Download to download the installer.

Step 2: Install and register the agent

1. On Windows, go to the desktop.
2. Access File Explorer and locate the EPM Windows installer compressed folder.
3. Extract the installer to the desired location and run it.
4. Select the installer language (not available in the legacy version):
   1. Portuguese.
   2. English.
5. Click OK.
6. Click Next to continue.
7. Read the End User License Agreement ("EULA") carefully. If you agree, check the checkbox I accept the terms of the License Agreement and click Next.
8. Choose the installation type:
   1. Complete: this option installs all features: Core, Automation, and Vault.
   2. Custom: choose which features you want to install. The Core application is mandatory. More information about the features in About the EPM Windows Architecture.
9. Click Next.
10. Enter the IP or domain of your Segura® Platform server in the Enter the backend address field, and the bootstrap token in the Enter the bootstrap token field.
    To obtain the bootstrap token:
    1. On Segura® Platform, in the navigation bar, hover over the Products menu and select EPM.
    2. From the side menu, go to Management > Settings > Parameters.
    3. In the EPM menu, copy the token displayed in the Vault token field.
    Alert

    If there is a balancer, you need to ensure that the DNS resolves to the correct IP.

11. Click Next. The installer checks that the agent version is compatible with your Segura® Platform version before continuing:
    • If the versions are compatible, the installation continues normally.
    • If your Segura® Platform requires a newer agent version than the one you are installing, the installer blocks the installation and does not modify any files. The installer also logs the event to the Windows Event Viewer. Install a compatible agent version and try again.
12. In the window that requests approval, select Yes to proceed.
13. Click Finish.

This compatibility check runs during installation and during a manual update. It does not run when the agent updates itself automatically: an auto-updated agent does not verify compatibility with your Segura® Platform version.

Step 3: Register EPM user on PAM Core

Create this user on PAM Core if it needs to redeem credentials in the Segura® Platform.

1. On Segura® Platform, in the navigation bar, hover over the Products menu and select EPM.
2. From the side menu, go to Management > Installation > Users.
3. Select the user you want to enable the impersonation feature and click Actions > Create vault user, entering a username identical to the Windows username. EPM Vault and EPM Automation require the match to work properly.

More information about the fields for creating a user on PAM in How to manage users.

Related topics

• Devices report screen.
• Users report screen.
• Reference for access policies.