---
title: "Install the EPM Windows agent"
slug: "how-to-install-go-windows-agent"
updated: 2026-09-25T13:48:44Z
published: 2026-09-25T13:48:44Z
canonical: "docs.senhasegura.io/how-to-install-go-windows-agent"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Install the EPM Windows agent

Install the EPM Windows agent on your workstation. You can also install the EPM Windows agent via the command line, using the `msiexec` command. More information in the [Install the EPM Windows client via CMD](/v4-2/docs/epm-windows-cmd-installation).

## Requirements

- Dependencies and supported Windows versions. More information in [EPM Windows agent requirements](/v4-2/docs/epm-windows-requirements#dependencies).
- Your Segura® application must be running a version compatible with the agent. See [EPM Windows agent requirements](/v4-2/docs/epm-windows-requirements#dependencies) for the minimum supported version.
- Administrative permission on the user's workstation.
- If you use functions linked to [PAM credentials](/v4-2/docs/credential-management), register a user on the Segura® Platform with the same username as the workstation.

## Step 1: Get the installer

Alert

Update the agent after every Segura® Platform update to keep both on the same version.

1. Access the [support portal](https://segura.center).
2. Log in to the site.
3. Find the version of the EPM Windows agent that is compatible with your version of the Segura® Platform.
4. In the **Link** column, click **Download** to download the installer.

## Step 2: Install and register the agent

1. On Windows, go to the desktop.
2. Access **File Explorer** and locate the EPM Windows installer compressed folder.
3. Extract the installer to the desired location and run it.
4. Select the installer language (not available in the legacy version):
  1. Portuguese.
  2. English.
5. Click **OK**.
6. Click **Next** to continue.
7. Read the **End User License Agreement ("EULA")** carefully. If you agree, check the checkbox **I accept the terms of the License Agreement** and click **Next**.
8. Choose the installation type:
  1. **Complete**: this option installs all features: **Core**, **Automation**, and **Vault**.
  2. **Custom**: choose which features you want to install. The **Core** application is mandatory. More information about the features in [About the EPM Windows Architecture](/v4-2/docs/go-endpoint-manager-windows-architecture-1).
9. Click **Next**.
10. Enter the IP or domain of your Segura® Platform server in the **Enter the backend address** field, and the bootstrap token in the **Enter the bootstrap token** field.  

To obtain the bootstrap token:

Alert

If there is a balancer, you need to ensure that the DNS resolves to the correct IP.
  1. On Segura® Platform, in the navigation bar, hover over the **Products menu** and select **EPM**.
  2. From the side menu, go to **Management > Settings > Parameters**.
  3. In the **EPM** menu, copy the token displayed in the **Vault token** field.
11. Click **Next**. The installer checks that the agent version is compatible with your Segura® Platform version before continuing:
  - If the versions are compatible, the installation continues normally.
  - If your Segura® Platform requires a newer agent version than the one you are installing, the installer blocks the installation and does not modify any files. The installer also logs the event to the Windows Event Viewer. Install a compatible agent version and try again.
12. In the window that requests approval, select **Yes** to proceed.
13. Click **Finish**.

This compatibility check runs during installation and during a manual update. It does not run when the agent updates itself automatically: an auto-updated agent does not verify compatibility with your Segura® Platform version.

## Step 3: Register EPM user on PAM Core

Create this user on PAM Core if it needs to redeem credentials in the Segura® Platform.

1. On Segura® Platform, in the navigation bar, hover over the **Products menu** and select **EPM**.
2. From the side menu, go to **Management > Installation > Users**.
3. Select the user you want to enable the impersonation feature and click **Actions > Create vault user**, entering a username identical to the Windows username. **EPM Vault** and **EPM Automation** require the match to work properly.

More information about the fields for creating a user on PAM in [How to manage users](/v4-2/docs/how-to-manage-users).

## Related topics

- [Devices report screen](/v4-2/docs/go-endpoint-manager-workstations).
- [Users report screen](/v4-2/docs/go-endpoint-manager-users).
- [Reference for access policies](/v4-2/docs/epm-windows-access-policies).