Installation of the login agent on Windows (GINA), macOS, or Linux
To protect machines with MFA and to let users reset passwords from their Windows, macOS, or Linux login screens, admins have to deploy the login agent on the users’ machines.
The different platforms supported by the login agent are listed below.
|Windows Server 2022
||macOS 14 Sonoma
|Windows Server 2019
||macOS 13 Ventura
||Fedora - 27.x-31.x
|Windows Server 2016
||macOS 12 Monterey
||CentOS - 7.X
|Windows Server 2012 R2
||macOS 11 Big Sur
|Windows Server 2012
||macOS 10.13 High Sierra
|Windows Server 2008 R2
||macOS 10.12 Sierra
|Windows Server 2008
||OS X 10.11 El Capitan
||OS X 10.10 Yosemite
HTTPS needs to be enabled in the Access URL to install the login agent on remote machines. Learn how to enable HTTPS in ADSelfService Plus.
While the ADSelfService Plus login agent has been officially tested to be compliant with the three Linux distributions mentioned, it may support other Linux distributions as well. Please contact the support team (firstname.lastname@example.org) to check if the Linux distribution used in your organization is supported.
Different methods to deploy the Login Agent
The login agent can be deployed on users' machines in one of the following ways:
A. From the ADSelfService Plus admin console
The ADSelfService Plus admin portal is a simple and effective way to install the login agent on Windows, macOS and Linux machines.
- In the ADSelfService Plus web portal, go to Configuration > Administrative Tools > GINA/Mac/Linux (Ctrl+Alt+Del) > GINA/Mac/Linux installation.
- Click New Installation.
- Select a domain and then the computers on which you want to install the login agent.
- Click Install.
Note: ADSelfService Plus now supports three different methods of Windows login agent installation to enhance the success rate. The three methods are:
When Remcom fails, PAExec is tried, and if that fails, WMI is implemented.
Click here for detailed information on installing and customizing the Login Agent through the ADSelfService Plus Admin Portal.
The Login Agent Installation Key
- Please treat the Installation Key like a password. It is sensitive information and must not be shared. Please regenerate a new Installation Key using the link in the product GUI if the current Installation Key is compromised.
- If a new Installation Key is regenerated, copy the command with the new Installation Key from the product admin portal and update the Installation Command field with the new command for all new installations done via GPO, SCCM, Endpoint Central or other third-party installation applications.
- The generation of a new Installation Key will not affect the existing installations of the Login Agent on installed machines.
B. Manual installation
1. Using the Installation Wizard
Manual agent installation on Windows/macOS/Linux clients using the installer package
- From the ADSelfService Plus admin portal, navigate to Configuration → Administrative Tools → GINA/Mac/Linux (Ctrl+Alt+Del).
- Click Manual Installation Steps (GINA/MAC/Linux) to open the Manual Installation Steps pop-up.
To install the Login Agent on Windows, macOS, and Linux machines, follow the steps given under the respective tabs.
2. Using the Command Line Interface (CLI)
a. Login Agent CLI installation on Windows machines
When the login agent is installed manually using the MSI package on computers running Windows Vista and later operating systems with User Account Control (UAC) enabled, it may not function properly. In such cases, you can install the Windows login agent manually through the Command Prompt, as shown here.
b. Login Agent CLI installation on macOS machines
- Copy the installer file (32-bit machines: ADSSPLinuxClient.tar.gz; 64-bit machines: ADSSPLinuxClient64.tar.gz) and the script file (Script file: installLinuxAgent.sh), both of which can be found in the product <Installation_Directory>/bin folder, and paste them onto the target macOS client on which the login agent is to be installed.
- Copy the macOS CLI command from the ADSelfService Plus admin portal. Go to Configuration > Administrative Tools > GINA/MAC/LINUX (Ctrl + Alt + Del) > Installation Help Guide > macOS Login Agent CLI installation > View Command to find it. It is shown in the pop-up that appears on clicking View Command.
Note: Use the macOS CLI command when you are silently installing the Login Agent via the terminal or via any 3rd party endpoint management tools like Endpoint Central.
c. Linux Login Agent Installation
- Copy the installLinuxAgent.sh and ADSSPLinuxClient.tar.gz files from the product <Installation_Directory>/bin folder and paste them onto the target Linux machine on which the login agent is to be installed.
- Copy the Linux CLI command from the ADSelfService Plus admin portal. Go to Configuration > Administrative Tools > GINA/MAC/LINUX (Ctrl + Alt + Del) > Installation Help Guide > Linux Login Agent CLI installation > View Command to find it. It is shown in the pop-up that appears on clicking View Command.
- Open the Terminal on the Linux machine and navigate to the directory that the installer package was copied to. Paste and execute the command.
C. Via GPO
Follow the steps in this Login Agent installation guide to install the GINA Login Agent on Windows machines, using GPO.
D. Via SCCM
Follow the steps in this Login Agent installation guide to install the GINA Login Agent using SCCM.
E. Via Endpoint Central
Follow the steps in this Login Agent installation guide to install the Login Agent using Endpoint Central.
Note: The installation of the login agent via GPO and SCCM deployment methods is only applicable on Windows.
Your request has been submitted to the ADSelfService Plus technical support team. Our technical support people will assist you at the earliest.
Need technical assistance?
Enter your email ID
Talk to experts
Don't see what you're looking for?
Visit our community
Post your questions in the forum.
Request additional resources
Send us your requirements.
Need implementation assistance?