Installing protection agents in Windows
Last updated
Was this helpful?
Last updated
Was this helpful?
Download the agent that you need on the workload that you plan to protect. See .
Ensure that the machine is connected to the Internet.
Log on as an administrator and start the installer.
[Optional] Click Customize installation settings and make the appropriate changes if you want:
To change the components to install (for example, to disable the installation of Cyber Protection Monitor or the Command-Line Tool, or to install the Agent for Antimalware protection and URL filtering).
On Windows machines, the antimalware protection and URL filtering features require the installation of Agent for Antimalware protection and URL filtering. It will be installed automatically for protected workloads if the Antivirus & Antimalware protection or the URL filtering module is enabled in their protection plans.
To change the method of registering the workload in the Cyber Protection service. You can switch from Use service console (default) to Use credentials or Use registration token.
To change the installation path.
To change the user account under which the agent service will run. For details, refer to .
To verify or change the proxy server host name/IP address, port, and credentials. If a proxy server is enabled in Windows, it is detected and used automatically.
Click Install.
[Only when installing Agent for VMware] Specify the address and access credentials for the vCenter Server or stand-alone ESXi host whose virtual machines the agent will back up, and then click Done. We recommend using an account that has the Administrator role assigned. Otherwise, provide an account with the on the vCenter Server or ESXi.
[Only when installing on a domain controller] Specify the user account under which the agent service will run, and then click Done. For security reasons, the setup program does not automatically create new accounts on a domain controller.
The user account that you specify must be granted the Log on as a service right.
This account must have already been used on the domain controller, in order for its profile folder to be created on that machine.
For more information about installing the agent on a read-only domain controller, refer to .
If you kept the default registration method Use service console in step 3, wait until the registration screen appears, and then proceed to the next step. Otherwise, no more actions are required.
Do one of the following:
If you log in under a company administrator account, register workloads for your company:
Click Register workload.
In the opened browser window, sign in to the service console and review the registration details.
In the Register for account list, select the user account under which you want to register the workload.
Click Check code, and then click Confirm registration.
If you log in under a partner administrator account, register workloads for your customers:
Click Register workload.
In the opened browser window, sign in to the service console and review the registration details.
In the Register for account list, select the user account of your customer under which you want to register the workload.
Click Check code, and then click Confirm registration.
Click Show registration info. The setup program shows the registration link and the registration code. If you cannot complete the workload registration on the current machine, copy the registration link and code, and then follow the registration steps on a different machine. In this case, you will need to enter the registration code in the registration form. The registration code is valid for one hour.
Alternatively, you can access the registration form by clicking All devices > Add, scrolling down to Registration via code, and then clicking Register.
Do not quit the setup program until you confirm the registration. To initiate the registration again, you will have to restart the setup program and repeat the installation procedure.
As a result, the workload will be assigned to the account that was used to log in to the service console.
Register the workload manually by using the command line. For more information on how to do this, refer to Registering workloads manually.
[If the agent is registered under an account whose tenant is in the Enhanced security mode] Set the encryption password.