Pour installer un agent PM4W BeyondTrust dans un master VDI (ou autre), il faut supprimer l'identifiant d'installation de l'adapteur BI et arrêter le service adapter.
Réponse du support :
For BI PMfW clients, you can stop the BI adapter service and then just delete the "BeyondInsightInstallIdentifier" entry from the registry. The BI adapter service will generate a new one when the agent next starts.
In a VDI environment or when you installed PMfW to an image that will be reused to create many individual computers, you would ideally create the “Golden” or base image in the following state:
- The Defendpoint BeyondInsight Adapter service in the stopped state
- The BeyondInsightInstallIdentifier entry is NOT present in the registry
- Your BeyondInsight client certificate installed in the machines personal store
- The client certificate’s issuer CA certificate is installed in the Trusted Root store.
The name of the registry entry that contains the install ID for a BeyondInsight client is:
BeyondInsightInstallIdentifier
The BeyondInsightInstallIdentifier registry entry is located at:
HKEY_LOCAL_MACHINE\SOFTWARE\Avecto\Privilege Guard Client
>>>>>>>>>>>>>>>>>>>>>>>
En résumé, avant de créer le master VDI il faut :
- Arrêter le service « Defendpoint BeyondInsight Adapter » (mais le laisser en auto pour le prochain démarrage)
- Bien avoir déployer les certificats préalables (eEyeCertClient)
- Supprimer la clé BeyondInsightInstallIdentifier qui se trouve dans HKEY_LOCAL_MACHINE\SOFTWARE\Avecto\Privilege Guard Client BYT / Matmut / Installation client PM4W dans un master VDI