This document outlines how to install an agent using an installation script using a Shared Passphrase, Windows Authentication or Cloud-Based Installation.
Agent Installation File
The Agent installer file is called "STPlatformUpdater.exe" and can be found in the following location on your console machine:
Authentication Type Examples
You will need to configure the following scripts by replacing the default policy, authentication, console information, etc. with your own information. Also, if your agent policy name contains spaces, you'll need to substitute hyphens for the spaces for the script to correctly execute. It tends to be simpler to just edit your policy name in your console to eliminate the spaces, if possible.
Before running this script, enable passphrase verification for manual agent installations by going to Tools > Options > Agents and enabling the feature and creating your passphrase.
STPlatformUpdater.exe /wi:"/qn /l*v install.log SERVERURI=https://consolename:3121 POLICY=policyname AUTHENTICATIONTYPE=PASSPHRASE PASSPHRASE=secret"
STPlatformUpdater.exe /wi:"/qn /l*v install.log SERVERURI=https://consolename:3121 POLICY=policyname AUTHENTICATIONTYPE=WINDOWS SERVERUSERNAME=domainname\Your.Name PASSWORD=secret"
STPlatformUpdater.exe /wi:"/qn /l*v install.log ACTIVATIONKEY=12345abc-2abc-3abc-4abc-123456789abc"
- STPlatformUpdater.exe is a bootstrap installer for the agent platform installation
means pass this to Windows Installer
means no user interface activity from the installer
means write a log for the installation attempt. It has one parameter that
specifies the log file name
is the address, port, and scheme (e.g. https://) used to connect to the
console for registration and check-in
is the name of the agent policy that will be assigned to the agent
The policy name should be one word with no spaces.
is either PASSPHRASE or WINDOWS (this is dictated by the Tools >
Options > Agents dialog)
is the passphrase used to authenticate the agent to the console (used only
is the name of a user who has rights to install an agent (used only if
is the password used to authenticate the user to the console (used only if
- USECURRENTCREDENTIALS=1 can be used in place of SERVERUSERNAME and PASSWORD if
you want to authenticate using the credentials of the person who logged on
to run the script
is the activation key that was created using the Protect Cloud Service
In some cases, the script will require additional quotes, even when you don't have spaces in the policy name or passphrase/password.
- 3 quotes around the Policy
- 9 quotes before the password/passphrase
- 10 quotes after the password/passphrase
STPlatformUpdater.exe /wi:"/qn /l*v install.log SERVERURI=https://consolename:3121 POLICY="""policyname""" AUTHENTICATIONTYPE=WINDOWS SERVERUSERNAME=domainname\Your.Name PASSWORD="""""""""secret""""""""""
Ivanti Patch for Windows Servers 9.3.x
Shavlik Protect 9.2.x