How to install WithSecure Client Security on a Windows computer?

Issue:

What are the steps to install WithSecure Client Security on a Windows computer?

Resolution:

Note: For the Client Security deployment, you need a Policy Manager Server to manage the clients.

Before you proceed with the installation, you need to configure the Policy Manager Server address and the ports in the policy:

1. Log in to the Policy Manager Console
2. Select a policy domain from the domain tree
   1. Note: if you only have Root: Right-click root and click New policy domain
3. Go to the Settings tab
4. Navigate to the Windows > Centralized management page
5. In the Policy Manager Server host communication settings, you need to configure the address and ports the clients will try to connect to after installation
6. Distribute the policy (Ctrl + D)

Download the installation package (.jar) file from WithSecure website here. After you have downloaded the .Jar file, it needs to be imported to the Policy Manager Server so that you can export a fully configured installation file.

1. Log in to the Policy Manager Console
2. Navigate to the Installation tab, then click on Installation Packages and click Import
3. Choose the .Jar file you just downloaded

Note: Before you start to deploy the client, you need to choose what installation type you prefer:

• Export as MSI file and deploy via 3rd party software or locally running the installation file
• Push installation, to centrally install the client onto Windows hosts

Steps to export the MSI File:

1. On the Installation tab, click on Installation packages
2. Select the imported .Jar file from the list and click Export 
3. Save it to your desired location (not to a root folder of a drive, example C:\)
4. Enter the license keycode, which is visible on your License Certificate
5. Select the features which you want to install
6. Choose product language
7. Select the initial policy, which will be in use until the host has been imported to a policy domain
8. In configure the Policy Manager Server address step, choose the Host identification method and click Next
9. In the Conflicting software step, select if you want the installation to try to uninstall any conflicting software

Once you have the fully configured .msi file, deploy the MSI package using a 3rd party deployment software in your organization or run it locally on a host.

Steps for push installation:

1. Click on push installation to Windows Hosts and add you Host.
2. After you have found the host from your domain tree, select the .jar file you imported and authenticate with your admin account (the account you are logged in) and click Next.
3. Click Start.
4. After the Start you will be prompt with the Client Wizard page, so click Next
5. Enter your license keycode and click Next.
6. Choose the preferred language.
7. Set your policy domain or host and click Next. 
8. In "configure the communication with your Policy Manager Server" step. Make sure the Host identification is set to SMBIOS global unique ID. 
9.  and click Next.
10. Select the checkbox to uninstall the conflicting software.
11. Choose the restart option and finish your installation Wizard.

Once the client has been installed, the host will be listed in the Pending list, in the "hosts outside the domain tree" section on the left side of the Policy Manager Console window. 

1.  Click Pending 
2.  Select the host(s)
3.  Click on the three dots to select to which policy domain you want to import the host(s) to 
4.  Click Import

Once a host is listed on the Domain tree, you can select it and change the policy settings centrally from the Settings tab. To distribute the policy, click on the blue Distribute policies button in the top left corner or use Ctrl + D shortcut.