Working with Installations

1. Create a new folder to store the files where you can easily find them, such as on your desktop.

2. Download Spirion MSI Builder and extract the .zip file to the folder you created in Step 1.

3. From your Spirion Customer Portal, download Version 13.0.0 and place that in the folder as well.

4. Place a copy of your license file in the folder. (You can obtain a copy of your license file from your Customer Portal.)

5. Download your Registry File:

a. Log into the provided web address of your SDP environment. (Please contact your Customer
Success Manager if you have any questions.)

b. Go to Agents | Registration.

c. Download the 32-bit version to your computer.

d. Place a copy of the clientsettings.reg file in the folder you created in Step 1.

Note: Always use the 32-bit version of the .reg file even if you use a 64-bit system. When the MSI runs, it determines the bitness of the machine and will put the registry in the appropriate place.

1. Run SpirionMSIBuilder.exe.

2. Installer section:

a. Endpoint Installer Exe (Required): Input the full path to Agent .exe file your put in your new folder.

b. Output File (Required): Input the name and path of the resulting customized MSI.

3. Additional Files section:

a. License File: Input the full path to the identityfinder.lic file you put in your new folder.

b. Registry File: Input the full path to the ClientSettings.reg 32-bit registry settings file obtained from the console you put in your new folder.

4. Services section. Click Configure next to the service your want to edit:

a. Install Endpoint Service: Specify whether the Identity Finder Endpoint Service should be installed. (When using the client with the enterprise console, this box must be checked or communication with the console will fail.)

b. Display Name: Specify the name of the service that will appear as the "Display name" in the Services Control Manager. This display name is shown in the "Name" column.

c. Description: Specify the description of the service that will appear as the "Description" in the Services Control Manager. This description is shown in the "Description" column.

d. RabbitMQ: RabbitMQ (RMQ) is a message queuing system used to enable advanced features in Sensitive Data Platform. Select an option from the drop-down list:

Note: The Agent Installer preserves RabbitMQ users when RabbitMQ has been installed.

1) Allow User Selection: Allows the user to determine installation of RMQ at the time of creation.

2) Force Install: This is the recommended option for silent installation.

3) Bypass Install: This is for Sensitive Data Manager (SDM) users only.

Note: RabbitMQ installation is required to use Agent 13.0 with SDP.

5. OCR Image Search Module. This option will install one or both OCR modules or exclude the OCR module files from the target MSI if the module is not needed. Choose an option from the drop-down list:

a. ALL (Install 2013 and Legacy. Auto Detect on the client): Include both OCR 2013 and OCR Legacy modules in the target MSI. When selected, both modules will be installed on the client and the application will determine the appropriate module to load at run time. If a single MSI will be deployed to machines with .NET Framework 4.8 or later (required for OCR 2013) and machines with .NET Framework 4.8 or greater, select this option. This option creates the largest target MSI.

b. OCR 2013 (Recommended: .NET Framework 4.8 required on the client): Include only the OCR 2013 module in the target MSI. When selected, the Legacy OCR module will not be included and only clients with .NET Framework 4.8 or later will be able to perform an OCR search.

c. OCR LEGACY (.Net not required on the client): Include only the Legacy OCR module in the target MSI.

d. NONE (If not licensed to OCR, select to reduce file size): Do not include an OCR module in the target MSI. If OCR is not licensed, this option should be selected to create the smallest target MSI.

Note: For the OCR module to be used, the license must include OCR. If the OCR module is not licensed, clearing this option will make the installation package significantly smaller.

6. Advanced Options. Use this option to configure additional advanced settings:

a. Click Configure.

b. Installer UI Options:

4) Suppress user configuration on installation: Installs the application without allowing the end user to customize any settings. A simple progress bar with a cancel button will be displayed.

5) Installation modes: Select an option from the drop-down list:

• Allow All (default) allows the user to select the Typical or Custom setup type.

• It is also possible to force the user to select Typical (by disabling Custom) or Custom (by disabling Typical). If a user can access the Custom Setup, they will be able to turn on and off the installation of shortcuts, the endpoint service, and other features.

6) Display Endpoint Service Feature: Shows the Endpoint Service feature in the UI of the installer allowing a user to enable or disable the installation of the service. This setting is only available when Install Endpoint Service is checked on the main dialog and the Suppress user configuration on installation setting is not selected (as it does not apply in those cases).

7) Uninstall user settings: Display the prompt "Would you like to remove your user settings?" to the user on uninstall. Alternatively, force settings to be saved during uninstall or force them to be removed - both without a user prompt.

8) Disable Microsoft SharePoint client component check: Select to allow an MSI installed interactively to bypass checks for SharePoint client. (Disable to prevent pop-up windows during a remote upgrade.)

9) Disable Microsoft Visual C++ 2015 Redistributable Update 3 check: Select to allow an MSI installed interactively to bypass the SharePoint client requirement for the MS C++ redistributable. (Disable to prevent pop-up windows during a remote upgrade.)

c. Shortcuts:

1) Add Start Menu Shortcuts: Add a program group to the Start menu containing shortcuts to IdentityFinder.exe, the Password Vault, and/or the online help. Checking this box will set the option to be enabled within the installer, but a user with access to the Custom Setup button will be able to disable the creation of shortcuts.

• Identity Finder client application: Shortcut to the interactive, GUI application

• Password Vault: Shortcut to directly open the Password Vault (requires the user to enter their profile password)

• Online Help: Shortcut to open the default browser to the client user guide at https://my.spirion.com/help/

• Add Desktop Shortcuts: Add a shortcut to IdentityFinder.exe on the current user's desktop. Checking this box will set the option to be enabled within the installer, but a user with access to the Custom Setup button will be able to disable the creation of shortcuts.

d. Windows and Application Integration:

1) File Associations: Associate .idf and. idfvault extensions with the application allowing users to double click on saved results files and/or file vault files to launch Identity Finder and automatically load the specified file.

2) Application Integration: Install classification capabilities into Microsoft Office, Microsoft Outlook, and Adobe Acrobat. Checking this box will set the options to be enabled within the installer, but a user with access to the Custom Setup button will be able to disable the installation of the add-ins.

• Office Integration: Install an add-in to enable classification directly within Microsoft Word, Excel and PowerPoint versions 2010 and later.

• Outlook Integration: Install an add-in to enable classification directly within Outlook version 2010 and later.

• Suppress dialog when .NET 4. is not installed: The Outlook Add-In requires .NET Framework 4.8 and, by default, will prompt if it is not available. Select this option to disable the prompt.

• Acrobat Integration: Install an add-in to enable classification directly within Adobe Acrobat version 9 and later.

3) Explorer Integration: Add a right click menu for drives, files, and folders that provides direct access to search, secure, and shred capabilities without having to first launch the Identity Finder application. The options available via the right click menu can be customized via client application settings.

e. Launch Options:

1) Launch Spirion After Installation: Choose one:

• Allow User Selection: The user has the option to open the client application after finishing the installation wizard or deselecting the checkbox to prevent it from launching.

• Force Launch: Requires the user to lauch the application upon finishing the installation wizard.

2) Apply command line options to: Command line options can be added to change the behavior of the application. The options can be added for the initial launch from the last page of the installation wizard and/or to the desktop and start menu shortcuts.

• Job Mode: Start Spirion in Job Mode. For more information, refer to Enterprise Client Command Line Switches.

• Configuration File: Start Spirion with an XML configuration file. Provide the full path including drive letter or share name and filename to the location that will contain the configuration file. This option does not install the configuration file. For more information, refer to Enterprise Client Command Line Switches. Note: this is only recommended for users without the console.

• Password Vault: Launch the Password Vault. For more information, refer to Enterprise Client Command Line Switches

f. Upgrade Options: Merge existing administrative registry settings on upgrade. Enabling this option will back up any settings in HKLM and restore them after the upgrade. If a setting is specified in both HKLM as well as the .reg file of the MSI, the value in the .reg file of the MSI will be used.

g. Additional Files: Any additional file can be installed in the same location as IdentityFinder.exe. The only file that has an impact on the application is activation.txt.

7. Click Build MSI. The MSI package will be saved in the folder location you created.