Remote Installation on Windows

To install DPR remotely on Windows computers, follow these steps:

  1. Prepare for Remote Installation

  2. Install DPR using the Remote Installation Method

Note
For silent installation, open the command prompt or Powershell with Administrative privileges by selecting Run as an administrator from the context menu in Windows.

Prepare for Remote Installation

Pre-configure Desktop Password Reset before distributing it for remote installation.

  1. Install Desktop Password Reset on one system as described in the Interactive Installation task. Choose the option to Deploy Configuration Utility during this setup. For example purpose, this system is named master system. Configurations done on this setup (except for the configurations mentioned in the below table) are duplicated on the remote systems.

  2. Extract DesktopPwdReset_x.x.x.zip to a directory.

  3. Open the command prompt as an Administrator.

  4. In the command prompt, go to pathOfDesktopPasswordReset\SailPoint Technologies\Desktop Password Reset.

  5. Run the following command and press Enter. It generates the dprconfig.export, dprkey.export, and browserruntime.zip files in that location.

    Configurator.exe -exportkey -exportconfig

  6. Copy these files to the following directory, depending on the operating system:

    • (For 64-bit) – pathOfDesktopPasswordReset\x64\

    Where pathOfDesktopPasswordReset is the path where the DesktopPwdReset_x.x.x.zip file was extracted earlier.

  7. Obtain the SSL certificate of your SailPoint instance in the desired format. It can be done in various ways such as:

    • Select the Secure button (a padlock) in an address bar.

    • Use the s_client OpenSSL command. For example:

      echo | openssl s_client -servername example.sailpoint.com -connect example.sailpoint.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /Documents/certificate.crt

  8. Copy the required SSL certificate to the pathOfDesktopPasswordReset directory.

  9. (Optional) To set a custom icon of the Desktop Password Reset tile on the Windows Logon screen, save an image file to the provided location below. The file name of the customized image must be "PMIcon.bmp". It needs to be a bitmap (.bmp) file.

    • (For 64-bit) – pathOfDesktopPasswordReset\x64\

Install DPR using the Remote Installation Method

To remotely install Desktop Password Reset:

  1. Copy the directory created earlier to the remote system.

  2. On the remote machine, open the command prompt as an Administrator.

  3. Depending on the operating system navigate to the following directory:

    • (For 64-bit) – pathOfDesktopPasswordReset\x64\

    Replace pathOfDesktopPasswordReset with the path from where the directory was copied earlier.

  4. Enter the following command with the appropriate parameters:

    pathOfDesktopPasswordReset/setup.exe -afterreboot /quiet

    For example:

    pathOfDesktopPasswordReset/setup.exe -afterreboot PRECONFIG=1 /quiet

    Note
    To suppress pop-up windows during remote installation failures, use the following command:

    pathOfDesktopPasswordReset/setup.bat -afterreboot PRECONFIG=1 /quiet

  5. Run the following command to install the certificate. In the command, certificateName is the name of the certificate file. For example, SSLCertificate.cer:

    InstallCert_Silent.bat certificateName

The following table describes available installation parameters:

Name

Description

TARGETDIR

Path of the installation directory.

Default: "C:\Program Files"

For example: TARGETDIR="C:\Program Files"

DEPLOYCONFIGURATOR

Deploys the configurator on a target machine. SailPoint does not recommend that you deploy the configurator on a target machine if end users shouldn't make configuration change.

Default: It is not deployed.

For example: DEPLOYCONFIGURATOR=1

PRECONFIG

Indicates if the Desktop Password Reset is preconfigured. Set this to 1 if the configurations and encryption key are going to be imported during this installation. Refer to Remote Installation on Windows for more details.

For example: PRECONFIG=1

-afterreboot

Run pre-requisites in silent mode.

For example: -afterboot

quiet

Run installer in silent mode.

For example: /quiet