Deploying Packages

The Ivanti Device and Application Control Client Deployment tool silently deploys Ivanti Device and Application Control client for unattended installation, using deployment installation packages.

Prerequisites

Before you can successfully deploy Ivanti Device and Application Control clients, you must:

  • Create deployment packages.
  • Be a member of the Local Administrators group for all targeted computers.
  • If you will be deploying clients to computers that are not connected to the Application Server, you must import the policies.dat setting file to the same directory where the deployment packages that you create are saved.
  1. Select Start > Programs > Ivanti > Ivanti Device and Application Control Management Console > Ivanti Device and Application Control Client Deployment.
    The Ivanti Device and Application Control Client Deployment dialog opens.
  2. If you are deploying the client to computers that are not connected (offline) to the Application Server, you must first export the policy file policies.dat to the targeted computer(s), as follows.
    1. Select Packages > Options.
      The Options dialog opens.
    2. To select the directory to store deployment copies, click the ellipses.
      You must specify a directory that is different than a system drive root directory or directory containing existing files. When the Ivanti Device and Application Control Client Deployment tool runs on different computers, you may want to specify a shared directory where all instances of the Ivanti Device and Application Control Client Deployment tool have access to the deployment packages.

      Important: Installing a client using exported policies works well when policies.dat is placed locally in the same directory as setup.exe. However if the policies.dat file is placed on a file share you must change the security of the share directory so that computer accounts are able to access it must have access to it through LocalSystem.

    3. Click OK.
      The Options dialog closes.
  3. To add computers for client deployment, select the computer name(s).
    You can select multiple computers while pressing the CTRL key.
  4. Click OK.
  5. From the Packages panel, select a deployment package from the list.
    From the Computers panel, you may also select a subset of targeted computers for package deployment.
  6. Click Install.
    Because deployment requires restarting the target computer(s), the Install/Uninstall/Reboot Options dialog opens.
  7. From the When a reboot is needed at the end of a deployment panel, select the following options, as necessary:

    8. Option

    Description

    Reboot after (x) second(s)

    Restarts the target computer(s) after deployment, within the period that you specify.

    Force reboot even if some applications are opened

    Forces the target computer(s) to restart after deployment, regardless of open applications.

    Apply to

    Applies reboot options to All target computers or a Selection of computers, representing the subset chosen when selecting the deployment package.

    Message

    You can type a message that users receive when the target computer(s) restart.
  8. To generate a certificate semi-automatically during setup, select the computer certificate location and parameters from the following options.

    9. Option

    Description

    Use local certificate store

    Generates a digital certificate during installation by using a signature certificate located in the local user store.

    Use memory certificate store

    Generates a digital certificate during installation by using a signature certificate located in a specified file.

    Import

    Imports a signature certificate into the local user store.

    Select

    Allows you to select a signature certificate located in a specified file

    Advanced

    Specifies the certificate parameters for the Cryptographic service provider, Key length, Validity, and Signature.
  9. Click Next.
  10. Click OK.
    The Ivanti Device and Application Control Client Deployment dialog reopens showing the deployment progress for the computer(s) added to the deployment package selected.

    The Progress column in the Computers panel displays a progress bar showing the deployment status for each computer. The Progress column in the Packages panel displays a progress bar showing the overall deployment status the deployment package. The following table describes the status bar.

    11. Color

    Status Condition

    Turquoise

    Task completed successfully.

    Green

    Task in progress with no warning.

    Yellow

    Task in progress or completed with warnings.

    Red

    Task in progress or stopped with an error.

The deployment package is silently deployed the designated computer(s) or computer group(s).

After Completing This Task

If you chose to restart the client after deployment is complete, the System Shutdown dialog displays with the message created when selecting the reboot option(s), as illustrated by the following example.

Related Information

Related Tasks