Patch for Windows, powered by Shavlik

Manually Installing Ivanti Patch for Windows Agent

You must manually install Ivanti Patch for Windows Agent on machines that are guarded by a firewall. You do this by copying the agent installation files to the desired target machines and then running the Ivanti Patch for Windows Agent installation wizard on each machine.


The target machines must be able to communicate with the console.

You must configure at least one Ivanti Patch for Windows Agent policy before manually installing an agent. See Preparing to Use Agents for details.

You must specify how the agent will authenticate itself to the console during the registration process. See Agent Options for details.

Installing an agent on a distribution server is a special case that requires the server machine's SYSTEM account to have read access to the distribution server folder. See Configuring System Account Permissions for details.

Installation Procedure

1.On the Ivanti Patch for Windows console, locate the STPlatformUpdater.exe file.

The file is located in the C:\ProgramData\LANDESK\Shavlik Protect\Console\DataFiles directory.

2.Copy the .exe file to the desired target machines.

You can distribute this file using Active Directory, or you can simply copy it to a physical media such as a CD or flash drive and manually distribute it to the desired machines.

When distributing this file you may choose to create an installation script that automatically passes all necessary information to the installation wizard.

3.Log on to the target machine using an administrator account.

4.Double-click the file named STPlatformUpdater.exe.

The agent is installed. When the installation is complete the Agent Registration dialog is displayed.

5.Click I have a direct connection to the console.

The I connect to the console through the cloud button is used if you are installing the agent via the cloud.

The following dialog is displayed.

6.Provide the required information.

Hostname: Type either the hostname or the IP address of the Ivanti Patch for Windows console. Examples: Myconsole or

If an IP address is used, the IP address must be added to the Console Alias list.

Agent services port: Specify the port number used for forwarding information to the console. 3121 is the default port number.

Configure Proxy: Click this button to specify the proxy settings the agent will use during the registration process. See Configuring Proxy Server Settings for details.

Authentication Type: You must choose the authentication method dictated by the Tools > Options >Agents dialog.

If the Enable passphrase in manual Agent installations check box is enabled on that dialog, then choose Shared Passphrase and type the matching passphrase.

Otherwise, choose either Windows Authentication or Use current credentials.

- If the credentials you used to log on to the target machine can also be used to log on to the Ivanti Patch for Windows console, then choose Use Current Credentials. The credentials must be for a user in the Administrators group on the console.

- Otherwise, choose Windows Authentication and provide the necessary administrator credentials for the Ivanti Patch for Windows console. The credentials must be in domain\ format and they must have administrator rights on the Ivanti Patch for Windows console.

Select policy: Click Get policy list to connect to the console and populate the Select policy box with the list of all available agent policies. Select the policy you want assigned to this agent.

7.On the Agent Registration dialog click Register.

8.On the Agent Setup Wizard dialog, click Finish.

The agent installation routine will:

Install the necessary .exe and other supporting files in the C:\Program Files\LANDESK\Shavlik Protect Agent directory

Install the certificates needed to communicate securely with the console

Acquire an agent license

Retrieve the assigned policy, the engine components and the data files and store them.

The files are stored in the C:\ProgramData\LANDESK\Shavlik Protect\Agent directory.

When the download is complete the agent will be started automatically. You can check the status of the agent using the Ivanti Patch for Windows Agent client program, available by selecting Start > All Programs > Ivanti Patch for Windows > Ivanti Patch for Windows Agent. You can use this program to configure any settings that were marked as user-configurable.


Was this article useful?    

The topic was:



Not what I expected