Agent
With Axidian CertiFlow Client Agent you can manage cards on user workstations remotely.
Install Agent
Install Axidian CertiFlow Agent along with Axidian CertiFlow Middleware on user workstations.
To install an agent, run the AxidianCertiFlow.Agent-<version number>.en-us.msi file from the AxidianCertiFlow.Client catalog and follow the wizard instructions. The agent starts automatically after installation.
Configure server connection
Configure the settings for connecting agents to the Axidian CertiFlow server using Windows Group Policies or the Windows Registry.
- Windows Group Policies
- Windows Registry
Copy the contents of the AxidianCertiFlow.Client\Misc\ catalog to your central ADMX file store. The standard location on a domain controller is C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.
infoIf you use a local ADMX store instead, copy the files to C:\Windows\PolicyDefinitions.
Open the Group Policy Management console.
In the console tree, create a new GPO or select an existing GPO that applies to the target user workstations.
Right-click the GPO and select Edit.
In the Group Policy Management Editor, go to Computer Configuration → Policies → Administrative Templates → Axidian CertiFlow → Agent.
Enable the Agent's URL Settings policy and configure the following parameters:
- In the
Agents registration service URLparameter, specify the web address and port for connecting to the agentregistrationapi application hosted on the Axidian CertiFlow server. For example,https://server.domain.loc:3003/agentregistrationapi/. - In the
Agents service URLparameter, specify the web address and port for the agentserviceapi service. For example,https://server.domain.loc:3003/agentserviceapi/.
- Link the edited GPO to the Organizational Unit (OU) or security group that contains the workstations of the Axidian CertiFlow users.
- Select Apply.
- Force a policy update on the target workstations or wait for the next refresh cycle.
Optional agent settings
| Policy | Description |
|---|---|
| Agent's timeouts settings | Request timeout to agent services (default: 30 sec.) Agent status check request interval (default: 300 sec.) Settings, bindings, tasks, and sessions update request interval (default: 30 sec.) Agent disconnect request timeout (default: 3 sec.) |
| Events caching settings | Number of minutes the agent attempts to send cached events to the server (default: 10 min.) Number of events transferred at once from the user workstation cache to the server (default: 500 events) |
| Proxy server settings | This policy defines the use of a proxy server when connecting to the Axidian CertiFlow server. If the policy is not set or disabled, a proxy server is not used. The Proxy server parameter specifies the proxy server address. |
| Event log settings | This policy sets the event logging level to the server log: All (default) Errors only Errors and warnings only |
| Tasks caching settings | Interval for updating the task cache and sending task execution status to the server if it could not be reported immediately (default: 60 sec.) Timeout after which tasks are removed from the cache during the next cache update (default: 300 sec.) Timeout before a user-canceled task can be executed again (default: 60 sec.) |
| Smart card status update settings | This policy sets the interval for checking card status (default: 30 sec.): User/Administrator PIN lock Incorrect User/Administrator PIN entry attempts |
Create a REG file:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AxidianCertiFlow\Agent]
"AgentRegistrationServiceUrl"=""
"AgentServiceUrl"=""
"ProxyEnable"=""
"ProxyServer"=""
For 32-bit operating systems, configure the parameters in the following registry key: [HKEY_LOCAL_MACHINE\SOFTWARE\AxidianCertiFlow\Agent]
AgentRegistrationServiceUrl: Specify the link and port for connecting to the agentregistrationapi application.AgentServiceUrl: Specify the web address and port for connecting to the agentserviceapi application.ProxyEnableandProxyServer: If a proxy is used on the workstations where the client agent is installed, specify the proxy server URL.
`"ProxyEnable"=dword:00000000` – proxy is not used
`"ProxyEnable"=dword:00000001` and `"ProxyServer"=""` – default proxy settings are used
`"ProxyEnable"=dword:00000001` and `"ProxyServer"="<proxy server URL>"` – the proxy server specified in the setting is used
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AxidianCertiFlow\Agent]
"AgentRegistrationServiceUrl"="https://server.domain.loc:3003/agentregistrationapi/"
"AgentServiceUrl"="https://server.domain.loc:3003/agentserviceapi/"
"ProxyEnable"=dword:00000001
"ProxyServer"="https://192.168.10.10:443"
Distribute the registry file and apply the changes to user workstations. To apply the changes, restart the workstation with the Axidian CertiFlow Agent or restart the Agent Service.