10.2 Installing MyID Desktop

SIU reference: SIU-140.

Note: MyID Desktop version 2.0.1000.1 and later can be used only against a MyID server version 10.6 or later. If the versions are not compatible, a message similar to the following appears:

MyID Desktop is incompatible with MyID Server.

The MyID Desktop installation program is located in the MyID release in the MyID Clients\Desktop Client folder.

The installation program is provided as a .msi file that you can install directly or run from a command-line to install silently on each client PC.

Note: Intercede also provides MSIX versions of the installation programs for MyID Desktop, the Self-Service App, and the MyID Client Service. These are intended for an administrator to create an installation package that combines all of the necessary client software and administrator-controlled configuration. See the MyID Client MSIX Installation Guide for details of working with these installation programs.

Note: You must have .NET Framework 4.8 installed on each client PC on which you want to install MyID Desktop. MyID is developed and tested using .NET Framework 4.8; if you need to use a later version of the .NET framework, contact customer support quoting reference SUP-283.

To install MyID Desktop:

1. Copy the installation program to a local drive.

   If you do not run the installation program from a local drive, you may experience problems with the application running slowly due to certificate checks.

2. Run the installation program, then click Next.

3. Select the destination location, then click Next.

   By default, MyID Desktop installs to the following folder:

   C:\Program Files (x86)\Intercede\

4. Select the desired shortcuts to be installed.

   By default, a desktop shortcut is created.

5. Click Next.

6. In the Server URL box, type the location of the server on which the MyID web services are installed.

   For example:

   https://myserver

   Note: Make sure you use the correct protocol: http or https. Use https if you have configured SSL/TLS. See section 10.3.4, One-way SSL/TLS and section 10.3.5, Two-way SSL/TLS for details.

   If you want to configure MyID Desktop to be able to connect to multiple servers (for example, if you have a test server and a production server) you can specify multiple servers in the Server URL box separated by commas; for example:

   https://productionserver, https://testserver, https://testserver2

   By default, MyID Desktop connects to the first server in this list. If you want to connect to any of the other servers, you can specify the server address on the command line using the /server option; see section 10.4, Launching MyID Desktop for details.

7. In the Client Certificate Issuer DN (for 2 way TLS) box, type the Issuer DN of the client-side certificate used to authenticate the client to the server for two-way SSL/TLS.

   This is optional.

8. Click Next.
9. Click Install.
10. When the installer has completed, click Finish.

To install silently on a client PC, you can use the .msi installer with the following command-line parameters:

msiexec /i "<msi path>" /lv <LogFile> /q SSA_SERVERNAME=<ServerURL> SSLCERTIFICATEDN=<sslcertdn> INSTALLDIR=<InstallationFolder>

where:

• <msi path> is the path to the .msi file.
• <LogFile> is the name of the file to which you want to write a verbose log. This is optional.
• <ServerURL> is the Server URL; for example https://webserver2.example.com/
• <sslcertdn> is the Issuer DN of the client certificate used to authenticate the client to the server for two-way SSL. This is optional.
• <InstallationFolder> is the name of the folder to which you want to install the application. This is optional.

Note: The installation program requires administrative privileges. Open the command prompt using Run as administrator.

Note: Do not put a space character on either side of the = signs in the command line.

For example:

msiexec /i "C:\install\<installer>.msi" /lv msilog.txt /q SSA_SERVERNAME=https://webserver2.example.com INSTALLDIR="C:\temp\desktop"

Note: Installing MyID Desktop automatically installs the MyID Client Components for its own use. If you intend to run any other MyID clients that use the Client Components on the same PC as MyID Desktop, you may experience problems. If you uninstall the Client Components after installing MyID Desktop, you will have to reinstall MyID Desktop to restore its own copies of the Client Components.

For more information, contact customer support, quoting reference SUP-139.