KeyShield SSO client – unattended installation from script

KeyShieldClient.msi unattended installation

You can use KShieldClient.msi parameters to customize unattended installation. There are two groups of parameters. Registry configuration – for configuring authentication method and login action – and configuration file parameters – for initializing kshield.cfg with server address and port paramters.

It is possible to save unattended configuration batch (.cmd) file with specified parameters during interactive KeyShield SSO Client installation by cheking the ‘Save .cmd batch file for unattended installation.’ checkbox. Batch file will be saved as ‘install_unattended_KShieldClient.cmd’ in a directory where KShieldClient.msi file is located.

Parameters are passed to KShieldClient.msi like this:


msiexec /qn /i KShieldClient.msi CONFIGURECLIENT=yes AUTH=MANUAL LOGINACTION=OESLOGIN OESTREE=YOURTREE OVERWRITECFG=yes SERVERADDRESS=172.22.11.11 /q

if you need diagnostics log use:


msiexec /qn /i KShieldClient.msi /l*v install.log CONFIGURECLIENT=yes AUTH=MANUAL LOGINACTION=OESLOGIN OESTREE=YOURTREE OVERWRITECFG=yes SERVERADDRESS=172.22.11.11

 

Registry configuration – authentication method and login action configuration

CONFIGURECLIENT=yes/no (defaults to 'yes' when client is not already installed and to 'no' when updating)
When KeyShield SSO is not already installed, CONFIGURECLIENT is set to yes. When updating it defaults to no and you must override it by setting CONFIGURECLIENT=yes parameter, otherwise existing registry settings will be preserved.


 

AUTH=MANUAL/EDIR/AD/UID
set authentication method KeyShield SSO Client will be using

 

LOGINACTION=NONE/OESLOGIN/MAPHOME
after successfull manual authentication (username and password) KeyShield SSO Client can execute either OES client login or map user home directory (obtained from Active Directory user homeDirectory attribute)

 

OESTREE={eDirectory tree name}
when performing OES client login, OESTREE is used when calling loginw32 utility to force login to given eDirectory TREE

 

MAPHOMETO={local device name .e.g 'H:'}
Windows server home directory will be mapped to this local device

 

Configuration file parameters – create/overwrite kshield.cfg

When you need to overwrite existing kshield.cfg file, set OVERWRITECFG=yes otherwise existing kshield.cfg will be preserved.

OVERWRITECFG=yes/no (default is no)
force kshield.cfg creation

 

SERVERADDRESS={KeyShield SSO server hostname or address}
set serverAddress parameter in kshield.cfg

 

SERVERPORT={serverport - default 9011}
set serverPort parameter in kshield.cfg