Installing DigitalPersona AD Kiosk

DigitalPersona AD Kiosk will generally be installed remotely using the Install DigitalPersona Kiosk Remotely procedure. However, to illustrate the complete installation steps, the local installation is described first.

Prerequisites

• Before installing the DigitalPersona AD Kiosk on a computer, make sure it meets the system requirements and prerequisites.

• DigitalPersona AD Servers will be used for authentication and should be installed and configured before installing the DigitalPersona AD Kiosk client.

Upgrading from Previous Versions

Detailed information about upgrading and migrating existing deployments is available in the Upgrade Notes provided in the Documentation folder of the DigitalPersona AD package.

Compatibility

This version of DigitalPersona AD Kiosk is compatible with the following DigitalPersona products:

• DigitalPersona Access Management API 2.1 or above (previously Altus Auth SDK)

• DigitalPersona Web Components (previously Altus Confirm SDK, now included in the above SDK)

Install DigitalPersona Kiosk Locally

1. Launch the installer from the DigitalPersona AD Kiosk folder of the product package.

2. Run Setup.exe from the DigitalPersona AD Kiosk folder of the product package.

   Or, for silent mode, enter setup.exe /s /v” /qn” at the command line.

3. When the Welcome page displays, click Next to proceed with the installation.

   

4. Read the License Agreement page. If you agree, select the I accept the terms in the license agreement button and click Next.

   

5. On the next page, you can specify the folder that DigitalPersona AD Kiosk will be installed in. If you want to install to the default location, click Next.

   Otherwise, click Change to specify a new location and then click Next to continue.

   

6. Choose one of the following options to indicate the type of installation you want to perform.

   • Typical - Installs the most commonly used features:

     Note: The availability of the Password Manager depends on the DigitalPersona product:

     • DigitalPersona Logon for Windows - Password Manager is not part of the Typical Setup Type, but can be selected by choosing the Custom Setup Type.

     • DigitalPersona Premium - Password Manager is included as part of the Typical Setup-type, but can be deselected by choosing the Custom Setup Type.

   • Custom - Allows selection of which features to install.

     

     • Password Manager - Enables users to configure their fingerprint logons to websites and Windows programs.

7. Click Next and then Install, to begin installation.

   

8. Click Finish to close the InstallShield Wizard.

   

9. When prompted to do so, reboot the computer. Click Yes to restart now, or No if you plan to restart later.

   

After the computer restarts, and at every subsequent restart, Kiosk automatically uses the default DNS Server to locate all DigitalPersona AD Servers for the domain and its site.

If more than one DigitalPersona AD Server is found, Kiosk will choose the DigitalPersona AD Server for authentication that offers the most efficient connectivity.

For a description of the features and functions, see Using DigitalPersona Kiosk.

Install DigitalPersona Kiosk Remotely

The installer for Kiosk uses Microsoft Windows Installer (MSI) technology, which allows administrators to remotely install or uninstall the software using Active Directory administration tools, or other software deployment tools.

1. For mixed 32- and 64-bit environments, copy the entire contents of the DigitalPersona Workstation x86|x64 folder to a network share.

2. (Optional) To install only to a specific OU, create a Group Policy Object (GPO) that will be used to distribute the software package.

3. Assign the package:

   1. Start the Group Policy Management snap-in from the Windows Server Manager Tools menu, selecting Group Policy Management.

   2. In the Group Policy Management tree, under the appropriate domain, right-click Default Domain Policy and choose Edit from the context menu. This will launch the Group Policy Management Editor.

   3. In the Group Policy Management Editor, open Computer Configuration, Policies, Software Settings, Software installation.

   4. Right-click Software installation and select New, Package from the context menu.

   5. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\file server\share\file name.msi.

      Important: Do NOT use the Browse button to access the location. Make sure that you use the UNC path of the shared installer package.

   6. Click Open.

   7. Click Assigned, and then click OK. The package is listed in the right-pane of the Group Policy window.

   8. For 32-bit installation packages only:

      1. Right-click the package and select Properties.

      2. On the Deployment tab, click Advanced.

      3. Deselect the checkbox Make this 32-bit X86 application available on Win64 machines.

         Note: If this checkbox remains selected, the application will not install.

4. Installation will begin on each client during the first reboot after the computer obtains the deployment policy (that is, during the next scheduled AD policy refresh or as a result of running GPUPDATE\FORCE on the local computer).

Install DigitalPersona Kiosk Patches Remotely

The installer for DigitalPersona Kiosk uses Microsoft Windows Installer (MSI) technology, which allows administrators to remotely install patches to software using Active Directory administration tools, or other software deployment tools, through slipstreaming.

1. Update the installation package by opening a command prompt session and type the following command to patch the previously created installation package:

   Copy

   msiexec.exe /a [path\name of original MSI file]
   msiexec.exe /p [path\name of updated MSP file]\ /a [path\name of administrative installation file]

2. Redeploy the application:

   1. Start the Group Policy Management snap-in - from the Windows Server Manager Tools menu, select Group Policy Management.

   2. Right-click the GPO that governs the computers you want to update and select Edit. This will launch the Group Policy Management Editor.

   3. In the Group Policy Management Editor, navigate to Computer Configuration/Policies/Software Settings/Software Installation.

   4. Right-click the previously deployed DigitalPersona client software package and select All Tasks\Redeploy application. Confirm your intent to redeploy the application.

3. Installation will begin on each client during the first reboot after the computer obtains the deployment policy (that is, during the next scheduled AD policy refresh or as a result of running GPUPDATE\FORCE on the local computer).

Install DigitalPersona Kiosk using the Command Line

DigitalPersona Kiosk can also be installed or uninstalled using MSI at the command line.

The syntax of the msiexec command is shown below and is followed by a description of the command line options, parameters and values available:

msiexec /i setup.msi [INSTALLDIR=”<directory>”] [ADDLOCAL=<software>] [REMOVE=<software>] [TRANSFORMS=<list of transform files>] [/qn] [other MSIEXEC options]

Command Line Options

There are one required and one optional command line options:

Parameters

The following parameters can indicate where the software should be installed on the computer and what components should be included or removed.

ADDLOCAL and REMOVE Values

The table below lists the values that may be provided with the ADDLOCAL and REMOVE parameters and provides a description of each value.

Following are a few rules when using these parameters and their values:

• If ADDLOCAL or REMOVE are not specified, msiexec will install the default (Typical) DigitalPersona Kiosk features.

  Note: Typical features do not include the Password Manager.

• Individual software features cannot be installed unless the All value was used with the ADDLOCAL parameter first.

• To install DigitalPersona Kiosk for the first time while omitting one or more of its features, use ADDLOCAL=ALL, followed by the REMOVE parameter and the name of each feature that you do not want to install, separated by commas.

  For example:

  Copy

  msiexec /i setup.msi ADDLOCAL=ALL REMOVE=PasswordMgr

About Transform files

DigitalPersona uses Transform (.mst) files to create an installation package for DigitalPersona components in the supported languages listed below. These files are located in the Bin directory of your product package.

When creating a package for a GPO install, select the Advanced option and then add the transform file from the Modifications tab. Ensure that the transform file is included in a folder that is shareable by the Active Directory server computer and all target client computers.

Uninstall DigitalPersona Kiosk

You can remove the DigitalPersona Kiosk software using the Add or Remove Programs option of the Control Panel or through MSI.

In the Control Panel, the Kiosk software is listed as DigitalPersona AD Kiosk.

You must have local administrative privileges to modify or uninstall DigitalPersona AD Kiosk.