How to Deploy the Privilege Management Agent Using Microsoft Configuration Manager (SCCM)? | Securden Endpoint Privilege Manager¶
The deployment process consists of three phases:
- Create the Securden Agent application in Microsoft Configurations Manager (SCCM)
- Deploy the application to target devices
- Upgrade existing Securden agents
Phase 1: Create the Securden Agent Application on Microsoft Configuration Manager¶
This phase creates an SCCM application package that contains the Securden Agent installer, and all deployment information required for installation.
Step 1: Open the Applications Workspace¶
Open the Configuration Manager Console and navigate to Software Library → Application Management → Applications. This is the location where all deployable applications are managed in SCCM.
Step 2: Create a New Application¶
Right-click Applications and select Create Application. This launches the Create Application Wizard for adding the Securden Agent installer to SCCM.
Step 3: Select the Securden Agent Installer¶
In the Create Application Wizard, browse to the shared network location containing SecurdenAgent.msi.
Example: \\Server\Share\Softwares\SecurdenAgent\<version>\SecurdenAgent.msi
Click Next to allow SCCM to read the MSI package information.
Step 4: Review the Detected Application Information¶
SCCM automatically reads the MSI metadata and displays the detected application details.
Verify the information and click Next.
Step 5: Configure the Application Details¶
Provide the application information that SCCM will use during deployment.
Recommended values include:
| Field | Value |
|---|---|
| Application Name | Securden Agent \ |
| Publisher | Securden, Inc. |
| Software Version | \ |
| Installation Behavior | Install for System |
| Installation Program | msiexec /i "SecurdenAgent.msi" SERVER=<Server> INSTALLATION_KEY=<Key> |
Replace the placeholder in the parameters passed as below:
<x.y.z>with the actual version of the Agent<Server>with the Securden server FQDN or IP address.<Key>with the installation key generated while downloading the agent.
Using the version number in the application name makes future upgrades easier to manage.
Step 6: Review the Application Configuration¶
Review the configuration summary generated by the wizard.
If everything is correct, click Next to create the application. The Securden Agent application is now available in SCCM.
Phase 2: Configure Application Detection¶
Detection rules enable the Configurations Manager (SCCM) to determine whether the Securden Agent is already installed, preventing unnecessary reinstallations.
Step 8: Open the Deployment Type Properties¶
Select the newly created application.
In the lower pane, open Deployment Types, right-click the deployment type, and select Properties.
Step 9: Configure the Detection Method¶
Open the Detection Method tab and select Edit Clause.
Choose the option ‘This MSI product code must exist on the target system and the following condition must be met to indicate presence of this application’.
Specify the current Securden Agent version (for example, 5.6.9).
This allows SCCM to verify both the MSI installation and the installed version before marking the application as installed.
Click Apply, then OK to save the deployment type properties.
The application is now ready for deployment.
Phase 3: Deploy the Securden Agent¶
After creating the application, deploy it to the required collection of managed devices.
Step 11: Start the Deployment Wizard¶
Navigate to Software Library → Application Management → Applications and right-click the Securden Agent application and select Deploy.
Step 12: Select the Target Device Collection¶
Under Collection, click Browse.
Choose the appropriate Device Collection containing the computers that should receive the Securden Agent.
Click Next.
Step 13: Select the Distribution Point¶
Choose the appropriate Distribution Point or Distribution Point Group that hosts the installation files.
Click Next.
This ensures client devices can download the installer from an SCCM distribution point.
Step 14: Configure the Deployment Purpose¶
Set the deployment Purpose to Required.
A Required deployment automatically installs the Securden Agent on all devices in the selected collection.
Step 15: Review and Complete the Deployment¶
Review the deployment summary.
Click Next to create the deployment.
Microsoft Configurations Manager will now distribute the application and begin installing the Securden Agent on the selected devices according to the deployment schedule.
Steps to Upgrade Existing Securden Agents Using SCCM¶
You can use this procedure whenever a newer version of the Securden Agent is available, and you want to upgrade the Agents running on your endpoints.
Step 1: Create a New Application for the Updated Agent¶
Create a new SCCM application for the latest Securden Agent by repeating all the steps in Phase 1.
Each agent version should have its own application.
Step 2: Configure Supersedence¶
Right-click the newly created application and select Properties.
Open the Supersedence tab and click Add.
Then click Browse under Superseded Application.
Select the previous Securden Agent application.
Step 4: Configure the Upgrade Behavior¶
Under New Deployment Type, select the deployment type for the new application.
Enable the Uninstall option. This instructs SCCM to uninstall the older version before installing the updated Securden Agent.
Click OK.
Step 5: Save the Supersedence Configuration¶
Click Apply, then OK to save the application properties.
The new application is now configured to replace the previous version automatically.
Step 6: Deploy the Updated Application¶
Deploy the new application using the same deployment procedure described in Phase 3.
Microsoft Configurations Manager will automatically identify devices running the superseded version, uninstall the old agent, and install the updated version.
