Identity Awareness Agent packaging

[Sean_Van_Loon]

Hi all,

I'm trying to create a custom MSI file for a client, where we can do a silent install without any interaction required from the user itself.

However, when trying to run the MSI with silent installation, the package still gives a message that no server is configured. When I click "ok" - the IA agent directly connects and authenticates and status is OK.

Does anybody know how to get rid of this message? (see below my configuration).

Configuration

Followed the instructions of Identity Awareness R80.10 Administration Guide on Autodiscovery DNS.

Nslookup for verification:

C:\Users\sean>nslookup -type=SRV CHECKPOINT_NAC_SERVER._tcp.mycompany
Server: dc13.mycompany
Address: x.x.x.x

CHECKPOINT_NAC_SERVER._tcp.mycompany SRV service location:
priority = 0
weight = 0
port = 443
svr hostname = cpia.mycompany
cpia.mycompany internet address = y.y.y.y

The certificate on the gateway has been replaced my a certificate of the company itself.

I've downloaded the most recent Identity Awareness Agent (Full - EXE  + MSI) from: sk134312

Installed the EXE as a Full client with the MAD service and auto-discovery.

Trusted the gateway - status is authenticated (so OK).

Next, ran the IAConfigTool.exe with the following settings:

And used the created MSI to install on a fresh computer (with administrative privilege).

Installation done with: CMD.exe (run as admin):

msiexec.exe /i "Check_Point_Identity_Agent.msi" /quiet

But I still get the message.

Does anybody know a solution?

Would the " remote registry option" be the solution?

Thanks!

Sean