Install Velauth

Velauth has two components. Install Desktop on each operator’s Windows computer. Install the Agent on a customer-managed server that can reach Active Directory. Desktop never connects to AD and holds no AD credentials. The Agent runs as a gMSA service account.

Download and check the installers

1. Download Desktop and Agent installers from velauth.com/downloads.
2. Download the accompanying SHA256SUMS file.
3. Calculate the SHA-256 hash of each installer and compare it with SHA256SUMS before running it.

The installers are not code-signed yet. Windows SmartScreen shows an unknown publisher warning. Compare the SHA-256 hash before continuing.

Install Desktop

1. Run the Desktop .exe or .msi.
2. Follow the Windows prompts.
3. Open Velauth from the Start menu.
4. Sign in and complete First Connection.

Install the Agent

1. Run the Agent MSI on the server.
2. In the installer, open Velauth on your Windows computer and go to Settings, Agents.
3. Enter a label, choose the forest, and select Mint token. Copy the token because it is displayed once.
4. Paste it into the MSI enrollment-token page and continue. The token is stored encrypted on that computer.
5. If you choose Skip for now, sign in later to the Agent tray setup and paste the token there.

The tray setup identifies the same steps: create an Agent token in Velauth, then paste it and select Connect & Save.