Policy-Based Installation - F-SECURE CLIENT SECURITY 7.00 Administrator's Manual

4.4.4

Policy-Based Installation

Using the Installation Editor
Base policy files are used to start installations on hosts that already have
F-Secure Management Agent installed. F-Secure Policy Manager
Console creates an operation-specific installation package, which it
stores on the F-Secure Policy Manager Server, and writes an installation
task to the base policy files (thus, policy distribution is required to start
installations). Both base policy files and the installation package are
signed by the management key-pair so that only genuine information is
accepted by the hosts.
F-Secure Management Agent on the hosts fetches the new policies from
F-Secure Policy Manager Server and discovers the installation task.
F-Secure Management Agent fetches the installation package specified in
the task parameters from the server and starts installation program.
When the installation is complete, F-Secure Management Agent sends
the result of the installation operation in an incremental policy file to the
server. F-Secure Policy Manager Console discovers the new status
information and shows the results.
Uninstallation uses these same delivery mechanisms.
The Installation Editor must be used on those hosts that already have
F-Secure Management Agent installed. To access the Installation Editor,
open the Policy tab in the Properties pane and select the root node (the
F-Secure sub-tree). Alternatively, open the Install tab in the Properties
pane. The Installation Editor opens in the Product View pane.
In the Installation Editor, the administrator selects the products to be
installed on the currently selected host or policy domain.
CHAPTER 4 147