Install tokens for Windows computers

Computers enrol in your organization with an install token, which the MSI installer receives in the INSTALL_TOKEN property.

How do I create a token?

1. Open «Manage» › «Computers» › «Install tokens».
2. Fill in:
   • «Label»: 1 to 64 characters, for example "October pilot".
   • «Approval»: «Automatic» (computers become active at once) or «Manual approval» (each computer waits for your approval).
   • «Computers»: how many computers may use the token (1 to 10,000).
   • «Valid for (days)»: 1 to 30.
3. Choose «Create token».
4. «Copy the install token now» appears: «AuthGuard stores only a digest of the token and does not show it again. Give it to the installer as INSTALL_TOKEN.»

Good practice

• The token is a secret: keep it as you would a password and do not publish it on open shares.
• Give it a short lifetime and a computer count that fits the rollout.
• Use «Manual approval» when the token could leave the IT team's control.
• When the rollout ends, use «Revoke». A confirmation says the token was revoked.

Limits

An organization can hold up to 100 live tokens at once: «The organization already has 100 live install tokens. Revoke one first.»

Why did a computer not enrol?

The token expired, ran out of computers, was revoked or belongs to another organization. The computer does not appear under «Computers». See The computer does not appear.

After enrolment

The installer deletes the token from the Windows registry after using it. Updating the agent needs no new token.