Make sure to read System Requirements prior to proceeding
¶ Install the Binaries
The Client can be installed with GPO or other software distribution mechanisms of your choice or manually. To use SystoLOCK with RDS, make sure to install it on both terminal servers and local computers. For RDS installation, consult Installing SystoLOCK on RDS Farms.
¶ Manual Installation
- Obtain the latest MSI package for the Client
- Make sure you belong to local
Administratorsgroup - Start the installation by invoking the package
- Observe any error message the installer my yield.
- Reboot the system if upgrading
¶ Automatic rollout
The MSI package is designed to run in silent mode and accepts all the usual switches for this purpose.
If you are using modern rollout tools such as Barracuda or System Center, you can use the same MSI as for manual installation. Simply import the MSI into your chosen tool and complete the wizard to assign the package. As the MSI package is multilingual, the appropriate language will be chosen automatically upon installation.
However, if you want to use the Windows native Group Policy Object (GPO) for the rollout, you will need to manually select the MSI for one of the supported languages, as GPO installation does not support multilingual packaging. The language-specific packages can be found in the GPO folder within the shipped ISO.
¶ Post-Installation Tasks
You can use SystoLOCK right away after the installation completes. In some cases you may want to tweak the Client by changing some of its options. You can do it manually by invoking SystoLOCK Tools:
These options can also be controlled via registry, see these instructions for guidance on how to set them via GPO.
Windows client relies (more often than not) on the local service called "Smart Card" (SCardSvr). Make sure the service is running and is set to start automatically. Consult this chapter to configure smart card redirection properly.
¶ Networking considerations
The client will connect to the authentication servers via TCP port 21572. Make sure any intermediate firewalls do not block this communication.
¶ Possible Windows 7 Issue
If you need to install SystoLOCK on Windows 7, be aware that doe to outdated cryptographic modules and if some optional updates are missing, installation of SystoLOCK Client may encounter following problems:
- Manual installation may fail
- Unattended installation may hang
- Installation phase 'Installing driver' may take an unusually long time to complete
The problem can be mitigated by installing two Windows Update packages: KB3033929 and KB2921916 (in this order). The first package is still obtainable from Microsoft, while the second one is not.
You can obtain these packages from the following sources:
¶ For 64-Bit Systems
- KB3033929 Download from microsoft.com
- KB2921916
Download from thehotfixshare.net, use at your own risk!
¶ For 32-Bit Systems
- KB3033929 Download from microsoft.com
- KB2921916 Download from thehotfixshare.net, use at your own risk!
Systola cannot be made liable for any damage resulting from installing these packages