Ninja RMM idemeum agent installation
This guide describes how to mass deploy idemeum agent with Ninja One RMM.
— Nik Pot
![Ninja RMM idemeum agent installation](/content/images/size/w1600/2024/06/ninjaone-social.jpg)
Overview
In this guide we will take a look at how to deploy idemeum desktop agent with a parametrized script. Simply, you will store custom fields for each of your customers in Ninja RMM and use one simple script to deploy agent to each customer workstation.
If you simply want to install to several machines, you can grab the command line script and execute it directly on customer workstation.
![](https://docs.idemeum.com/content/images/2024/05/j-e-schoondergang-NKeiqXQ45_4-unsplash-1.jpg)
Install Windows agent
Obtain idemeum deployment variables
As a first step, we will download a simple CSV file that will include all customer tenant idemeum variables required for deployment:
tenant FQDN
- URL of the customer tenantclient id
andclient secret
- required for desktop agent to connect to idemeum cloudmaster key
- customer tenant encryption key that is used for zero-knowledge encryption
![](https://docs.idemeum.com/content/images/2024/05/tom-byrom-wgMzQo-v474-unsplash.jpg)
To get the CSV:
- Access admin portal of your MSP idemeum tenant
- Navigate to
Customers
→Add customer
→Download desktop installer CSV
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.23.16@2x.png)
- First, you will be presented with a parametrized command that you can use for Windows agent deployment
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.24.24@2x.png)
- And then the CSV file will be downloaded with all customer tenant data. For each tenant you will have FQDN, client id, client secret, and master key.
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.25.10@2x.png)
Create organization fields in Ninja
There are several ways you can leverage custom fields in Ninja to deploy idemeum (use documentation fields, global device fields, etc.). In this guide we will use Global device fields
and associate them with each organization in Ninja One.
- Access
Administration
→Devices
→Global custom fields
and then create one field for each of the required 4 parameters. As an example see how we created 4 fields in our demo Ninja tenant.
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.28.54@2x.png)
- When you create these field make sure:
- You choose
Read only
forAutomations
- Choose
Organization
forScope id
- You choose
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.31.13@2x.png)
Assign variables to each organization
Now we can leverage the CSV file downloaded in the previous section to assign idemeum deployment variables to each organization in Ninja.
- Navigate to Ninja dashboard and access the organization that you want to set up
- Click on the
Custom fields
tab at the top - Click
Edit
, then grab the CSV, extract the values for a customer tenant and assign values to custom fields
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.35.22@2x.png)
Create deployment script in Ninja
Now we will create a deployment script in Ninja that will extract variables from custom fields for each tenant, will create the deployment command in PowerShell and deploy idemeum agent to Windows workstation.
- Navigate to
Administration
→Library
→Automation
- Add new script
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-20.37.56@2x.png)
- You can now add the following script as listed below.
# Pull idemeum variables for organization
$fqdn = (Ninja-Property-Get idemeumFqdn).ToString()
$clientId = (Ninja-Property-Get idemeumClientId).ToString()
$clientSecret = (Ninja-Property-Get idemeumClientSecret).ToString()
$masterKey = (Ninja-Property-Get idemeumMasterKey).ToString()
Set-ExecutionPolicy RemoteSigned -Scope Process -Force;
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12;
cd (Get-Item -Path $env:TEMP).FullName;
Invoke-WebRequest -Uri "https://asset.idemeum.com/desktoplogin/idemeumDesktopAppInstall.ps1" -OutFile "idemeumDesktopAppInstall.ps1" ;
.\idemeumDesktopAppInstall.ps1 -tenantFQDN $fqdn -clientId $clientId -clientSecret $clientSecret -masterKey $masterKey -restartAfterInstall 'false'
- Here is how we configured this script in our Ninja instance
![](https://docs.idemeum.com/content/images/2024/08/CleanShot-2024-08-29-at-21.10.04@2x.png)
Deploy script to workstations
You can now navigate to any workstation and deploy the created script. The variables will be pulled from the organization and deployment PowerShell command will be pushed to workstation.
Update Windows agent
The update script is the same as the installation one. There is no need to create any additional deployment scripts. Simply deploy the same script that we created above. The script will check the installed version and will update to the latest if new package is available.
Uninstall Windows agent
You can also create idemeum uninstall script. This script will be the same for every organization as it does not depend on any parameters.
Please use the following script to uninstall idemeum on Windows.
Start-Process -FilePath "msiexec.exe" -ArgumentList "/x {93B9CC98-6004-411E-A8BF-88F7C3BC5541} /qn /norestart" -Wait
Start-Process -FilePath "msiexec.exe" -ArgumentList "/x {71216D26-573B-402B-A3F5-A7CB9F950CFF} /qn /norestart" -Wait