Windows Installation Guide

The Twosense Windows Authenticator can be installed either via the GUI or the command line.

• For GUI installation, refer to the GUI Installation section.

• For command line installation, refer to the Command Line Installation section.

• If your organization uses an enterprise antivirus solution or enforces strict firewall rules, additional configurations may be required. Please refer to Anti-Virus Configuration for detailed instructions.

---

Prerequisites

• A supported 64-bit Windows version:

  • Windows 10 version 1803 (OS build 17134) or later

  • Windows 11

• Continuous internet connectivity

• An account or active trial with Twosense. If you don't have one, contact us here to obtain a 30-day trial.

• The Integration Key and Secret Key provided by your Twosense account manager.

• Servers designated as domain controllers are not supported.

---

GUI Installation

1. Download the Twosense Installer MSI. The link will be provided by your Twosense account manager.

2. Double-click on the MSI file to begin the installation process.

3. Enter your Integration Key, Secret Key, and optionally, a Group ID when prompted. This information is provided by your Twosense account manager.

4. Reboot after the installation has finished.

---

Command Line Installation

1. Download Twosense Installer MSI. The link will be provided by your Twosense account manager.

2. Open a Command Prompt or PowerShell (as Administrator), and navigate to the file path where the MSI file is located.

3. Enter the following command (replace with the appropriate MSI filename and parameters): msiexec.exe /i TwosenseAuthenticator-x.y.z.msi /qn+ IKEY="[your key here]" SKEY="[your key here]" GROUPID="[your group id]" \

   Parameters:

   • IKEY: Your integration key. (Required)

   • SKEY: Your secret key. (Required)

   • GROUPID: The group ID for the machine. (Optional)

   • ISDC: Set to 1 if installing on a Domain Controller. If the installation is not on a Domain Controller, this parameter can be omitted. (Optional)

   • IGNORERDP: Set to 1 to bypass Twosense when logging into the machine via RDP. If set to 0 or left unset, Twosense will operate normally during RDP login.

   Notes

   • The values for parameters IKEY, SKEY, and GROUPID are case-sensitive.

   • To disable showing the success/failure message post-installation, change the /qn+ to /qn.

   • To enable logging add /l*v twosense-installer-log.txt to the end of the command. You can specify a different filename or path as needed.

4. Reboot after the installation has finished.

Validation

To check that the installation was successful:

• After rebooting the machine, log in as any user.

• Open the Twosense portal at https://app.twosense.ai/login.

• You should see the login event on the Events page.