Learn how to download the Cloud Identity agent from the
hub and install it on a supported Windows server.
Before installing the Cloud Identity agent,
verify that the time on the agent host is correct and synced to
a valid NTP server. If the time on the server host is incorrect,
the Cloud Identity Engine may not be able to sync your directory
After you activate your
Cloud Identity Engine instance, download the Cloud Identity agent
from the Cloud Identity Engine app on the hub and install it on
a supported Windows server. Palo Alto Networks strongly recommends
using TLS 1.3. If TLS 1.2 is not already enabled on the Windows
server that will host the agent, install the update to enable TLS 1.2 before you install
Because the User-ID agent and the
Cloud Identity agent require the same port, you must use a dedicated
host for each agent type. Do not install both agent types on the
Log in to the hub and select the Cloud
Identity Engine app.
When the download is complete, open the DaInstall.msi
installation file for the agent on the Windows server where you
plan to install the agent.
If you are also using the Terminal Server
(TS) agent, we recommend that you do not install the Cloud Identity
agent on the same host as the TS agent. If you must install both
agents on the same host, you must change the default listening
port on the TS agent.
Follow the prompts in the installation wizard to install
Navigate to the location of the Cloud Identity agent.
The default location is C:\Program Files (x86)\Palo Alto
Networks\Cloud Identity Agent\.