Troubleshooting Installation Issues
If you encounter any issue installing the Agent, please check out the Troubleshooting section of the Knowledge Base.
If you are a a regular user (not an admin), you will be able to download the Revealed Agent only. You cannot download the Hidden Agent.
Notes for the Mac Users
At the moment, Teramind on Mac has limited functionalities and are only supported on macOS 15 (Sequoia), macOS 14 (Sonoma), macOS 13 (Ventura), macOS 12 (Monterey), macOS 11 (Big Sur), macOS 10.15 (Catalina) and macOS 10.14 (Mojave). Check out this article to learn which Teramind features are available on the Mac.
You cannot run the installer from the browser directly on Mac. You need to run it from the Launcher / Finder.
Introduction
Teramind Agent is the application that runs natively on the user’s computer, tracks their activities and enforces any behavior policies and rules defined on the Teramind Dashboard. It must be installed on every machine that you want to track. To download the Agent:
For more information on the Agent specifications and requirements, please see the Teramind Agent Specifications and Supported Platforms article.
Agent Types
Teramind has two types of Agents you can choose from:
1. Stealth Agent, also know as the Hidden Agent or Silent Agent
2. Revealed Agent, also known as the Visible or Freelance Agent
This article, What is the difference between the Revealed Agent and the Hidden Agent? describes the difference between the two agents.
Local Installation
Revealed Agent
The Revealed Agent tracks users and computers but only when the user is logged in on the Agent. When a user launches a Revealed Agent, they have to log in using an account created in the Teramind Dashboard by an administrator. All the activities tracked will be linked to this account. Since the hours they work are clearly defined by the clock-in and clock-out times from the Revealed Teramind Agent, the payroll can be calculated, and tasks can be assigned to the users. This Agent is the perfect choice for monitoring contractors, vendors, and freelancers or when you want to let your employees choose how and when they are to be monitored.
Downloading the Revealed Agent (Cloud)
To download the Revealed Agent:
1. Click your name near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Download Agent screen:
3. Click the Revealed Agent tab from the Download Agent screen.
4. Click the Download Windows installer button or the Download MacOS installer button to download the installer.
5. You can also click the small Copy icon to copy the URL into the clipboard, open it in your browser, save the installer file on a USB stick, and take it to the target computer(s). The same installer can be used to install the Revealed Agent on multiple computers.
6. Click the Send email instructions to me link to get the instructions and download links to your email.
a) The email will look like this:
7. Click the Invite users option to create new employees and send invitations to their email addresses to install the Agent.
a) When you click the Invite user button a new window will pop up:
Enter the FIRST NAME, LAST NAME, and EMAIL address of an employee. You can add/remove employees by clicking the small Plus or Minus button next to a row. When done, click the Invite users button. Note that if you enter the email address of an existing employee, it will fail with the message “Email is already in use”.
b) When you click the Invite users button, the user will be created and added to the employee list:
For more information about the Employees screen, check out the Employees section on the User Guide.
c) The user will receive an email with the invitation:
The user can click the Windows or macOS download link to download and install the Agent on their computer. The user can use the Username and Password included in the email to log into the Revealed Agent and if allowed, log into the Dashboard.
Check out the Using the Revealed Agent article on the Knowledge Base to learn how a user can use it.
Your can turn on the User can login to Teramind Dashboard option under the Employees > Account Info tab to let a regular user log into the Dashboard and access their information.
8. Near the bottom of the screen, you will see links to the Antivirus Guide and other tutorials to help you with the deployment process.
If you are using an installation script or other automation, you can get the Agent download links from the Dashboard or though the API. This article, How to Obtain the Agent Download Links (Cloud) shows you how.
Downloading the Revealed Agent (On-Premise)
To download the Revealed Agent, do the following:
1. Click your name near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Welcome to Teramind screen:
3. On the Install Agents screen, choose Direct file download.
4. Click the WINDOWS 8+ REVEALED AGENT button to download the Windows Agent.
5. Click the MACOS REVEALED AGENT button to download the Mac Agent.
Installing the Revealed Agent (Windows)
Run the Agent installer file on the computer. Note that, you will need administrator privileges to install the Agent properly.
1. Click the Begin installation button to install the Agent.
2. When the installation is complete, the user can launch the Agent from the Start Menu (Windows).
Installing the Revealed Agent (Mac)
1. Download the pkg file.
2. Rename the pkg file to include any optional parameters (see the Agent Installation/Configuration Parameters (Mac) section to learn more).
3. Open it and the installation dialog will be open:
3. Click the Continue button. You will be taken to the next step, Destination Select:
4. Click the Continue button. You will be taken to the next step, Installation Type:
5. Click Install button. You will be shown the Installer dialog:
6. Enter your username and password and then click the Install Software button. The installation will start. When it finishes, you will see the The installation was successful message:
7. Click the Close button to finish the installation.
8. After you have installed the agent, you will need to enable a few macOS permissions for the agent to be able to record screen and other activities properly. Please check out this article to learn how to enable those permissions.
Enrolling: Adding Users to the Dashboard
After you have installed the Revealed Agent on a user's computer, the user will be able to log into the revealed agent using their employee account in the Teramind dashboard. If an employee account has not yet been created, you will need to add them to the Teramind Dashboard so that they can be tracked properly. This article, How to add an employee / user / computer shows you how you can do it.
Using the Revealed Agent
Check out this article to learn how to use the Revealed Agent: How to use the Revealed Agent.
Hidden Agent
The Hidden/Stealth Agent is useful when you do not want your users to know that they are being monitored.
It tracks the user as soon as they log into Windows or macOS. Both the user and computer will appear automatically on the Dashboard once the Agent connects, which is usually within about a minute after installation or after the monitored user first logs in. The computer names are taken directly from the hostname configured in Windows or macOS. It is recommended that the computer name be unique to avoid confusion. If you plan to rename the computer, it's best to do so before installing the Agent. If a computer is renamed after the Agent is installed, Teramind will auto-update the computer name in the Dashboard as long as the previous computer account isn't deleted. However, this usually results in a new employee account being created by the Agent to reflect the current computer name.
Downloading the Hidden Agent (Cloud)
The Hidden Agent download option is hidden from a regular user. Only an admin can download a Hidden Agent from the agent download screen.
To download the Hidden Agent, do the following:
1. Click your name near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Download Agent screen:
3. Click the Stealth Agent tab.
4. Click the Download Windows installer button or the Download MacOS installer button to download the installer.
5. Near the bottom of the screen, you will see links to the Antivirus Guide and other tutorials to help you with the deployment process.
If you are using an installation script or other automation, you can get the Agent download links from the Dashboard or though the API. This article, How to Obtain the Agent Download Links (Cloud) shows you how.
Downloading the Hidden Agent (On-Premise)
The Hidden Agent download option is hidden from a regular user. Only an admin can download a Hidden Agent from this screen.
To download the Hidden Agent, do the following:
1. Click your name near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Welcome to Teramind screen:
3. On the Install Agents screen, choose Direct file download.
4. Click the WINDOWS 8+ 64-BIT MSI or the WINDOWS 8+ 32-BIT MSI button to download the Windows Agent.
5. Click the MACOS HIDDEN AGENT button to download the Mac Agent.
After you have installed the Mac Hidden Agent, you will need to enable a few macOS permissions for the agent to be able to record screen and other activities properly. Please follow the steps under the Setting the macOS Permissions for the Hidden Agent section below.
Installing the Hidden Agent – Command Line (Windows/Cloud)
The Hidden Agent download option is hidden from a regular user. Only an admin can download a Hidden Agent from this screen.
MSIEXEC can be used in either command line or from within a script, as follows:
msiexec /i <path-to-teramind-agent.msi> TMINSTANCE=<instance name> /qn
<instance>
can be the instance name or instance ID. For example, “mycompany
”, or “__b89a5c47a3cdd45682c21d3f764218c2aed88bd5
”
For example:
msiexec /i "C:\Temp\Install Test\teramind_agent_x64.msi" TMINSTANCE=mycompany /qn
Or:
msiexec /i "C:\Temp\Install Test\teramind_agent_x64.msi" TMINSTANCE=__b89a5c47a3cdd45682c21d3f764218c2aed88bd5 /qn
If the Agent file name already contains the instance name/ID (within a -i()
parameter), and you don't include the /qn
parameter (silent install), then you don't have to specify the TMINSTANCE
parameter.
For example:
msiexec /i "C:\Temp\Install Test\teramind_agent_x64_s-i(mycompany).msi"
You can use optional installation parameters to configure the installation and how the agent behaves. Please see the Agent Installation Parameters (Windows) section below for more information.
If you are using an installation script or other automation, you can get the Agent download links from the Dashboard or though the API. This article, How to Obtain the Agent Download Links (Cloud) shows you how.
Installing the Hidden Agent – Command Line (Windows/On-Premise)
The Hidden Agent download option is hidden from a regular user. Only an admin can download a Hidden Agent from this screen.
To install the Hidden Agent via the command line:
1. Click your name near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Welcome to Teramind screen:
3. On the Install Agents screen, choose Via command line option.
4. Copy the 64-bit or 32-bit command and run it from your Windows Command Prompt (in admin mode). Note that, the commands/links will be unique to your deployment.
You can use optional installation parameters to configure the installation and how the agent behaves. Please see the Agent Installation Parameters (Windows) section below for more information.
Installing the Hidden Agent – Command Line (Mac/Cloud)
The Hidden Agent download option is hidden from a regular user. Only an admin can download a Hidden Agent from this screen.
To install the Mac Hidden Agent run this command in the Terminal (Applications > Utilities > Terminal):
sudo installer <path-to-teramind-mac-installer> -target /
The <path-to-teramind-mac-installer>
is the path where you saved the installation package (.pkg
file). For example:
sudo installer -pkg /User/John/Downloads/tmagent-i(__261e84a5119d483d322c3a398d159d493fc6b803).pkg -target /
You can get the package from the Hidden Agent’s download screen.
You can use optional installation parameters to configure the installation and how the agent behaves. Please see the Agent Installation Parameters (Mac) section below for more information.
After you have installed the Mac Hidden Agent, you will need to enable a few macOS permissions for the agent to be able to record screen and other activities properly. Please follow the steps under the Setting the macOS Permissions for the Hidden Agent section below.
Installing the Hidden Agent – Command Line (Mac/On-Premise)
The Hidden Agent download option is hidden from a regular user. Only an admin can download a Hidden Agent from this screen.
To install the Hidden Agent via the command line:
1. Click your name near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Welcome to Teramind screen:
3. On the Install Agents screen, choose Via command line option.
4. Copy the command and run it from your Mac Terminal. Note that, the command/link will be unique to your deployment. You can use optional installation parameters to configure the installation and how the agent behaves. Please see the Agent Installation Parameters (Mac) section below for more information.
5. After you have installed the agent, you will need to enable a few macOS permissions for the agent to be able to record screen and other activities properly. Please check out this article to learn how to enable those permissions.
Enrolling: Adding Users to the Dashboard
The employee account will be created automatically when the Agent is installed on a user's computer - you do not need to add them manually to the Dashboard. However, you can still edit the employee’s profile.
Protecting the Agent Installation
You can optionally install the Teramind Hidden Agent in a protected mode using the DO_PROTECTION installation parameter (see below). The protection mode makes the agent installation more secure and prevents common tampering. The How to protect your Agent installation from tampering article explains it in more details.
Agent Installation/Configuration Parameters (Windows)
You can use some optional parameters as command line options or through the agent configuration file.
Agent Configuration File
Some of the installation parameters (where indicated) can also be applied through the Agent configuration file (config.cfg) post-installation. For example, you can use a command like: msiexec /i teramind_agent_v5.0.0_x64.msi TMROUTER=10.55.55.58:235
during the installation. Or, you can add this line, router=10.55.55.58:235
in the config file.
The config file is usually located in the following locations:
Hidden Agent:
C:\ProgramData\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\config
Revealed Agent:
C:\ProgramData\Teramind Agent\config
Here, <agent version>
is the Agent version, for example, 20.0.1084
. <guid>
is the globally unique identifier of the Agent. For example, {551DD8F9-2009-4565-B57B-1390B7DA6AF0}
. Check out this article to learn how to find your Agent version. If the file doesn't exist, create one in a text editor.
Installation/Config File Parameter | Description |
Installation Parameter:
Config File Parameter:
| Enables silent installation. For example, msiexec /i teramind_agent_v5.0.0_x64.msi /qn |
Installation Parameter:
Config File Parameter:
| Can be used to assign the load balancer IP and port. For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMROUTER=10.55.55.58:235 Note that the |
Installation Parameter:
Config File Parameter:
| Assigns the instance name. Provide an msiexec /i teramind_agent_v5.0.0_x64.msi TMINSTANCE=onsite This option isn't required for Cloud deployments since the Cloud installers already have the instance name embedded. |
Installation Parameter:
Config File Parameter:
| Turns audio monitoring on (1) or off (0). For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMDISABLEAUDIO=1 This is similar to toggling the Audio option on the Monitoring Settings > Monitoring Profile screen. |
Installation Parameter:
Config File Parameter:
| Supported on the Hidden Agent only. Can be used to override the user’s domain/computer name with the specified msiexec /i teramind_agent_v5.0.0_x64.msi TMDOMAINOVERRIDE=acme.com |
Installation Parameter:
Config File Parameter:
| Installs the hidden agent in protected mode. For example, msiexec /i teramind_agent_v5.0.0_x64.msi DO_PROTECTION=yes Installing the Agent in protected mode helps:
You can specify the protection password in the Settings > Security > Agent Removal Protection screen. Please see the Agent Removal Protection section on the Teramind User Guide for more information. Make sure to set the password before installing the Agent. If you set the password afterwards, there might be problems with managing the Agent and uninstalling it. |
Installation Parameter:
Config File Parameter: | Will disable auto-update of a Cloud Agent. msiexec /i teramind_agent_v0.1.249_x86.msi TMDISABLEAUTOUPDATE=1 This is similar to disabling the ENABLE AUTOMATIC UPDATES option on the Settings > Autoupdate section of the dashboard. |
Installation Parameter:
Config File Parameter:
| Enables installation logging. Replace the msiexec /i teramind_agent_v0.1.249_x86.msi /l*v "C:\Windows\Temp\TM.log" For more information, check out this article: How to collect the Teramind Agent logs. |
Installation Parameter:
Config File Parameter:
| Allows you to specify a directory/folder where the agent will be installed. Replace the msiexec /i teramind_agent_v0.1.249_x86.msi TMROOTDIR="c:\myagent" |
Installation Parameter:
Config File Parameter:
| The Agent has a local proxy server to receive the data from the browser proxy injections. By default, its name is msiexec /i teramind_agent_v0.1.261_x64.msi TMDNSNAME=localhost |
Installation Parameter:
Config File Parameter:
| By default, the Agent name is dwm.exe. However, Windows also has a service with the same name for its Desktop Windows Manager. We've added a new command line parameter, TMAGENTEXE so that you can change the default Agent name to something else to make it more clear and avoid confusion with Windows' own services. You can use the parameter when installing the Agent. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMAGENTEXE=my_agent.exe |
Installation Parameter:
Config File Parameter:
| By default, Teramind Stealth/Hidden Agent isn't shown on the Windows list of installed programs (known as the Add or Remove Programs list or ARP list). If used, this parameter will allow you to add the Stealth/Hidden Agent to the installed programs list on Windows. For example, msiexec /i teramind_agent_v6.0.47_x64.msi TMADDENTRYTOARP=1 |
Installation Parameter:
Config File Parameter:
| If enabled, this option will obfuscate the usernames with an MD5 hash so that they are anonymized. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMHASHUSERNAMES=1 The user will then appear like the example below: |
Installation Parameter:
Config File Parameter:
| This option will let you hide the client IP address from the server. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMHIDERDPCLIENTIP=1 Usually, when you connect to a computer over an RDP session, the Agent sends the IP address of the client to the server. However, for privacy or security reasons, you might not want to expose the client IP to the server. This option will force the Agent to replace the actual IP address with 0.0.0.0. |
Installation Parameter:
Config File Parameter:
| If used, this option will disable (1) or enable (0) the Teramind file driver. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMNOFSDRV=1 This is similar to disabling the FILE DRIVER option on the Monitoring Settings > Advanced screen. |
Installation Parameter:
Config File Parameter:
| If used, this option will enable (1) or disable (0) end-to-end encryption. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMENCRYPTION=1 For more information, please check out the What is End-to-End (E2EE) Encryption and how to use it (On-Premise)? article. |
Installation Parameter:
Config File Parameter:
| Disables (1) or enables (0) the remote troubleshooting feature. For example,
msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMNOREMOTETS =1
Note that this feature only works for the Hidden Agents. |
Installation Parameter:
Config File Parameter:
| Disables (1) or enables (0) the remote troubleshooting feature. For example,
msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMNOREMOTETS =1
Note that this feature only works for the Hidden Agents. |
Installation Parameter:
Config File Parameter:
| Disables (1) or enables (0) the auto-login of the Revealed Agent. If enabled, the user will be able to log into the Agent without requiring the username/password. For example,
msiexec /i teramind_agent_v5.0.0_x64.msi TMREVEALEDPASSWORDLESS=1 TMROUTER=10.55.55.58
Note that the parameter requires some other conditions. For more information check out this article. |
Proxy Configuration
Note that both HTTP and SOCKS proxy should be configured. Only HTTP proxy or only SOCKS proxy isn't sufficient since they tunnel different OSI level protocols.
You can configure a proxy when installing the Agent. You can also configure them from the Agent configuration file (config.cfg) using the following parameters:
Installation Parameter | Config File Parameter | Description | Example |
|
| The HTTP proxy and optional, port address. |
|
|
| SOCKS Host. |
|
|
| Port. |
|
|
| Username. This parameter is optional. |
|
|
| Password. This parameter is optional. |
|
|
| 1 means use SOCKS 5 and 0 means use SOCKS 4. This parameter is optional. If not specified, SOCKS 5 will be used. |
|
Here's an example:
msiexec /i teramind_agent_v5.0.0_x64.msi TMINSTANCE=mycompany TMROUTER=10.55.55.58 TMSOCKSHOST=192.168.56.103 TMSOCKSPORT=1082 TMSOCKSUSER=john TMSOCKSPASSWORD=myP@ssword TMUSESOCKS5=1
Agent Installation/Configuration Parameters (Mac)
You can use optional parameters to change how the Mac Agent is installed or behaves. There are two ways you can set the parameters:
1. Rename the installer/package file to include the –()
parameter. For example:
teramind_agent_v1.235.4632_hidden-do(acme.com).pkg
2. If the Agent is already installed, you can edit the parameters from the agent config file (agent.conf
). For example:
domain-override=aceme.com
The agent.conf is located in your Agent installation folder, e.g., Macintosh HD > usr > local > teramind > agent > etc
Installation/Config File Parameter | Description |
Installation Parameter:
Config File Parameter:
| Assigns the instance name. Provide a Cloud instance name (which can be found from the My Account > Support Pin tab on your Teramind Dashboard) or use teramind_agent_v1.235-i(onsite).pkg This option isn't required for Cloud deployments since the Cloud installer already has the instance name embedded. |
Installation Parameter:
Config File Parameter:
| Can be used to assign the load balancer IP and port. For example, teramind_agent_v1.235-r(10.55.55.58_235).pkg Or, in the config file: router=10.55.55.58:235 Note that the |
Installation Parameter:
Config File Parameter:
| Supported on the Cloud deployments only. The parameter enables ( teramind_agent_v1.235-d(0).pkg Note that auto-update feature is disabled by default on an instance. You will need to contact Teramind Support Team first to active the auto-update feature on your instance. After that, you will need to turn on the ENABLE AUTOMATIC UPDATES option under Settings > Autoupdate on the Dashboard. For more information check out this article. |
Installation Parameter:
Config File Parameter:
| Supported on the Hidden Agent only. Can be used to override the user’s domain/computer name with the specified teramind_agent_v1.235-do(acme.com).pkg Once set, the username will show the new domain name: |
Installation Parameter:
Config File Parameter:
| This parameter can be used to exclude application bundles from the network driver. You will need to exclude applications by their bundle IDs. For example, network-exclude-bundles=com.apple.Safari You can add multiple bundle IDs separated by commas (no spaces), for example, network-exclude-bundles=com.operasoftware.Opera.helper,com.google.Chrome,com.apple.Safari Notes:
|
Installation Parameter:
Config File Parameters:
| These parameters can be used to configure the Agent log. For example, log-settings=file:~/tmagent.log For more information about Agent logging, check out this article: How to collect the Teramind Agent logs. |
Installation Parameter:
Config File Parameters:
| This parameter will let you exclude network traffic from the Teramind Network Driver (NetApp) and the Network monitoring reports. This might be useful for troubleshooting or compatibility purposes (for example, when using an external proxy server).
There are two ways you can exclude the ports:
New Agent Installation:
In the above case, ports 8080 and 443 will be excluded from network monitoring.
Existing Agent Installation:
The Agent will now ignore traffic from ports 8080 and 443. |
Proxy Configuration
Note that both HTTP and SOCKS proxy should be configured. Only HTTP proxy or only SOCKS proxy isn't sufficient since they tunnel different OSI level protocols.
You can configure SOCKS / HTTP proxies when installing the Agent. You can also configure them from the Agent configuration file (agent.conf). Here's an example:
tmagent-stealth-1.234.4626-i(onsite)-r(192.168.1.201)-ssrv(192.168.1.202)-sprt(1080)-susr(user)-spsw(pass)-sv5(0).pkg
The table below lists the parameters and their usage:
SOCKS Proxy
Installation Parameter | Config File Parameter | Description | Example |
|
| SOCKS server address. |
|
|
| Port. |
|
|
| Username. This parameter is optional. |
|
|
| Password. This parameter is optional. |
|
|
| 1 means use SOCKS 5 and 0 means use SOCKS 4. This parameter is optional. If not specified, SOCKS 4 will be used. |
|
HTTP Proxy
Installation Parameter | Config File Parameter | Description | Example |
|
| HTTP server address. |
|
|
| Port. This parameter is optional. |
|
|
| Username. This parameter is optional. |
|
|
| Password. This parameter is optional. |
|
Remote Installation
Check out one of articles below for instructions on how to remotely installation the agent based on your deployment scenario:
Antivirus and Firewall Considerations
The Teramind Agent and its drivers come digitally signed with an extended-validation certificate. We made every effort to coordinate our signature with the major antivirus vendors and, as a result, Teramind will not introduce any issue with the vast majority of antivirus software. Nevertheless, if you encounter any problems while downloading, installing, or updating the Agent, or an Agent not monitoring properly, please consult the Antivirus Configuration Guide.
For instructions on how to uninstall the agent, check out this article: How to uninstall the agent?