You can deploy SecureAnywhere to endpoints using a variety of methods, depending on your business requirements and network size. An endpoint can be a Windows PC, laptop, server, or virtual server installed in your network. 


Devices must use an Endpoint Protection Keycode before they can report into the Management portal.  During the SecureAnywhere installation process, you will be prompted to enter the keycode for your site.  If you don't know your keycode, it can be obtained from the Resourced tab of the Management Portal.


Using the SecureAnywhere Installer

            

You can deploy the SecureAnywhere installer file using one of these methods:

            

  • Install SecureAnywhere on each endpoint. Use this option if installing on a Mac.
  • Send emails to end users, so they can install the software by clicking on the link provided in the email template.
  • Rename the executable file using your keycode. This method is useful if you plan to use your own deployment tool and if you prefer not to use MSI commands to run the installation in the background.
  • Use additional commands with the executable file to deploy it in the background.
  • Use command-line options with the installer to deploy to endpoints that are behind a proxy server.

            

To use the SecureAnywhere installer for Windows:

            

  1. On the endpoint, download the SecureAnywhere installer file.

    The installer file is available from the Resources tab or by clicking this link:

    http://anywhere.webrootcloudav.com/zerol/wsasme.exe

            

  1. In the installation panel, enter the keycode.

    Your keycode displays in the Resources tab.

            

  1. Optionally, you can click the Installation options button at the bottom of the installation panel and set these options: 
    • Create a shortcut to SecureAnywhere on the desktop — This option places a shortcut icon on the Windows Desktop for SecureAnywhere.
    • Randomize the installed filename to bypass certain infections — This option changes the Webroot installation filename to a random name for example, “QrXC251G.exe”, which prevents malware from detecting and blocking Webroot’s installation file.
    • Protect the SecureAnywhere files, processes, and memory from modification — This option enables self protection and the CAPTCHA prompts. CAPTCHA requires you to read distorted text on the screen and enter the text in a field before performing any critical actions.
    • Change Language — To determine the language displayed in SecureAnywhere, click the Change Language button and select from the supported languages. You can only determine the displayed language during installation, not after.

            

  1. Click the Agree and Install button.

    During installation, SecureAnywhere runs an immediate scan on the endpoint.

            

To use the SecureAnywhere installer for Mac:

            

  1. On the endpoint, download the SecureAnywhere installer file.

    The installer file is available from the Resources tab or by clicking this link:

    http://anywhere.webrootcloudav.com/zerol/wsamac.dmg

            

  1. Download the SecureAnywhere installer to your Mac.

  2. Double-click wsamac.dmg to open the installer.

  3. Double-click the Applications folder to open it.
       
  4. In the Applications folder, double-click the Webroot SecureAnywhere icon to begin activation.
                   
  5. In the first activation window, from the Language Selection drop-down menu, select a language and click the Next button.


Note: Make sure you select the appropriate language. Once SecureAnywhere installs, you cannot change it.

            

  1. In the next panel, enter your keycode and click the Activate button.

            

  1. Follow any remaining on-screen prompts to complete the installation.

            

To send an email to end users so they can install SecureAnywhere themselves:

            

  1. Click the Resources tab.

  2. Click the Email template link.

    The email template displays in the How to get started window.

            

  1. Cut and paste the text into an email message. The link adds the correct keycode for the user. Send the email to the users.

    The user clicks the link to begin installation. The program installs in the background, with the correct keycode already entered. When the process completes, a Webroot icon displays in the endpoint's system tray.

            

To run a background installation by renaming the executable file:

            

You can deploy SecureAnywhere by renaming the executable file with the keycode. This method is useful if you plan to use your own deployment tool and if you prefer not to use MSI commands to run the installation in the background. You can also use the email template, as described above, which is preconfigured to include a renamed installer file with your keycode.

            

Note: In User Account Control environments, the account used to run the installer must have local admin rights. You must run the installer from a process that has elevated privileges in UAC environments, to prevent the end user from seeing a UAC prompt.

            

  1. On the endpoint, download the SecureAnywhere installer file:

    http://anywhere.webrootcloudav.com/zerol/wsasme.exe

            

  1. Rename the installer file by replacing wsasme with your keycode.

    The resulting file name will have this format: XXXX-XXXX-XXXX-XXXX-XXXX.exe

            

  1. Install the SecureAnywhere software on your endpoints, using your own deployment tool.

            

To run a background installation from a command line:

            

  1. On the endpoint, download the SecureAnywhere installer file:

    http://anywhere.webrootcloudav.com/zerol/wsasme.exe

            

  1. Run the installer from a command line, using any of the command options listed in the following table. More options are available; for more information, contact our support team.

    Command Lines for Windows

    COMMAND LINE

    DESCRIPTION

    /key=keycode

    Installs with the provided keycode, with or without hyphens.

     For example: 

    wsasme.exe /key=xxxx-xxxx-xxxx-xxxx-xxxx

    /silent

    Installs in the background.

    /nostart

    Installs without starting SecureAnywhere.

    /lockautouninstall=password

    Allows automatic uninstallation of SecureAnywhere using the password you specify. This option is useful if you need to silently uninstall SecureAnywhere later.

    To uninstall, use the /autouninstall command.

    When you use /lockautouninstall, SecureAnywhere is not included in the Add/Remove Programs list in the Control Panel. Use the /exeshowaddremove command to include SecureAnywhere in Add/Remove Programs.

    /autouninstall=password

    Corresponds to /lockautouninstall. Example: wsasme.exe/autouninstall=password

    By default, SecureAnywhere does not display in the Add/Remove Programs list in the Control Panel, which prevents the user from removing the software in unmanaged mode.

    -clone

    For cloned machines/VMs use this to have the agent create a persistent, unique value on the PC which will change what is displayed in the portal for the machine IDs and the hostname of the PC.

    The product log will indicate this flag being present for the administrator to be aware of which PC they're looking at, for example "Applied unique machine ID: C8137921" where C8137921 matches the hostname, for example, PCHOSTNAME-C8137921, as well as the first 8 bytes of both the InstanceMID and DeviceMID to allow each of them to be identifiable and different than the original IDs.

    This value will persist if the agent is uninstalled/reinstalled so that existing agents won't move to other IDs. If the OS is reinstalled, the ID will change.

    Example:

    wsasme.exe /key=xxxx-xxxx-xxxx-xxxx-xxxx /silent -clone

    Note: For use when InstanceMID's are matching causing duplicates in the console or endpoints replacing endpoints at each poll interval.

    /exeshowaddremove

    Includes SecureAnywhere in the Control Panel Add/Remove Programs list.

    Example: 

    wsasme.exe /key=xxxx-xxxx-xxxx-xxxx /lockautouninstall=password/exeshowaddremove

    Note: Adding SecureAnywhere to Add/Remove Programs enables the endpoint user to remove the software in unmanaged mode.

    /group=groupcode

    Command line switch for deploying directly into groups.

    Example:

    wsasme.exe /key=xxxxxxxxx /group=-135260017840748808 /silent

    Assign endpoints to a specific group by selecting the group you want to add endpoints to, then from the Actions drop-down menu, select Deploy Endpoints to this Group. Note the GROUPCODE.

    Other requirements:

    • The group must already exist in the console.
    • This only works new for new installs on systems that have never been seen by the console previously.

    Example for command line: 

    msiexec /i "C:\wsasme.msi" GUILIC="XXXX-XXXX-XXXX-XXXX" CMDLINE="SME,quiet,Group=-135260017840748808" /qn /l*v %windir%\wsa_install_log.txt

    For MSI installs you can use command line and an MSI editor.

    Example for MSI Editor in CMDLINE field: Group=-135260017840748808

    -proxyhost=X -proxyport=X -proxyuser=X -proxypass=X -proxyauth=#

    Specifies proxy settings.

    Note: If the endpoint connects through a proxy server, SecureAnywhere will automatically detect the proxy settings. SecureAnywhere checks for changes to the proxy settings every 15 minutes and when the endpoint restarts. We recommend using auto-detection for proxy settings; however, you can use command-line options if you prefer.

    To enable proxy support, use these command-line options: wsasme.exe -proxyhost=nn.nn.nn.nn -proxyauth=n (where n can be 0=Any, 1=Basic, 2=Digest, 3=Negotiate, 4=NTLM) -proxyuser=proxyuser -proxypass=password -proxyport=port_number

    We recommend that you use a specific value for-proxyauth, instead of 0 (any). The any option requires the endpoint to search through all authentication types, which might result in unnecessary errors on proxy servers as well as delayed communications.

    If you use this command-line option, use all parameters and blank out any value you don't need with double quotes, for example: proxypass=""

    /lang=LanguageCode

    Specifies the language to use for the product, rather than allow default language detection. Codes include:

    en — English

    ja — Japanese

    es — Spanish

    fr — French

    de — German

    it — Italian

    nl — Dutch

    ko — Korean

    zh-cn — Simplified Chinese

    pt — Brazilian Portuguese

    ru — Russian

    tr — Turkish

    zh-tw — Traditional Chinese

    Example: 

    wsasme.exe /key=xxxxxxxxxxxx /silent /lang=ru

     

    Command Lines for Mac

    COMMAND LINE

    DESCRIPTION

    -silent

    Installation will be silent.

    sudo "/Applications/Webroot SecureAnywhere.app/Contents/MacOS/Webroot SecureAnywhere" install -keycode=<keycode> -silent 

    -proxy_auth=

    -proxy_host=

    -proxy_port=

    -proxy_user=

    -proxy_pass=

    Designates proxy install arguments including authentication method, host, port, user and password.

     auth_any_0 

    auth_basic_1 

    auth_digest_2 

    auth_negociate_3 

    auth_ntlm_4 

     open "/Applications/Webroot SecureAnywhere.app" --args install -keycode=<keycode> -proxy_auth=auth_any_0 -proxy_host=<host> -proxy_port=<port> -proxy_user=<user> -proxy_pass=<password> 

    -keycode=

    Installation will not prompt for keycode.

    open "/Applications/Webroot SecureAnywhere.app" --args install -keycode=<keycode>

    -language=

    Installs with designated language.

    open "/Applications/Webroot SecureAnywhere.app" --args install -language=en 


    Full Stringsudo "/Applications/Webroot SecureAnywhere.app/Contents/MacOS/Webroot SecureAnywhere" install -keycode=XXXX-XXXX-XXXX-XXXX-XXXX -language=en –silent -proxy_auth=auth_basic_1 -proxy_host=proxy.proxy.com -proxy_port=8080 -proxy_user=proxyuser.com -proxy_pass=proxypass