Sophos Client Authentication Agent issue with MSI package and the certificate

Hi Nick KEY ,

Thank you for reaching out to the community, you can navigate to Authentication > Client Downloads > Authentication clients: 
REF - Authentication clients and server CAs for computers

Hi,

dont understand what you mean. What should I download exactly for Agent with certificate? As wrote, the EXE file does work fine, only the MSI does not work and it will have the certificate file too

Download MSI: Download and share the MSI authentication client (client authentication agent) with users.

Download CA for MSI: Download the CA certificate and share it with users.

Additional Note, - If you reset the firewall to factory configuration, it reconfigures the CA certificate. Users must reinstall the CA certificate.

ok understand, but I cannot see the download files?

You mean the content or the installation destination ? 

destination and content

Destination - C:\Program Files (x86)\Sophos\Client Authentication Agent\
Content - Just the client exe and cert installation guide.

Sorry again, I cannot find any MSI files to download. Where can I download the Files? And after download, I wan to deploy the MSI agent on many machines. How can I be sure that the CA is installed too? If I install the EXE File, it is installing the CA too and I dont need any thing, but with only MSI Installation does not work the CA

Sorry again, I cannot find any MSI files to download. Where can I download the Files? And after download, I wan to deploy the MSI agent on many machines. How can I be sure that the CA is installed too? If I install the EXE File, it is installing the CA too and I dont need any thing, but with only MSI Installation does not work the CA

You can use the GPO method to deploy this to many clients. You'll be able to download the following:

CAASetup.msi - Download and share the MSI authentication client (client authentication agent) with users.
ClientAuthentication_CA.pem - Download the CA certificate and share it with users.

Either I cannot explain my issue or you understand my question wrong.. I dont use GPO for deploying, I am using SCCM from Microsoft to deploy. So I can deploy the the CAASetup.msi and it works, but how can I add the CA in that MSI file to deploy?

You can refer - Creating an MSI Package OR Create the Windows Installer File (*.msi)

Why should I create a MSI package? CAAsetup.msi is a MSI Package? You mean for CA? IS there any way to deploy CAAsetup.msi with CA together? I dont want to experiment and create any MSI Package.

You asked how can I add the CA in that MSI file to deploy, hence I suggested so that instead of deploying it separately you can deploy it in one go...

No, I asked I wan tot deploy the CAAsetup.msi file with SCCM, If I deploy the CAAsetup.msi with SCCM, it works, but it missing the CA File. So again my question, is there any way to deploy CAAsetup.msi and CA,File. Do you any solution?

CA file will be separate and no way to deploy together...

Ok, I understand. I can deploy CA file with my SCCM, but where should be located the CA file? Why if I install the CAAsetup.exe the CA is installed?

You can add the CA via MMC.

I have to do that manually, I dont thing I can deploy CA with MMC  using  SCCM