Administrator's Guide

for Absolute DDS Agent

www.absolute.com
May 2017
Administrator's Guide for Absolute DDS Agent, Revision 8
This document, as well as the software described in it, is confidential and contains proprietary
information protected by non-disclosure agreements. No part of this document may be reproduced in
any form or disclosed to any party not bound by a non-disclosure agreement without the express written
consent of Absolute Software Corporation.
Absolute Software Corporation reserves the right to revise this document and to periodically make
changes in the content hereof without obligation of such revisions or changes unless required to do so
by prior agreement.
Information contained herein is believed to be correct, but is provided solely for guidance in product
application and not as a warranty of any kind. Absolute Software Corporation assumes no responsibility
for use of this information, nor for any infringements of patents or other rights of third parties resulting
from the use of this information.
Absolute Software Corporation
Suite 1400 Four Bentall Centre
1055 Dunsmuir Street
PO Box 49211
Vancouver, British Columbia
Canada V7X 1K8

2017 Absolute Software Corporation. All rights reserved. Absolute, Computrace, and Persistence are
registered trademarks of Absolute Software Corporation. LoJack is a registered trademark of LoJack
Corporation, used under license by Absolute Software Corporation. LoJack Corporation is not
responsible for any content herein. All other trademarks are property of their respective owners.
For a list of patents issued to Absolute Software Corporation, see www.absolute.com/patents.

2
 Administrator's Guide for Absolute DDS
Agent

Contents
Chapter 1: Introduction 6
About this guide 6
Audience 6
Using this guide 6
About the agent 6
Contacting Absolute Global Support 7
Chapter 2: Installing and managing the agent on Windows devices 8
Device compatibility 8
Firmware persistence 9
Compatibility with BitLocker Drive Encryption 9
Compatibility with other full-disk encryption products 9
File List and Remote File Retrieval 9
Real-Time Technology requirements 9
Downloading and installing the agent on an individual device 10
Before you begin 11
Downloading the Installer 11
Installing the agent on an individual device 12
Installing the agent at the command line 12
Installing the agent using the Installer interface 12
Verifying the agent installation 13
Using the Agent Management utility 13
Using the DDS console 14
Installing the agent on multiple devices 14
Deploying the agent using disk imaging 15
Before you begin 15
Creating the disk image 15
Deploying the agent using SCCM 15
Deploying the agent using Active Directory 15
Managing the agent 16
Starting the Agent Management utility 16
Viewing agent call details 16
Forcing a call to the Monitoring Center 17
Configuring IP proxy settings 17
Upgrading the agent on Windows devices 18
Removing the agent from Windows devices 18
Chapter 3: Installing and managing the agent on Mac devices 19
Device compatibility 19
Downloading and installing the agent on an individual device 19
Before you begin 20
Downloading the Installer 20
Installing the agent on an individual device 20
Installing the agent using the Installer interface 21
Installing the agent at the command line 21
Verifying the agent installation 21
Using the Agent Management utility 22

Absolute DDS 3
 Administrator's Guide for Absolute DDS Agent

Verifying installation of agent version 948 22

Verifying installation of agent version 938 22
Using the DDS console 23
Installing the agent on multiple devices using disk imaging 23
Before you begin 24
Creating the disk image 24
Managing the agent 25
Managing Mac agent version 948 25
Starting the DDS Info agent management utility 25
Viewing the agent's status and call details 26
Forcing a call to the Monitoring Center 26
Forcing a call using the DDSInfo agent management utility 27
Forcing a call from the command line 27
Managing Mac agent version 938 27
Starting the Agent Management utility 28
Viewing the agent's status and call details 28
Forcing a call to the Monitoring Center 29
Forcing a call using the Agent Management utility 29
Forcing a call from the command line 29
Configuring IP proxy settings 30
Changing the default password 30
Upgrading the agent on Mac devices 30
Removing the agent from Mac devices 31
Chapter 4: Installing and managing the agent on Android devices 32
Device compatibility 32
Downloading and installing Absolute DDS Mobile for Android 32
Before you begin 32
Downloading the Absolute DDS Mobile for Android devices Installer 33
Installing Absolute DDS Mobile for Android on your devices 34
Managing the agent using the Absolute DDS Dashboard 35
Setting your password on first use 35
Changing your password 35
Viewing agent status information 36
Viewing the agent log 37
Forcing a test call to the Monitoring Center 37
Sending diagnostic information to Absolute Global Support 37
Upgrading the agent 38
Removing the agent 38
Chapter 5: Installing and managing the Absolute for Chromebooks extension 39
Device compatibility 39
Before you begin 39
Configuring default settings for your Chromebooks 40
Configuring default settings to manage stolen Chromebooks 41
What effect does a deployed kiosk app have on a stolen Chromebook? 42
Adding Chromebooks to your DDSaccount 42
Managing Google account details in the DDS console 43
Adding Google account details to the DDS console 43

Absolute DDS 4
 Administrator's Guide for Absolute DDS
Agent

Editing Google account details 44

Deleting Google account details 45
Downloading and installing the Chromebook extension 45
Removing the Chromebook extension 46
Removing the Chromebook extension from all devices in an organization 46
Removing the Chromebook extension for a specific user 47
Chapter 6: Testing network connectivity using the Network Diagnostics Tool 48
Downloading the Absolute DDS Network Diagnostics Tool 48
Using the Network Diagnostics Tool 48
Viewing the Network Diagnostics log file 49
Glossary 50
Index 54

Absolute DDS 5
Chapter 1: Introduction
The Absolute Data and Device Security (DDS) agent is the part of Absolutes technology that resides in
managed devices. After the agent is initially installed on a device, the agent is activated with the device's
first call to the Monitoring Center. During this activation call, the Monitoring Center assigns a unique
Identifier to the device and creates an inventory record that contains details about the devices
identification points in a database.
This chapter provides information about the agent and how to contact Absolute Global Support.

About this guide

The Administrator's Guide for Absolute DDS Agent provides instructions on how to install and manage
the agent on Windows, Mac, and Android devices.

Audience
This guide is written primarily for users in the Administrator role in the DDS console who perform agent
management tasks, such as downloading Installer packages, installing the agent on devices, and
managing the agent in various ways.

Using this guide

The Administrator's Guide for Absolute DDS Agent for Absolute DDS includes the following chapters:
"Introduction" (this chapter) provides an overview about this guide for use with Absolute DDS.
"Installing and managing the agent on Windows devices" on page 8 provides information about
how to install the agent on individual and multiple Windows devices, and how to manage the
agent.
"Installing and managing the agent on Mac devices" on page 19 provides information about how
to install the agent on individual and multiple Mac devices, and how to manage the agent.
"Installing and managing the Absolute for Chromebooks extension" on page 39 provides
information about how to download and install the Absolute for Chromebooks Extension on
Chromebook devices and how to manage the extension.
"Installing and managing the agent on Android devices" on page 32 provides information about
how to install the agent on Android devices and how to manage the agent.
"Testing network connectivity using the Network Diagnostics Tool" on page 48 provides
information about how to test your devices' ability to connect to the Absolute Monitoring Center.
"Glossary" on page 50 provides a list of commonly used terms and their definitions, and
acronyms that are related to this guide.

About the agent

The Absolute DDS agents are client software that you install on devices you want to manage using
Absolute services. When installation is complete, the agent on each device contacts the Monitoring
Center to obtain a unique Identifier for that device.

Absolute DDS 6
Chapter 1: Introduction Administrator's Guide for Absolute DDS Agent

The agent continues to contact the Monitoring Center on a regular basis to report its location.
Communication between the agent and the Monitoring Center is quick, silent, and requires no input from
you.
The agent remains concealed on your device, and it does not affect system performance or interfere with
Internet activities.

NOTE On certain makes and models, the agent needs to contact the Monitoring Center twice to
complete activation.

Contacting Absolute Global Support

If you have difficulty using or installing the agent, submit a Support case by logging in to the DDS
console, clicking Support on the navigation pane, and clicking Submit a Support Case. For more
information about completing the case submittal form, see "Contacting Absolute Global Support" in the
Absolute DDS 5 User Guide.

You can also contact Absolute Global Support at www.absolute.com/support. Follow the on-screen
instructions to contact technical support for your region. We welcome your questions, comments, and
feature requests.

Absolute DDS 7
Chapter 2: Installing and managing the agent on
Windows devices
This chapter provides information about device compatibility and instructions for installing the agent on
Microsoft Windows devices in the following ways:
Direct installation: used to install the agent on individual devices not connected through a
network. This method requires hands-on contact with each target device. For details about this
type of installation, see "Downloading and installing the agent on an individual device" on page
10.
Batch installation: used to install the agent on multiple devices. For details about this type of
installation, see "Installing the agent on multiple devices" on page 14.

Use the installation method that best suits the prevailing circumstances and your organizations
requirements.
This chapter also includes information about managing your Windows devices. The agent installation
package includes the CTMWeb application, which is the Agent Management utility. You can use the
Agent Management utility to do the following:
Verify that the agent is present, and force agent calls for testing and diagnostic purposes on
individual devices
Confirm the state of the agent in an image, before deploying the image to multiple devices in your
network

This chapter includes the following sections:

Device compatibility
Downloading and installing the agent on individual devices
Installing the agent on multiple devices using disk imaging
Managing the agent

Device compatibility
IMPORTANT Absolute DDS technologies are compatible with most hardware and software encryption
solutions. However, certain considerations may apply. If your devices use a form of data storage
encryption, refer to the Absolute DDS5 User Guide, Chapter 5: Working with Reports, under the heading
"Full-Disk Encryption Software Products and Self-Encrypting Drives Detected". This document is
included in your installation media.

To ensure that your Windows devices are compatible with the agents, you need to meet the following
requirements:
Supported operating systems:
Windows 10
Windows 8.1
Windows 8

NOTE Windows RT 8.x is not supported.

Absolute DDS 8
Chapter 2: Installing and managing the agent on Windows devices Administrator's Guide for Absolute DDS Agent

Windows 7
Windows Vista
Internet connection

If you want to ensure that the agent survives accidental or malicious tampering, confirm that your
Windows devices support Firmware persistence, which is described next.

Firmware persistence
Firmware persistence support is a type of Persistence technology provided by Absolute. Most Original
Equipment Manufacturers (OEMs) integrate this technology within the computer BIOS or firmware.
To see a list of manufacturers who provide Firmware persistence, go to www.absolute.com/bios.

Compatibility with BitLocker Drive Encryption

BitLocker Drive Encryption (BitLocker) is a full-disk encryption feature included in most versions of the
Windows operating system. BitLocker is designed to protect data by providing encryption for the
operating system drive and fixed data drives.
The agent is compatible with BitLocker. When BitLocker is enabled on a device, it is temporarily
suspended during activation of Firmware persistence, which occurs during the first agent call after the
agent is installed. BitLocker is enabled automatically when the device is restarted. This process is also
used during the deactivation of Firmware persistence, which occurs when the agent is removed from the
device.

Compatibility with other full-disk encryption products

The agent is fully compatible with full-disk, and file and folder encryption products. If you use a full-disk
encryption product other than BitLocker, such as McAfee Drive Encryption, ensure that you install the
agent before you install and enable full-disk encryption on the device. For more information, see
Knowledge Base article KB-880 (http://forums.absolute.com/kb.php?a=880&hilit=drive|encryption).

File List and Remote File Retrieval

You can view a list of files from your managed Windows devices and select any essential files you want
to retrieve before invoking Device Freeze or Data Delete. Both the File List and Remote File Retrieval
features work only on Windows devices, and File List works only on Windows devices on which .NET
Framework 2.0 is installed.

Real-Time Technology requirements

Real-Time Technology (RTT) provides further data protection to Windows devices that have an Absolute
agent installed and a mobile broadband adapter that supports SMS messaging.
RTT sends managed devices an SMS message through the SMS Gateway and either instructs the
devices to perform an action, or initiate an immediate agent call.
To take advantage of RTT functionality, your devices need to meet the following requirements:
The RTT feature, including Mobile Broadband Adapter asset tracking and Monitoring Center
Initiated Calling, is enabled for your account or the device. To activate these features, contact
Absolute Global Support.

Absolute DDS 9
 Administrator's Guide for Absolute DDS
Chapter 2: Installing and managing the agent on Windows devices
Agent

The device is running a supported version of the Windows operating system

The agent is installed and the device is regularly calling the Monitoring Center
The device has a valid mobile data subscription that supports SMS messaging
The device has a supported mobile broadband adapter, such as:
Gobi 1000: an embedded mobile broadband adapter available on UMTS and EvDO
networks. Including the following Gobi variants:
Qualcomm UNDP-1
Qualcomm 9202
Dell 5600
HP un2400
Gobi 2000: an embedded mobile broadband adapter available on UMTS and EvDO
networks. Including the following Gobi variants:
Qualcomm 920b
HP un2420
Gobi 3000: an embedded mobile broadband adapter on Windows 7 only and UMTS and
EvDO networks. Including the following Gobi variants:
Sierra Wireless MC8355 (similar to HP un2430)
Dell DW5630 (believed to be made by Novatel Wireless), and,
Option GTM689W
Ericsson F3507g: an embedded UMTS mobile broadband adapter
Ericsson F3607gw: an embedded UMTS mobile broadband adapter
Ericsson F5521gw: embedded UMTS mobile broadband adapter and the following variants
on Windows 7 only:
Dell DW5550
HP hs2340
Novatel Wireless mobile broadband adapters on UMTS and EvDO networks and Novatel
Wireless E362 (similar to HP lt2510) on Windows 7 only
Sierra Wireless mobile broadband adapters: mobile broadband adapters on the UMTS
and CDMA/EvDO networks
Sierra Wireless UMTS mobile broadband adapters
Sierra Wireless MC5720: an embedded CDMA/EvDO mobile broadband adapter
Sierra Wireless MC5725: an embedded CDMA/EvDO mobile broadband adapter

NOTE Some OEM-branded variants of the mobile broadband adapters may be supported as
well.

An active data plan with SMS support for the mobile broadband adapters.

Downloading and installing the agent on an individual device

The instructions in this section apply to installing the agent on individual devices, which requires hands-
on contact with each target device. This installation method is commonly used to install the agent on new
devices that are not connected to a network.

Absolute DDS 10
Chapter 2: Installing and managing the agent on Windows devices Administrator's Guide for Absolute DDS Agent

This section includes the following topics:

Before you begin
Downloading the Installer
Installing the agent on an individual device
Verifying the agent installation

Before you begin

IMPORTANT Follow these instructions to ensure that the agent remains tamper-resistant.

To ensure a trouble-free and secure installation, we recommend that you:

Use a virus-scanning program to ensure that your hardware is free from viruses.
Ensure the device is connected to the Internet.
If the device is not using the BIOS agent, ensure that the primary hard drive is listed first in the
boot order specified in the BIOS.

Downloading the Installer

Before you can install the agent on Windows devices, you need to download the Installer.
The extracted agent Installer package includes the following key components:
Computrace.exe file: Installer in executable file format.
Use this Installer in the following scenarios:
The agent is already installed on the device and you want to upgrade the agent to a new
version. Using this Installer ensures that all agent settings are updated on the device.
You want to use the Installer user interface to install the agent and you want to view the user
interface in a language other than English.
You can use this installer to deploy the agent using the Installer interface or the command line.
MSI Deployment folder containing the Computrace.msi file: Installer in Windows Installer
package format.
The Computrace.msi file is contained in the Windows Installer Package.
You can use this Installer to deploy the agent on new devices using the Installer interface, or at the
command line using msiexec.exe.

NOTE There are no plans to rename these file names at this time.

To download the agent Installer from the DDS console:

1. From your Windows device, log in to the DDS console as an Administrator.
2. On the Home page, scroll down to the bottom of the page and click the Download Packages
link.
3. On the Download Packages page under the Agent Type column, click the most recent Agent
Version of Windows.

Absolute DDS 11
 Administrator's Guide for Absolute DDS
Chapter 2: Installing and managing the agent on Windows devices
Agent

NOTE You may see more than one package because there are different agent versions for
Windows. Select the most recent Agent Version.

4. Depending on your browser and operating system, you may need to click through several dialogs
to Save the .zip folder that includes the installation files to a location of your choice; for example,
to the root folder for command line installations. When the download completes, click Open.
You must extract both the ctmweb.exe and ctmweb.xsl files from the original Windows zip file you
downloaded from the DDS console. Both of these files are needed to run the ctmweb.exe file. You
can copy the files to the hard drive or run them from a USB key or network drive. Copy these files to
the same directory location.
5. From the location where you just saved the .zip folder, extract its contents to a local folder, a
network drive, or to removable media, such as a USB device.

Installing the agent on an individual device

You can use the command line or the user interface to install the agent on a Windows device.

NOTE You must have Administrator privileges to install the agent.

Installing the agent at the command line

You can use the command line to install the agent on a Windows device silently, eliminating the need to
respond to prompts in the user interface.

To install the agent using the command line:

1. Open a Command Prompt window as a user with administrator privileges.
2. Navigate to the appropriate Installer file that you extracted in the task, "Downloading the
Installer" on page 11.
3. Use one of the following methods to start the installation:
Silent installation of the executable file, type:
Computrace.exe -sp/s
Silent installation of the executable file with a log file, type:
Computrace.exe -sp/s /f2C:\tmp\Computrace.log
Silent installation of the Windows Installer package, type:
msiexec.exe /i Computrace.msi /qn
4. Press Enter. Depending on your operating systems security settings, you may see a security
dialog, which you can accept.

Installing the agent using the Installer interface

To install the agent on a device using the InstallShield wizard:
1. Navigate to the appropriate Installer file that you extracted in the task, "Downloading the
Installer" on page 11.

Absolute DDS 12
Chapter 2: Installing and managing the agent on Windows devices Administrator's Guide for Absolute DDS Agent

2. Double-click the Installer file (Computrace.exe or CompuTrace.msi) to open the InstallShield

wizard.

NOTE If the User Account Control dialog shows, click Yes to permit the install file to be
installed.

3. If you are using the Installer in executable file format (Computrace.exe), select your preferred
language for the InstallShield wizard and click OK.
4. Click Next and then click Install to start the installation.
5. Click Finish to complete the agent install and exit the InstallShield wizard.

Now you can verify the installation of the agent on your Windows device, as instructed in the next
section.

Verifying the agent installation

You can verify that the agent was installed successfully on your devices in the following ways:
Using the Agent Management utility
Using the DDS console

Using the Agent Management utility

NOTE The Agent Management utility requires Administrator privileges to the device.

To verify that the agent was installed successfully on your devices, has contacted the Monitoring Center,
and has received a unique Identifier:
1. Ensure that the device is connected to the Internet.
2. Open the Agent Management utility:
a) Browse to the folder that contains the extracted agent installation package.
b) Double-click ctmweb.exe to open the Agent Management utility with the CTMWeb Login
page active.

NOTE If the User Account Control dialog shows, click Yes to permit access to your
system.

c) In the Please enter your password field, type password, which is the default
administrative password.
d) Click Next.
3. On the Agent Status page, click the Test Call tab and click Start to force a call.
You should see that the UI is refreshing and, when complete, the result should come back as Last
call successful, however one of the following may occur:
If you see a DL_NA message, it means that the agent is not present.
If you consistently get a last call failed message, contact your Absolute representative.
4. To verify that the agent is installed successfully, review these fields:
Agent Modeconfirm that the value is Active.

Absolute DDS 13
 Administrator's Guide for Absolute DDS
Chapter 2: Installing and managing the agent on Windows devices
Agent

ESNElectronic Serial Number, which is also referred to as the unique Identifier. For
activated agents, the last four characters of this Identifier are greater than 0000. If the last
four characters are 0000, click the Test Call tab in the Agent Management utility, and then
click Start to force a test call to the Monitoring Center. The Call Status shows on screen.
Last IP Call Date/Timeshows the appropriate time and date value, indicating a successful
call.
IMPORTANT If the Last IP Call Date/Time field reads No last call, your device failed to
contact the Monitoring Center. When the agent call is in progress or your device is not
connected to a network, this field shows a question mark (?) .

Last Modem Call Date/Timedisregard this field; its use was deprecated.

Default settings apply during the agent installation. After installation, you can change the agent settings
for individual devices locally using the Agent Management utility. For full details about using the Agent
Management utility, see "Managing the agent" on page 16.
If you require further assistance, contact Absolute Global Support.
If your installation failed, you can force a call and verify its success. See "Forcing a call to the Monitoring
Center" on page 17.

Using the DDS console

You can verify that an agent is activated and calling in successfully by looking for the device on the
Activation Report.

NOTE For RTT-enabled devices with mobile broadband adapters, use the Asset Report or Mobile
Broadband Adapter Report.

To view the managed devices in the DDS console:

1. Log in to the DDS console as an Administrator.
2. On the navigation pane, click Reports > Call History and Loss Control > Activation Report.
3. On the Activation Report select the Show Most Recent Activations checkbox and click Show
results.
It takes several minutes to process and make the information available. Your managed device
should show in the results grid on the Activation Report.

Installing the agent on multiple devices

You can deploy the Absolute DDS agent to your computer fleet collectivelyall at once or perhaps in
various groups. There are several methods to install the agent on multiple devices, which are presented in
this section, including:
Deploying the agent using disk imaging
Deploying the agent using SCCM
Deploying the agent using Active Directory

Absolute DDS 14
Chapter 2: Installing and managing the agent on Windows devices Administrator's Guide for Absolute DDS Agent

Deploying the agent using disk imaging

Disk imaging is used to copy standard applications onto new or repurposed computers. Incorporating an
unactivated agent in disk images ensures that all managed devices are protected with Absolute DDS.

IMPORTANT The disk image must include an unactivated agent so each device gets a unique Identifier
on the devices first call to the Monitoring Center.

Before you begin

To prepare a disk image:
1. Ensure that your source computer meets the following requirements:
A supported operating system is installed. See "Device compatibility" on page 8.
All of your organizations preferred software are configured.
The computer is free of viruses.
The agent has never been activated on this computer.
2. Disconnect the source computer from the network.

IMPORTANT After you disconnect the computer from the network and start the agent install,
do not connect to the network again until after the image is created.

Creating the disk image

To create a standard disk image for your Windows devices:
1. Install the agent on the source computer as instructed in the task, "Installing the agent on an
individual device" on page 12.
2. With the source computer still disconnected from the network, create a hard disk image of the
source computer following the instructions for your particular disk imaging software.
3. Test the disk image as follows:
a) Deploy the disk image to a target device.
b) Connect the target device to the network.
c) Verify that the target devices agent receives a unique Identifier as instructed in the task,
"Verifying the agent installation" on page 13.

Deploying the agent using SCCM

You can use Microsoft System Center Configuration Manager (SCCM) to deploy the agent to a group of
computers on a network. If your organization intends to use SCCM to deploy the agent to multiple
Windows devices and you require assistance, contact Absolute Global Support.

Deploying the agent using Active Directory

The Computrace.msi installation file conforms to industry standards for MSI files, which enables
network administrators to deploy the agent onto their devices using Active Directory. If your organization
intends to use Active Directory to deploy the agent to multiple Windows devices and you require
assistance, contact Absolute Global Support.

Absolute DDS 15
 Administrator's Guide for Absolute DDS
Chapter 2: Installing and managing the agent on Windows devices
Agent

Managing the agent

The agent installation package includes the CTMWeb application, also known as the Agent Management
utility, which facilitates the management of individual agents. You can use the Agent Management utility
to verify the state of the agent in an image before deploying the image to devices in your network.
After you've installed the agent successfully, use the Agent Management utility to perform the following
administrative tasks:
Starting the Agent Management utility
Viewing agent call details
Forcing a call to the Monitoring Center
Configuring IP proxy settings
Upgrading the agent on Windows devices
Removing the agent from Windows devices

Starting the Agent Management utility

IMPORTANT If User Account Control is enabled, you must have Administrator credentials to manage
the agent.

To start the Agent Management utility on a Windows device:

1. Using Windows Explorer, browse to the folder that contains the agent installation package that
you extracted when you installed the agent previously. See "Using the Agent Management utility"
on page 13.
2. Double-click the ctmweb.exe file to start the Agent Management utility and open the CTMWeb
login page.
3. In the Please enter your password field, type password, which is the default administrative
password, and then click Next.

Viewing agent call details

The Agent Status page provides the following fields:
CTMWeb Build #version number of the CTMWeb application, also known as the Agent
Management utility.
Agent Build #version number of the agent installed on the device.
Agent Modestate of the installed agent, showing the following possible values:
Activethe agent is installed and active.
Call Supporta problem exists with the agent. See "Contacting Absolute Global Support"
on page 7.
ESNunique Identifier assigned to the installed agent.
Last IP Call Date/Timedate and time of the last successful agent call using Internet Protocol
from the device to the Monitoring Center.
Next IP Call Date/Timedate and time of the next scheduled call using Internet Protocol from
the agent on the device to the Monitoring Center.

Absolute DDS 16
Chapter 2: Installing and managing the agent on Windows devices Administrator's Guide for Absolute DDS Agent

IMPORTANT If the Last IP Call Date/Time field reads No last call, your device failed to
contact the Monitoring Center. When the agent call is in progress or your device is not connected
to a network, this field shows a question mark (?).

Disregard the following fields as they were deprecated:

Last Modem Call Date/Time
Next Modem Call Date/Time

Forcing a call to the Monitoring Center

To request that the agent contacts the Monitoring Center immediately, you can send a Test Call using the
Agent Management utility.

To force a call:
1. Connect the device to the Internet.
2. Start the Agent Management utility. See "Starting the Agent Management utility" on page 16.
3. Click the Test Call tab.
4. Click Start to force the call.
The agent attempts to contact the Monitoring Center. The Call status field shows progress
information and the screen refreshes the status automatically.
If the call was successful, the Call status field shows Passive (Last call successful).
If the call failed, the Call status field shows Passive (Last call failed). Check that the device is
connected to the Internet. If so, attempt the test call again. If your next call still fails, contact
Absolute Global Support.
5. To verify the success of a test call, click the Status tab and review the following fields on the
Status page of the CTMWeb application:
Last IP Call Date/Timeshows the current date and time.
Next IP Call Date/Timeshows updated values.

Configuring IP proxy settings

The agent can access the Internet using a proxy server to contact the Monitoring Center.

To set the account used to access a proxy server:

1. Start the Agent Management utility. See "Starting the Agent Management utility" on page 16.
2. Click the Options tab.
3. In the Name field, type the user name for the agent to access the Internet using a proxy server.
4. In the Password field, type the password for the agent to access the Internet using a proxy
server.
5. To save your changes click Apply.
6. To confirm that the agent is functioning correctly using the new settings, make a test call to the
Monitoring Center. See "Forcing a call to the Monitoring Center" on page 17.

Absolute DDS 17
 Administrator's Guide for Absolute DDS
Chapter 2: Installing and managing the agent on Windows devices
Agent

Upgrading the agent on Windows devices

If your account is configured to allow automatic agent upgrades, your managed Windows devices are
upgraded automatically as new agents become available. After a new agent is released, your Windows
devices are upgraded on the next agent call.
If your account is not configured to allow automatic agent upgrades, as set out in an alternate Service
Agreement, contact Absolute Global Support to request an upgrade to the latest version of the agent for
Windows.

Removing the agent from Windows devices

You may want to remove the agent from a device for various reasons, such as retirement, disposal, or
end of lease. Use the Agent Removal Request feature in Absolute DDS to remove the agent from one or
more devices. For more information, see Chapter 3 of the Absolute DDS5 User Guide.

Absolute DDS 18
Chapter 3: Installing and managing the agent on Mac
devices
This chapter provides information about device compatibility and instructions for installing the Absolute
agent on Apple Mac devices in the following ways:
The direct installation method requires hands-on contact with each target device and is
commonly used to install the agent on individual computers not connected through a network. For
details about this type of installation, see "Downloading and installing the agent on an individual
device" on page 19.
For batch installation of the Absolute agent on multiple devices, see "Installing the agent on
multiple devices using disk imaging" on page 23.

This chapter also includes information about managing the agent on your Mac devices. The agent
installation package includes the Agent Management utility. You can use this application to manage
individual agents and to verify the state of the agent in an image before deploying the image to devices in
your network.

This chapter includes the following sections:

Device compatibility
Downloading and installing the agent on an individual device
Installing the agent on multiple devices using disk imaging
Managing the agent

Device compatibility
To ensure that your Mac devices are compatible with the agent, you need to meet the following
requirements:
Intel-powered hardware that supports one of the following Mac operating systems:
Mac OS X 10.5, provided the device is running agent version 938
Mac OS X 10.6 or higher, provided the device is running agent version 948
macOS 10.12, provided the device is running agent version 948
Internet connection

Downloading and installing the agent on an individual device

The instructions in this section apply to installing the agent on individual devices, which requires hands-
on contact with each target device. This installation method is often used to install the agent on devices
that are not connected to a network.
This section includes the following topics:
Before you begin
Downloading the Installer
Installing the agent on an individual device
Verifying the agent installation

Absolute DDS 19
Chapter 3: Installing and managing the agent on Mac devices Administrator's Guide for Absolute DDS Agent

Before you begin

To prepare for installing the agent on Mac devices:
Use a virus-scanning program to ensure that your hard drive is free from viruses.
Disable all resident virus-scanning programs.
NOTE Remember to enable all virus-scanning programs again after installing the agent
successfully.

Ensure the device is connected to the Internet.

Ensure that you have Administrator privileges on the device.

Downloading the Installer

Before you can install the agent, you need to download the Installer, which is named CTClientXX-
YY.zip, where XX is your account number and YY is the order number.
The Installer consists of three installation packages:
One of the following, which contains the Agent Management utility:
ctm.tar, which is the Agent Management utility for the Mac agent version 938
ddsinfo.tar, which is the Agent Management utility for the Mac agent version 948
rpclient.tar, which you use to install the agent using the installation package
rpclient_image.tar, which you use to install the agent from the command line

To download the Installer from the DDS console:

1. From your Mac device, log in to the DDS console as an Administrator.
2. On the Home page, scroll down to the bottom of the page and click the Download Packages.
3. On the Download Packages page under the Agent Type column, click the most recent Agent
Version of Mac.

NOTE If the Mac device is running OS X 10.5, you need to download agent version 938. More
recent versions of the agent are not supported on this operating system.

4. Download the Installer to a location on your Mac device.

5. Browse to the location of the Installer folder, extract its contents to a local folder, a network
drive, or to removable media such as a USB drive.
If necessary, copy the Installer folder to another location.

Now you're ready to install the agent.

Installing the agent on an individual device

You can install the agent on individual Mac devices in the following ways:
Installing the agent using the Installer interface
Installing the agent at the command line

Absolute DDS 20
 Administrator's Guide for Absolute DDS
Chapter 3: Installing and managing the agent on Mac devices
Agent

Installing the agent using the Installer interface

To install the agent using the installation package:
1. Browse to the location of the Installer folder, double-click the rpclient.tar file, and extract it.
2. Double-click the RPClient.pkg file to open the RPClient Installer page.
3. Click Continue.
4. To change the location where the agent is installed:
a) Click Change Install Location.
b) On the Select a Destination page, select the disk where you want to install the agent.
c) Click Continue.
5. Click Install to perform a standard installation of the agent and to open the password dialog.
6. In the Password field, enter the Administrator password for the Mac device and click Install
Software. When you see a confirmation message, the agent is installed successfully.
7. Click Close.

Installing the agent at the command line

If you prefer, you can install the agent on a Mac device from the command line.

To install the agent on a Mac device:

1. Browse to the agent Installer folder, double-click the rpclient_image.tar file and extract it.
2. Open a Terminal window and browse to the Install folder that you extracted in step 1.
3. To have the installation package grant you full security credentials, type:
sudo ./install.sh
4. When prompted, type the Administrator password for the Mac device and press Enter.
5. When the following message shows, the files are installed:
Install path is: /<install path>
You may now create a drive image with Computrace agent.
On the first startup from the imaged drive, the installation will
complete.

Verifying the agent installation

After installation, the agent contacts the Monitoring Center and receives a unique Identifier. You can
verify that the agent was installed successfully on your devices in the following ways:
Using the Agent Management utility
Using the DDS console

Absolute DDS 21
Chapter 3: Installing and managing the agent on Mac devices Administrator's Guide for Absolute DDS Agent

Using the Agent Management utility

To verify agent installation using the Agent Management utility, follow the steps in one of the following
topics, depending on which version of the Mac agent you installed:
Verifying installation of agent version 948
Verifying installation of agent version 938

Verifying installation of agent version 948

To verify that the agent has contacted the Monitoring Center and received a unique Identifier:
1. Ensure that the device is connected to the Internet.
2. Open the DDSInfo agent management utility:
a) Browse to the folder that contains the agent installation package.
b) Double-click the ddsinfo.tar file and extract it.
c) Double-click the DDSInfo file to open the agent management utility.
d) In the Password field, enter the Administrator password for the Mac device and click OK.
The DDSInfo agent management utility opens.
3. To verify that the agent installed successfully, review the following fields:
Agent Versionconfirm that the value is 948.
Agent Modeconfirm that the value is Active.
ESNElectronic Serial Number, which is also referred to as the unique Identifier. For
activated agents, the last four characters of the Identifier are greater than 0000. If the last
four characters are 0000, the device failed to contact the Monitoring Center. The Call Status
shows on screen.
Last IP Call Timeshows the date and time of the most recent successful agent call.
IMPORTANT If the Last IP Call Time field reads No last call, the device failed to contact
the Monitoring Center. To force a test call, see "Forcing a call to the Monitoring Center" on
page 26.

Next IP Call Timethe date and time of the next scheduled agent call from the device.

Verifying installation of agent version 938

To verify that the agent has contacted the Monitoring Center and received a unique Identifier:
1. Ensure that the device is connected to the Internet.
2. Open the Agent Management utility:
a) Browse to the folder that contains the agent installation package.
b) Double-click the ctm.tar file and extract it.
c) Double-click the ctmweb.exe file to open the Agent Management utility.
d) On the CTMWeb Welcome page click Manage.
e) On the Login page in the Please enter your password field, type password, which is the
default password for the utility.
f) Click Next, which opens the Agent Status page.
3. To verify that the agent installed successfully, review the following fields:

Absolute DDS 22
 Administrator's Guide for Absolute DDS
Chapter 3: Installing and managing the agent on Mac devices
Agent

Agent Versionconfirm that the value is 938.

Agent Modeconfirm that the value is Active.
ESNElectronic Serial Number, which is also referred to as the unique Identifier. For
activated agents, the last four characters of the Identifier are greater than 0000. If the last
four characters are 0000, the device failed to contact the Monitoring Center. The Call Status
shows on screen.
<In the CTMweb app, the field is still labelled ESN.>
Last IP Call Date/Timethis field shows appropriate time and date values, indicating a
successful call.
IMPORTANT If the Last IP Call Date/Time field reads No last call, the device failed to
contact the Monitoring Center and you need to force a test call. See "Forcing a call to the
Monitoring Center" on page 29.

Last Modem Call Date/Timedisregard this field as its use was deprecated.
Next IP Call Date/Timethe date and time of the next scheduled agent call from the
device.

Using the DDS console

You can verify that an agent is activated and calling in successfully by looking for the device on the
Activation Report.

To view the devices in the DDS console:

1. From the Mac device, log in to the DDS console as an Administrator.
2. On the navigation pane, click Reports > Call History and Loss Control > Activation Report.
3. On the Activation Report click the Show Most Recent Activations checkbox and click Show
results to refresh the page.
It takes several minutes to process the information and make it available. Your device should show
in the results grid on the Activation Report. If it does not show on that report, the device has failed to
contact the Monitoring Center. To force a test call, see "Forcing a call to the Monitoring Center" on
page 29.

Installing the agent on multiple devices using disk imaging

You can install the agent on multiple devices using disk imaging, which is used to copy standard
applications onto unconfigured computers (devices). Incorporating the agent installer onto disk images
helps to ensure that the agent is fully functional on all managed devices.
To ensure that the agent is fully functional on all managed devices:
1. Incorporate the agent Installer into a disk image on a single (source) computer.
2. Use a disk imaging program to create a complete image of the source computers hard disk,
including the agent Installer.
3. Copy this disk image to any number of identical computers (referred to as target devices).

Absolute DDS 23
Chapter 3: Installing and managing the agent on Mac devices Administrator's Guide for Absolute DDS Agent

Images created in this manner initially show a generic Identifier (with an ESN that ends in 0000) that is
associated with your account. When deployed, each target device contacts your Monitoring Center when
that device is first started and receives a unique Identifier.

Before you begin

To prepare to create a disk image:
1. Ensure that your source computer meets the following requirements:
The source computer does not have an active agent installed on it. An unactivated agent has
an identifier with an Electronic Serial Number (ESN) that ends in 0000.
The source computer is configured with all of your organizations preferred software.
2. Use a virus-scanning program to ensure that the source computer and all devices on which you
want to install the agent are free from viruses.

Creating the disk image

To create a standard disk image for your Mac devices:
1. Prepare the source computer as follows:
a) Ensure the source computer meets all prerequisites, as described in the topic, "Before you
begin" on page 24.

NOTE There is no requirement for network or Internet connectivity while you create the disk
image. The source computer may be connected or disconnected.

b) On a newly formatted computer, install the appropriate operating system and any other
required software applications that you want to include in the disk image.
2. From the installation media, extract the contents of the rpclient_image.tar file to the source
computer and note where the files are located. You need this information for steps 3 and 4.
3. Open a terminal window and navigate to the directory where you extracted the files in step 2.
4. Run the Installer by typing the following command:
sudo ./install.sh
5. When prompted, enter the administrative password. The installation completes and the following
confirmation message shows:
Install path is: /<install path>
You may now create a drive image with Computrace agent. On the first
startup from the imaged drive, the installation will complete

IMPORTANT Do not restart the source computer.

After a restart, the agent contacts the Monitoring Center to receive a unique Identifier. It is
imperative that the agent is not able to secure a unique Identifier before you create the disk
image.

6. Depending on which Mac agent you installed, do one of the following:

Absolute DDS 24
 Administrator's Guide for Absolute DDS
Chapter 3: Installing and managing the agent on Mac devices
Agent

If you installed Mac agent version 948, use the DDSInfo agent management utility to verify
that the Identifier ends in 0000 (indicates that the agent is not activated).
If you installed Mac agent version 938, use the Agent Management utility (CTMWeb) to
verify that the password is set correctly (default password is password) and the Identifier
ends in 0000 (indicates that the agent is not activated). For more information, see "Starting
the Agent Management utility" on page 28.
7. Use the disk imaging software of your choice to create a hard disk image of the source
computer.

NOTE The process of creating a disk image varies depending on your software. For more
information on creating a disk image, refer to the user guide for your disk imaging software.

8. Test the new disk image as follows:

a) Deploy the disk image to a target device.
b) Connect the target device to the Internet, if it is disconnected.
c) Restart the target device to initiate an agent call.
d) Verify that the target devices agent has received a unique Identifier as instructed in the task,
"Verifying the agent installation" on page 21.

Managing the agent

The agent installation package includes the Agent Management utility, which you can use to manage a
device's agent. If you are deploying the agent to multiple devices, you can use the Agent Management
utility to verify the state of the agent in an image before deploying the image to devices in your network.
For more information, see "Installing the agent on multiple devices using disk imaging" on page 23.
The steps for installing and using the Agent Management utility vary depending on the version of the Mac
agent you installed. This section includes the following sections:
Managing Mac agent version 948
Managing Mac agent version 938
Upgrading the agent on Mac devices
Removing the agent from Mac devices

Managing Mac agent version 948

After you have installed the agent successfully, you can use the DDSInfo agent management utility to
perform the following administrative tasks:
Starting the DDS Info agent management utility
Viewing the agent's status and call details
Forcing a call to the Monitoring Center

Starting the DDS Info agent management utility

The agent installation package includes two files: ddsinfo and ddsinfo.xsl. Installing the agent does not
create another copy on the device.

Absolute DDS 25
Chapter 3: Installing and managing the agent on Mac devices Administrator's Guide for Absolute DDS Agent

IMPORTANT Absolute recommends that you remove the installation files from the local device after
you complete the management tasks.

To start the DDSInfo agent management utility:

1. Ensure that the device is connected to the Internet.
2. Browse to the folder that contains the agent installation package.
3. Double-click the ddsinfo.tar file and extract it.
4. Double-click the DDSInfo file.
5. In the Password field, enter the Administrator password for the Mac device and click OK.
The DDSInfo agent management utility opens.

Viewing the agent's status and call details

To view the agent's status and call details:
1. Start the DDSInfo agent management utility. See "Starting the DDS Info agent management
utility" on page 25.
2. Review the following fields:
Agent Versionthe version number of the agent installed on the device.
Agent Modethe state of the installed agent, showing the following possible values:
Activethe agent is installed and running.
Inactivethe agent is installed but it is not running.
Not installedthe agent is not installed on the device.
Disabledthe agent is either flagged for removal or is removed.
ESNthe unique Electronic Serial Number assigned to the installed agent.
Last IP Call Timethe date and time of the last successful agent call from the device to
the Monitoring Center.
Next IP Call Timethe date and time of the next scheduled call from the agent on the
device to the Monitoring Center.
Call Statusshows the following possible values:
Passivethe agent is installed and awaiting instruction.
Callingthe agent is calling the Monitoring Center.
Call succeededthe agent call to the Monitoring Center was successful.
Call timed outthe agent call was not made within the allowable time.
Call failedthe agent call to the Monitoring Center failed.

Forcing a call to the Monitoring Center

This section includes the following topics:
Forcing a call using the DDSInfo agent management utility
Forcing a call from the command line

Absolute DDS 26
 Administrator's Guide for Absolute DDS
Chapter 3: Installing and managing the agent on Mac devices
Agent

Forcing a call using the DDSInfo agent management utility

To use the DDSInfo agent management utility to force a call to the Monitoring Center:
1. Ensure the device is connected to the Internet.
2. Open the DDSInfo agent management utility. See "Starting the DDS Info agent management
utility" on page 25.
3. Click Test Call.
4. In the Password field, enter the Administrator password for the Mac device and click OK.
The agent attempts to contact the Monitoring Center. The Call status field shows progress
information and the screen refreshes the status automatically.
If the call was successful, the Call status field shows Call succeeded.
If the call timed out or failed, check that the device is connected to the Internet. If it is, attempt the
test call again. If your next call still fails, contact Absolute Global Support.
5. To verify the success of a test call, review the following fields:
Last IP Call Timeshows the current date and time.
Next IP Call Timeshows updated values.

Forcing a call from the command line

To use the command line to force a call to the Monitoring Center:

1. On the Mac device open the Terminal application.
2. At the shell prompt, type the following command:
ps -ax | grep -i rpc
Press Return.
3. Find the process ID associated with '/Library/.rpcnet/rpc.net' -d
This is the agent call process. The presence of this process confirms that the agent was installed
successfully.
4. To stop the agent call process:
a) At the shell prompt, type:
sudo kill -s USR2 <PID>
where <PID> is the process ID found in step 3.
b) Press Return.
c) At the Password prompt type the password you used to log in to the device.
The process is stopped, and then it is restarted automatically, which forces an agent call.

Managing Mac agent version 938

After you have installed the agent, you can use the Agent Management utility to perform the following
administrative tasks:
Starting the Agent Management utility

Absolute DDS 27
Chapter 3: Installing and managing the agent on Mac devices Administrator's Guide for Absolute DDS Agent

Viewing the agent's status and call details

Forcing a call to the Monitoring Center
Configuring IP proxy settings
Changing the default password

Starting the Agent Management utility

The agent installation package includes two files: ctmweb and ctmweb.xsl. Installing the agent does not
create another copy on the device.

IMPORTANT The Agent Management utility includes functionality to remove the agent from Mac
devices. Absolute recommends that you remove the installation files from the local device after you
complete the management tasks.

To start the Agent Management utility:

1. Extract the ctm.tar file from the CTClientxx-yy.zip archive.
2. In the ctm folder, double-click the ctmweb file.
3. Click Manage.
4. In the Please enter your password field type password, which is the default password for the
utility, and then click Next.

Viewing the agent's status and call details

The Agent Status page of the Agent Management utility provides the following information:
CTMWeb Build #version number of the Agent Management utility (CTMWeb application).
Agent Build #version number of the agent installed on the device.
Agent Modestate of the installed agent, showing the following possible values:
Activethe agent is installed and active.
Call Supporta problem exists with the agent. See "Contacting Absolute Global Support"
on page 7.
Identifierunique Electronic Serial Number assigned to the installed agent.
Last IP Call Date/Timedate and time of the last successful agent call using Internet Protocol
from the device to the Monitoring Center.
Next IP Call Date/Timedate and time of the next scheduled call using Internet Protocol from
the agent on the device to the Monitoring Center.
Disregard the following two fields; their use was deprecated:
Last Modem Call Date/Time
Next Modem Call Date/Time
Call Statusshows the following possible values:
Passivethe agent is installed and awaiting instruction.
Callingthe agent is calling the Monitoring Center.
Call succeededthe agent call to the Monitoring Center was successful.
Call timed outthe agent call to the Monitoring Center was not made within the allowable
time.

Absolute DDS 28
 Administrator's Guide for Absolute DDS
Chapter 3: Installing and managing the agent on Mac devices
Agent

Call failedthe agent call to the Monitoring Center failed.

Forcing a call to the Monitoring Center

This section includes the following topics:
Forcing a call using the Agent Management utility
Forcing a call from the command line

Forcing a call using the Agent Management utility

To request that the agent contacts the Monitoring Center immediately, you can use the Test Call page on
the Agent Management utility.

To force a call:
1. Ensure the device is connected to the Internet.
2. Open the Agent Management utility. See "Starting the Agent Management utility" on page 28.
3. Click the Test Call tab.
4. Click Start to force the call.
The agent attempts to contact the Monitoring Center. The Call status field shows progress
information and the screen refreshes the status automatically.
If the call was successful, the Call status field shows Passive (Last call successful).
If the call failed, the Call status field shows Passive (Last call failed). Check that the device is
connected to the Internet. If so, attempt the test call again. If your next call still fails, contact
Absolute Global Support.
5. To verify the success of a test call, click the Status tab and review the following fields on the
Status page:
Last IP Call Date/Timeshows the current date and time.
Next IP Call Date/Timeshows updated values.

Forcing a call from the command line

To request that the agent contacts the Monitoring Center immediately:

1. On the Mac device open the Terminal application.
2. At the shell prompt, type the following command:
ps -ax | grep -i rpc
Press Return.
3. Find the process ID associated with '/Library/.rpcnet/rpc.net' -d.
This is the agent call process. The presence of this process confirms that the agent was installed
successfully.
4. To stop the agent call process:
a) At the shell prompt type:
sudo kill -s USR2 <PID>

Absolute DDS 29
Chapter 3: Installing and managing the agent on Mac devices Administrator's Guide for Absolute DDS Agent

where <PID> is the process ID found in step 3.

b) Press Return.
c) At the Password prompt type the password you used to log in to the device.
The process is stopped and then restarted automatically, which forces an agent call.

Configuring IP proxy settings

The agent can access the Internet using a proxy server to contact the Monitoring Center.

To set the account used to access a proxy server:

1. Open the Agent Management utility. See "Starting the Agent Management utility" on page 28.
2. Click the Options tab.
3. In the Name field, type the username the agent needs to access the Internet using a proxy
server.
4. In the Password field, type the password for the agent to access the Internet using a proxy
server.
5. To save your changes, at the bottom of the page click Apply.
6. To confirm that the agent is functioning correctly using the new settings, make a test call to the
Monitoring Center. See "Forcing a call to the Monitoring Center" on page 29.

Changing the default password

You can change the Mac agent password, which is used to access the Agent Management utility on the
local computer.

To change the default password:

1. Open the Agent Management utility. See "Starting the Agent Management utility" on page 28.
2. Click the Options tab.
3. In the New Password and the Confirm Password fields, enter the new password.
4. Click Apply.

Upgrading the agent on Mac devices

If your account is configured to allow automatic agent upgrades, your managed Mac devices are
automatically upgraded as new agents become available. After a new agent is released, your Mac
devices are upgraded on the next agent call.

NOTE If you have any Mac devices that are running OS X 10.5, their agents are not upgraded when a
new agent for Mac is released. These devices must use agent version 938.

If your account is not configured to allow automatic agent upgrades, as per an alternate Service
Agreement, contact Absolute Global Support to request an upgrade to the latest version of the agent for
Mac.

Absolute DDS 30
 Administrator's Guide for Absolute DDS
Chapter 3: Installing and managing the agent on Mac devices
Agent

Removing the agent from Mac devices

You may want to remove the agent from a device for various reasons, such as retirement, disposal, or
end-of-life/end-of-lease. You can use the Agent Removal Request feature in Absolute DDS to remove the
agent from one or more devices. For more information, see Chapter 3 of the Absolute DDS 5 Center User
Guide.

Absolute DDS 31
Chapter 4: Installing and managing the agent on Android
devices
This chapter provides instructions for installing and managing the Absolute DDS Mobile agent on devices
that run on the Android operating system.
This chapter includes the following sections:
Device compatibility
Downloading and installing Absolute DDS Mobile for Android
Managing the agent using the Absolute DDS Dashboard
Upgrading the agent
Removing the agent

Device compatibility
The agent supports all makes and models of devices running Android OS version 4.4.2 or higher.

Downloading and installing Absolute DDS Mobile for Android

The instructions in this section apply to installing the agent on individual Android devices, which requires
hands-on contact with each target device.
This section contains the following topics:
Before you begin
Downloading the Absolute DDS Mobile for Android devices Installer
Installing Absolute DDS Mobile for Android on your devices

Before you begin

The agent is not available from the Android Market. You need to download it directly to the device before
you can install it. By default, Android devices do not allow installation of non-market applications.
Therefore, you need to change the settings on your device before installing the agent.
To allow for the installation of non-market applications on your Android devices, do the following:
1. Log in to the mobile device. If the device supports multiple users, ensure that you are logged in
as the Owner (primary user).
2. Configure the device to allow installation of a non-market application:
a) Open the Settings menu of your device and tap Security.
b) Select the Unknown sources checkbox.
c) If a warning message opens, tap OK.

Absolute DDS 32
Chapter 4: Installing and managing the agent on Android devices Administrator's Guide for Absolute DDS Agent

Downloading the Absolute DDS Mobile for Android devices Installer

The Absolute DDS Mobile for Android Installer, which is distributed as the CTMobile.apk file, contains
the following components depending on the version of the package you downloaded:
Absolute DDS Sentinel (on selected devices only)the Absolute DDS Sentinel application,
which ensures that the Absolute DDS Mobile agent is running at all times.
Absolute DDS Mobile Agent (mandatory)the Absolute DDS Mobile agent.
Absolute DDS Dashboard (optional)the Absolute DDS Dashboard application, where you
perform functions such as:
viewing the status of the agent
forcing a test call
generating a log file for troubleshooting purposes

To download the Absolute DDS Mobile for Android Installer:

1. Using your computer, log in to the DDS console as an Administrator.
2. At the bottom of the Home page click the Download Packages link.
3. On the Download Packages page in the Agent Type column of the Agent table, click the
Android link and download the file.

NOTE Depending on your browser, you may need to confirm the download by clicking the
information bar and clicking the Android link again.

4. Navigate to the .htm file that you downloaded in the previous step and open it.
5. To send the download link to the Android device, select one of the following options:
To install Absolute DDS Mobile for Android without the Absolute DDS Dashboard:
i) In the Agent Only field click Send URL by Email, which opens a new email message
using your default email program.
ii) Enter the appropriate email address and send the message.
To install Absolute DDS Mobile for Android and the Absolute DDS Dashboard:
i) In the Agent with Dashboard field click Send URL by Email, which opens a new
email message using your default email program.
ii) Enter the appropriate email address and send the message.

NOTE If you do not want to distribute the download links that contain the product key
information, you can send the link using one of the Send URL by Email links in the
Alternative method section. Using the Alternative method includes the Install Key and
the Pass Phrase in the body of a new email.

6. Log in to the mobile device. If the device supports multiple users, ensure that you are logged in
as the Owner (primary user).
7. Open the email that you sent to the device in step 5.
8. Tap the link provided in the email, tap Download, and, if a warning message shows, then tap
OK.

Absolute DDS 33
 Administrator's Guide for Absolute DDS
Chapter 4: Installing and managing the agent on Android devices
Agent

NOTE If the download does not start automatically, tap the link at the bottom of the page to
force the download.

You are now ready to install Absolute DDS Mobile for Android on your device.

Installing Absolute DDS Mobile for Android on your devices

To install Absolute DDS Mobile for Android on your devices:
1. Log in to the mobile device. If the device supports multiple users, ensure that you are logged in
as the Owner (primary user).
2. On the Launcher pane, tap the Downloads icon.
3. Tap CTMobile.apk and tap Install to start installing the Absolute DDS Mobile Installer
application. When the installation is complete, a confirmation page opens.
4. Tap Open to open the Installer.
The list of actions that the Installer performs opens, which includes:
Install Sentinel (on selected devices only)
Install Agent
Activate device administrator (on selected devices only)
Install Dashboard (if the installation package includes the Absolute DDS Dashboard)
Uninstall Installer
5. Tap Install applications to start the installation process.

NOTE Depending on the device, the installation components may install automatically without
any further action on your part. In this case, proceed to step 13.

6. Tap Install to start installing the Absolute DDS Sentinel application. When the installation is
complete, a confirmation dialog opens.
7. Tap Done.
8. Tap Install to start installing the agent. When the installation is complete a confirmation dialog
opens.
9. Tap Done. A dialog opens prompting you to activate the device administrator and the security
policies.
10. Tap Activate.
11. If your Installer includes the Absolute DDS Dashboard, tap Install to install it now.
12. On the confirmation page, tap Done.
13. A confirmation dialog opens indicating that the installation process is complete and you can now
uninstall the Absolute DDS Mobile Installer.
Tap OK.
14. Tap OK or Uninstall to uninstall the Absolute DDS Mobile Installer.
A confirmation page opens when the uninstall process is complete.

Absolute DDS 34
Chapter 4: Installing and managing the agent on Android devices Administrator's Guide for Absolute DDS Agent

The applications are now installed on your device. If you installed the Absolute DDS Dashboard
application, the Absolute DDS Dashboard icon shows on the Launcher pane of your device.
For more information, see "Managing the agent using the Absolute DDS Dashboard" on page 35.

IMPORTANT If the version of the Absolute DDS Mobile Installer you downloaded does not
include the Absolute DDS Dashboard, you do not see an icon on your Launcher pane. If you
want to install the Dashboard, you need to download the appropriate version of the Absolute DDS
Mobile Installer and follow the installation process again.

Managing the agent using the Absolute DDS Dashboard

IMPORTANT To use the Absolute DDS Dashboard application, it must be included in the version of the
Absolute DDS Mobile Installer you used earlier.

The Absolute DDS Dashboard application lets you perform the following tasks:
Setting your password on first use
Changing your password
Viewing agent status information
Viewing the agent log
Forcing a test call to the Monitoring Center
Sending diagnostic information to Absolute Global Support

Setting your password on first use

The first time you start the Absolute DDS Dashboard, you are prompted to choose a password.

To set your password:

1. On the Launcher pane, tap the Absolute DDS Dashboard icon.
2. In the Choose a new password field, enter a new password that is at least eight characters in
length.
3. In the Confirm new password field, enter the password you entered in step 2.
4. Tap Set Password to save the new password and open the Agent Status page.

Changing your password

To change your password:
1. On the Launcher pane, tap the Absolute DDS Dashboard icon.
2. Enter your password and tap OK.
3. On the Agent Status page, tap the Menu icon and then tap Change Password.
4. To change your password, complete the password fields.
5. Tap Update Password.

Absolute DDS 35
 Administrator's Guide for Absolute DDS
Chapter 4: Installing and managing the agent on Android devices
Agent

Viewing agent status information

To view agent status information:
1. On the Launcher pane, tap the Absolute DDS Dashboard icon.
2. On the Agent Status page, enter your password and tap OK.
3. The Agent Status tab provides the following information about the agent:
Agent statusthe status of the Absolute DDS Mobile for Android agent installed on the
device.
Idlethe agent is awaiting the next scheduled call.
Not Setthe agent is not running currently.
Activatingthe agent is activating itself with the Monitoring Center, which happens
during the initial agent call to the Monitoring Center.
Initiating Sessionthe agent is initiating a call to the Monitoring Center; this status
shows at the start of every call.
In Callthe agent is calling in currently.
Getting Commandsthe agent is receiving a list of commands to process one of the
Data and Device Security features. You may see many different instances of the status
because there is one for each feature that is processed.
Processing Commandthe agent is processing a command within a feature; for
example, processing a Data Delete command to delete files and folders on the device.
Ending Sessionthe agent is terminating the current call to the Monitoring Center.
Set for Removalthe agent is flagged for removal.
Identifierthe unique identifying number for this device.
Next call timethe time and date of the next scheduled call from the agent on this device.
Last call timethe time and date of the last scheduled call from the agent on this device.
Last call statusthe status of the last call to the Monitoring Center, which includes the
following possible values:
Completed successfullythe last call made to the Monitoring Center completed
successfully.
Activation erroran error occurred when the agent was activating itself with the
Monitoring Center.
Authentication erroran error occurred when the agent was in the Initiating Session
state during the last call.
Session expired or invalidthe agent is starting a call to the Monitoring Center while
another call is still active.
Service errora general communication failure occurred, which is not covered by
another failure.
Call faileda general failure occurred, which is not covered by another communication
failure.
Agent versionthe version number of the agent that is installed on the device.
Monitoring centerthe URL of the server with which the agent makes a secure connection
to send device authentication and inventory data.

Absolute DDS 36
Chapter 4: Installing and managing the agent on Android devices Administrator's Guide for Absolute DDS Agent

Location trackingan indicator of whether Geolocation tracking is enabled and the number
of location samples collected since the last agent call.

Viewing the agent log

On the Absolute DDS Dashboard, the Agent Log tab provides a list of errors, if any, that the Absolute
DDS Mobile agent encountered during the last call to the Monitoring Center. If the Geolocation tracking
feature reports any errors outside of an agent call, these errors are also available in the agent log.

To view the agent log:

1. On the Launcher pane, tap the Absolute DDS Dashboard icon.
2. Enter your password and tap OK.
3. On the Agent Status page, tap the Agent Log tab.
4. On the Agent Log page, if you want to view updated agent call information tap the Menu icon and
tap Refresh.

Forcing a test call to the Monitoring Center

To force a test call:
1. On the Launcher pane, tap the Absolute DDSDashboard icon.
2. Enter your password and tap OK.
3. On the Agent Status page, tap Call in.
If your Android device is connected to the Internet using Wi-Fi or a data connection, the device calls
the Monitoring Center.

Sending diagnostic information to Absolute Global Support

If you experience problems with the Absolute DDS Mobile for Android, you can use the Absolute DDS
Dashboard to send Absolute Global Support a log file that contains detailed diagnostic information about
these problems.

To send diagnostic information:

1. On the Launcher pane, tap the Absolute DDS Dashboard icon.
2. Enter your password and tap OK.
3. On the Agent Status page, tap the Agent Log tab.
4. On the Agent Log page, tap the Menu icon and tap Refresh.
5. Tap the Menu icon and tap Send Log.
6. If the device is running the Android 6.0 (Marshmallow) operating system, a message shows
indicating that you need to grant Storage permissions. If Absolute's Persistence technology is
embedded on the device, you also need to grant Phone permissions. To proceed:
a) In the message dialog, click OK.
b) In each dialog that shows, click Allow.

Absolute DDS 37
 Administrator's Guide for Absolute DDS
Chapter 4: Installing and managing the agent on Android devices
Agent

NOTE If you do not grant Storage permissions, the log file is not sent. If you do not grant Phone
permissions, the log file is sent but it does not include any mobile device identifiers, such as the
IMEI.

7. Depending on how many mailboxes you have set up on your device, one of the following
happens:
If you have only one email program set up on your device, the Compose email window
opens. Proceed to step 8.
If you have set up more than one email program on your device, the Choose email
application dialog opens. Tap the appropriate application name. If possible, we recommend
that you use Gmail.
The Compose email window opens.
8. By default, the agent log is sent to [email protected].
a) To send the agent log to another email recipient, in the To field enter the new email
address.
b) To add other email recipients, in the To field enter each email address, separated by
commas.
9. Tap Done.
The email and the attached agent log are sent to the specified recipients.

Upgrading the agent

When your account is configured to allow automatic agent upgrades, your managed Android devices are
upgraded automatically as new agents become available. After a new agent is released, your Android
devices are upgraded on the next agent call.
If your account is not configured to allow automatic agent upgrades, as per an alternate Service
Agreement, contact Absolute Global Support to request an upgrade to the latest version of the Absolute
DDS Mobile for Android agent.

Removing the agent

You may want to remove the Absolute DDS Mobile for Android agent from a device for various reasons,
such as retirement, disposal, or end-of-lease. You can use the Agent Removal Request feature in
Absolute DDS to remove the agent from one or more devices. For more information, see Chapter 3 of the
Absolute DDS5 User Guide.

Absolute DDS 38
 Administrator's Guide for Absolute DDS
Chapter 5: Installing and managing the Absolute for Chromebooks extension
Agent

Chapter 5: Installing and managing the Absolute for

Chromebooks extension
The instructions in this section describe how to configure the settings to deploy the Absolute for
Chromebooks extension (also known as the Chromebook extension) to your Chromebooks. You do not
need hands-on contact with each target device, but it must have an active connection to the Internet to
receive the extension when a domain user logs in to the device.
This section also contains instructions for configuring Absolute's kiosk app, which is a tool used by the
Absolute Investigations team to track and recover Chromebooks that your organization has reported
missing or stolen.
This section contains the following topics:
Device compatibility
Before you begin
Configuring default settings for your Chromebooks
Configuring default settings to manage stolen Chromebooks
Adding Chromebooks to your DDSaccount
Managing Google account details in the DDS console
Downloading and installing the Chromebook extension
Removing the Chromebook extension

Device compatibility
To support the Absolute for Chromebooks extension, devices must be running the Chrome OSoperating
system, version 46 or higher.

Before you begin

Before you configure the Chromebook extension for your devices, you need to do the following:
1. Complete the following tasks in the Google Admin console:
a) Ensure that you have added at least one organizational unit under your domain in your
Google account, and the Chromebooks that you want to add to the DDS console are
contained within it.

NOTE If you have not purchased Absolute for Chromebooks licenses for all Chromebooks
in your fleet, ensure that the Chromebooks you want added to the DDS console are in their
own organizational units directly under your organization. By doing so, you ensure that only
available licenses are consumed.

b) Under your domain in your Google account, create another organizational unit and name it
"Stolen". The Stolen organization unit needs to be in place before the Absolute Investigations
team can track and recover a Chromebook if it is missing or stolen.
For more information about creating organizational units, see Google Admin console
documentation.

Absolute DDS 39
Chapter 5: Installing and managing the Absolute for Chromebooks
Administrator's Guide for Absolute DDS Agent
extension

2. Associate your Google account with your DDS account. For more information, see "Adding
Google account details to the DDS console" on page 43.

Configuring default settings for your Chromebooks

To allow your Chromebooks to be added to the Absolute DDS console, you need to configure the
following settings in the Google Admin console:
1. Log in to the Google Admin console using the credentials for the account that you use to manage
your devices.
2. Complete step 1a in the section, "Before you begin" on page 39.
3. Navigate to Device management > Chrome management > Device settings.
4. Select the organizational unit containing the Chromebooks you want to add to the DDS console
and edit its Device Settings as follows:
a) In the Enrollment & Access section:
i) Set the Forced Re-enrollment field to Force device to re-enroll into this domain
after wiping.
ii) Set the Verified Access field to Enable for Content Protection.
b) In the Sign-in Settings section:
i) Set the Guest Mode field to Do not allow guest mode.
ii) Set the Sign-in Restriction field to Restrict Sign-in to list of users:
*@YourDomain.com.
c) In the Device Update Settings section, do the following:
i) Set the Auto Update Settings field to Allow auto-updates, which enables updates to the
Chromebook extension to be deployed automatically to the device.
ii) Set the Release Channel field to Move to Stable Channel.
d) In the Kiosk Settings section:
i) Set the Kiosk Settings field to Do not allow Public Session Kiosk.
ii) Set the Auto-Launch Kiosk App field to None.
e) In the Power & Shutdown section, do the following:
i) In the Power Management subsection, set the Power management on sign-in screen
field to Allow device to sleep/shut down when idle on the sign-in screen.
ii) In the Shut down subsection, set the Allow shut down field to Allow users to turn off
the device via the Shutdown icon on the screen, or the physical power button.
f) Click Save.
5. In the Google Admin console, on the left hand pane, select the organizational unit with the users
for whom you want to edit User Settings, navigate to Device Management >
ChromeManagement > User Settings, and edit its User Settings as follows :
a) Ensure the Chrome Mobile (BETA) checkbox is cleared.
b) In the General section, set the Allow Smart Lock on Chrome field to Do not allow Smart
Lock for Chrome.
c) In the Enrollment Controls section:
i) Set the Device Enrollment field to Keep Chrome device in current location.

Absolute DDS 40
 Administrator's Guide for Absolute DDS
Chapter 5: Installing and managing the Absolute for Chromebooks extension
Agent

ii) Set the Asset Identifier During Enrollment field to Do not allow for users in this
organization.
iii) Set the Enrollment Permissions field to Allow users in this organization to enroll
new or deprovisioned devices.
d) In the Apps and Extensions section, for Allowed Types of Apps and Extensions, select
all apps and extensions.
e) Scroll to the User Experience section and set the Developer Tools field to Never allow use
of built-in developer tools.
6. Click Save.

Configuring default settings to manage stolen Chromebooks

To enable the Absolute Investigations team to track and recover a Chromebook you've reported missing
or stolen, you need associate Absolute's kiosk app with the Stolen organizational unit and configure
Device Settings.
For more information about Absolute's kiosk app, see "What effect does a deployed kiosk app have on a
stolen Chromebook?" on page 42.
To configure the Stolen organizational unit:
1. Log in to the Google Admin console using the credentials for the account that you use to manage
your devices.
2. Complete step 1b in the section, "Before you begin" on page 39.
3. Navigate to Device management > Chrome management > Device settings.
4. Select the Stolen organizational unit and edit its Device Settings as follows:
a) In the Enrollment & Access section, set the Forced Re-enrollment field to Force device to
re-enroll into this domain after wiping.
b) In the Sign-in Settings section, do the following:
i) Set the Guest Mode field to Do not allow guest mode.
ii) Set the Sign-in Restriction field to Do not allow any user to Sign-in.
c) In the Kiosk Settings section, do the following:
i) Click Manage Kiosk Applications.
ii) In the Kiosk Apps dialog, click Chrome Web Store to open a search field.
iii) Copy the following Absolute Kiosk App ID and paste it in the search field:
iccjnidoijlicagedghbkbiidbipjiic
iv) Press ENTER on your keyboard.
v) Click the Add link next to Browser. The Absolute Investigations Browser is added to the
list of apps under Total to install.
vi) Click Save in the dialog. The dialog closes and the kiosk app is now available to launch.
vii) In the Kiosk Settings section, set the Auto-Launch Kiosk App field to Browser. The
page refreshes to show additional settings.
viii) Set the Enable device health monitoring field to Enable device health monitoring.
d) Scroll to the User & Device Reporting > Device Reporting section and do the following:
i) Set the Device State Reporting field to Enable device state reporting.

Absolute DDS 41
Chapter 5: Installing and managing the Absolute for Chromebooks
Administrator's Guide for Absolute DDS Agent
extension

ii) Set the Device User Tracking field to Enable tracking recent device users.
5. On the Device Settings page, click Save.
In the future, when you report a Chromebook missing or stolen, the Absolute Investigations Team
moves the device into this organizational unit and the kiosk app is deployed to the device.
Depending on the polling time period set for your Google account, it may take up to 24 hours for the
kiosk app to be deployed on the stolen device. If the device is restarted, the app is deployed
immediately. The Investigations Team then uses the kiosk pp to help track and recover the
Chromebook.

What effect does a deployed kiosk app have on a stolen Chromebook?

After the Absolute Investigations Browser kiosk app is deployed on a stolen Chromebook, device and
geolocation information is sent to the Absolute Monitoring Center, where it is made available to the
Absolute Investigations Team to assist in the devices recovery.
From a users perspective, stolen devices with a deployed kiosk app have the following characteristics:
When a user starts the device, a web browser opens. The web browser cannot be closed or
minimized but many browser functions are available. As the user browses the Internet, device
location information is collected and sent to the Monitoring Center.
The user cannot log in to the Chrome OS operating system, configure Settings, access any
Google apps, or add a new User.

If a user performs a factory reset on the stolen device, the Chrome > enterprise enrollment page opens
when the device is restarted. The user must sign in to your domain to proceed. Two scenarios are
possible:
If the user enters the correct credentials to log in to your domain, the device is re-enrolled in your
domain and the kiosk app is promptly deployed.
If the user does not possess the correct credentials to log in your domain, the kiosk app cannot
be deployed and other methods must be used to recover the device.

When the device is recovered and the Absolute Investigations team closes the Investigation Report:
The device is moved back to its original organization unit in your Google account
The kiosk app is removed from the device and full Chrome device functionality is restored.

NOTE If a factory reset was performed on a device before it was recovered, you need to re-enroll the
device in your domain.

Adding Chromebooks to your DDSaccount

Chromebooks run the Chrome OS operating system, which is a lightweight Linux-based operating system
that is integrated with the Chrome browser and designed to primarily run web applications. User data is
stored in the "cloud" rather than on the devices hard drive.
Due to the unique nature of the Chrome operating system, the DDS agent can't be installed on a
Chromebook. Instead, you manage your Chromebooks in DDSby deploying the Chromebook extension
to each device. The extension is a small software program that enables Chromebooks to secure a
connection with the Absolute Monitoring Center and allows you to manage these devices in the DDS
console.

Absolute DDS 42
 Administrator's Guide for Absolute DDS
Chapter 5: Installing and managing the Absolute for Chromebooks extension
Agent

To add Chromebooks to your Absolute DDS account, you need to do the following:
1. Enable the Google Synchronization Service by updating your DDS account settings. For more
information, see "Adding Google account details to the DDS console" on page 43.
After the Google Synchronization Service is enabled it retrieves information about each
Chromebook from your Google account and populates the DDS console with this data. This
process also assigns a unique Identifier to each Chromebook and allows for deployment of the
Chromebook extension.
In the Asset Report, and the Call Tracking tab for each Chromebook, the sync from the Google
account shows as a call, with an Agent Version of 2200.
2. Deploy the Chromebook extension to each device using the Google Admin console. For more
information, see "Downloading and installing the Chromebook extension" on page 45.
After the Chromebook extension is deployed on a new Chromebook, the extension is activated with
its first secure call to the Absolute Monitoring Center. The extension then makes regularly
scheduled calls to the Monitoring Center on a daily basis. During these calls, the latest device data
is sent to the Monitoring Center and instructions for any pending security operations, such as
Device Freeze, are sent to the device.
In the Asset Report, and the Call Tracking tab for each Chromebook, acall by the Chromebook
extension shows as Agent Version 24xx.

Managing Google account details in the DDS console

This section provides information on the following topics:
Adding Google account details to the DDS console
Editing Google account details
Deleting Google account details

Adding Google account details to the DDS console

For your Chromebooks that are currently managed in your Google account to be visible in the
DDSconsole, you need to add your Google account name to your Absolute DDSaccount. This process
enables the Google Synchronization Service to retrieve initial device information from your Google
account and show it in the DDSconsole.

To add your Google account name to your Absolute DDSaccount:

1. Before you begin this task ensure that you are assigned a Google Admin role with the following
minimum set of administrator privileges:
Organization Units, including Create, Read, Update, and Delete privileges
Users, including Read privileges only
Services > Chrome OS, including Manage Device, Manage User Settings, and Manage
Device Settings privileges
These privileges are assigned by default to the Super Administrator role, or you can create a User
Created role and assign these privileges to it. For more information about Google Admin roles and
privileges, refer to Google's Admin console Help.
2. Log in to the DDSconsole as an Administrator.

Absolute DDS 43
Chapter 5: Installing and managing the Absolute for Chromebooks
Administrator's Guide for Absolute DDS Agent
extension

3. On the navigation pane under DDS 5, click the Administration > Account > Account Settings.
4. Scroll to the Chromebooks - Google Account area and in the Account Name field enter the
email address you use to log in to your organizations Google account.
5. Click Add.
6. If you are not already signed in to your Google account, the Google Signin page opens. Sign in
using the appropriate credentials.
7. The Google Request for Permission page opens to let you authorize the synchronization service.
This service synchronizes the device information in the DDSconsole with the information
maintained in the Google Admin console. Click Accept.
8. In the Select Organizational Units dialog, select each Google organizational unit that contains the
Chromebooks you want added to your DDS account. To select all organizational units, select the
checkbox next to the organization.
If you have not purchased Absolute for Chromebooks licenses for all Chromebooks in your fleet,
ensure that you select only those organizational units that contain the Chromebooks you want
added to the DDS console. By doing so, you ensure that only available licenses are consumed.

IMPORTANT You must select at least one Google organizational unit.

9. Click Continue to save your changes and close the dialog.

The Google Synchronization Service then adds all Chromebooks associated with the selected
Google organization units to the DDSconsole. When this process is complete, the Last Sync
Time column is populated with the date and time.
10. Adding Chromebooks to your DDS account is a two-step process. You have completed the first
step. To go to the next step, see "Downloading and installing the Chromebook extension" on
page 45.

Editing Google account details

You can add additional Chromebooks to your DDS account by editing the Chromebooks - Google
Account setting. You can also remove Chromebooks.

To edit your Google account details:

1. Log in to the DDSconsole as an Administrator.
2. On the navigation pane under DDS 5, click the Administration > Account > Account Settings.
3. Scroll to the Chromebooks - Google Account area and click Edit next to the Google account
name.
4. In the Select Organizational Units dialog, select each Google organizational unit that contains the
Chromebooks you want add to your DDS account. To select all organizational units, select the
checkbox next to the organization. To remove Chromebooks from your account, clear each
checkbox next to the applicable organizational units.
5. If you cleared any checkboxes, a warning message shows. Click Yes to continue.

Absolute DDS 44
 Administrator's Guide for Absolute DDS
Chapter 5: Installing and managing the Absolute for Chromebooks extension
Agent

WARNING! Clearing the checkbox of a previously selected organizational unit (OU)

automatically sets that OU's Chromebooks to Disabled. For more information, see "Removing
the Chromebook extension" on page 46.

6. Click Continue to save your changes and close the dialog.

The Google Synchronization Service then updates the list of Chromebooks associated with your
DDSaccount in the DDSconsole. When this process is complete, the Last Sync Time column is
populated with the date and time.
7. Adding Chromebooks to your DDS account is a two-step process. If you selected new
organization units in step 4, you have completed the first step. To go to the next step, see
"Downloading and installing the Chromebook extension" on page 45.

Deleting Google account details

If a Google account was added in error, or the account is not required anymore, you can delete it from the
Account Settings page.

WARNING! Use caution when deleting an existing Google account from the Account Settings. This
action has the following effect on Chromebooks in the DDSconsole:
- The Agent Status of all Chromebooks is set to Disabled. In the Disabled state, your Chromebooks can
no longer connect to the Absolute Monitoring Center. If you want to re-add these devices at a later time,
you need to complete some steps in the Google Admin console to remove and then re-install the
Chromebook extension. For more information, see "Removing the Chromebook extension" on page 46.
- Device information is no longer synchronized between the Google account and the DDSconsole.
- Up-to-date device information is no longer included in reports.
- You cannot submit an Investigation Report for a Chromebook.

To delete a Google account:

1. Log in to the DDSconsole as an Administrator.
2. On the navigation pane under DDS 5, click Administration > Account > Account Settings.
3. Scroll to the Chromebooks - Google Account area, locate the Google account that you want to
delete and click its Delete link in the rightmost column.
4. On the confirmation message click OK.

Downloading and installing the Chromebook extension

The Chromebook extension is distributed through the Chrome Web Store. It is added to your account
from theGoogle Admin console and is automatically downloaded to the devices with the authorized
users.
To download and install the Chromebook extension:
1. Using your computer, log in to the DDS console as an Administrator.
2. At the bottom of the Home page click the Download Packages link.
3. On the Download Packages page, scroll to the Absolute for Chromebooks Extension section.

Absolute DDS 45
Chapter 5: Installing and managing the Absolute for Chromebooks
Administrator's Guide for Absolute DDS Agent
extension

4. In the Extension ID column of the table, click the Copy to Clipboard link. The Extension IDis
copied to your clipboard.
5. In another browser window, log in to the Google Admin console using the credentials for the
account that you use to manage your devices.
6. Navigate to Device Management > Chrome Management > User Settings.
7. On the left hand pane, select the organization with the users with authorization to install the
Chromebook extension.
8. On the User Settings page, navigate to Apps and Extensions > Force-installed Apps and
Extensions.
9. In the Force-installed Apps and Extensions section, click the Manage force-installed apps link
to open the Force-installed Apps and Extensions dialog.
10. In the Force-installed Apps and Extensions dialog, on left hand navigation pane click Chrome
Web Store to open a search field.
11. In the search field, paste the Extension ID you copied to your clipboard in step 4 and then press
ENTER on your keyboard. The dialog refreshes to show the Absolute for Chromebook extension.
12. Click the extension's Add link and then click Save. The dialog closes.
13. On the User Settings page, click Save.
The Chromebook extension is saved to the list of force-installed apps for your device. When an
authorized user logs in to the Chromebook, the extension is downloaded to the device.

Removing the Chromebook extension

As the Chromebook extension is a force-installed app that is available to all authorized users in your
account, users cannot remove it from their device.
There are two ways to remove the Chromebook extension:
Removing the Chromebook extension from all devices in an organization
Removing the Chromebook extension for a specific user

Removing the Chromebook extension from all devices in an organization

To remove the Chromebook extension from all devices in a particular organization:
1. Log in to the Google Admin console using the credentials for the account that you use to manage
your devices.
2. Navigate to Device Management > Chrome Management > User Settings.
3. On the left hand navigation pane, select the appropriate organization from which you want to
remove the Chromebook extension.
4. On the User Settings page, navigate to Apps and Extensions > Force-installed Apps and
Extensions.
5. In the Force-installed Apps and Extensions section, click the Manage force-installed apps link
to open the Force-installed Apps and Extensions dialog.

Absolute DDS 46
 Administrator's Guide for Absolute DDS
Chapter 5: Installing and managing the Absolute for Chromebooks extension
Agent

6. In the Force-installed Apps and Extensions dialog, on right hand pane, click the extension's
Remove link.
7. Click Save in the dialog.
8. On the User Settings page, click Save. The Chromebook extension is removed from the list of
force-installed apps for all users in this organization. When an authorized user logs in to the
Chromebook, the extension is removed from the device.

Removing the Chromebook extension for a specific user

By default, the authorized users in your organization receive all force-installed apps. The only way to
remove the Chromebook extension for a specific user is to move the user to another organizational unit
(OU)within your network.
To facilitate removal of the Chromebook extension for specific users, we recommend setting up two
organizational units (OUs), for example:
Absolute for Chromebooks Extension
No Absolute for Chromebooks Extension

You can then use these OUs to efficiently manage the deployment of the Chromebook extension for each
individual user.

To remove the Chromebook extension for a specific user:

1. Log in to the Google Admin console using the credentials for the account that you use to manage
your devices.
2. From the left hand navigation list, navigate to Users.
3. In the list of users, scroll to the user that you want to deauthorize, and click the image next to the
name of the user to select it.

NOTE To move multiple users, select the first user you want to move, and hold down SHIFT on
your keyboard and click the other users you want to move.

4. On the top navigation pane, click Move .

5. Choose an OUfrom the dialog box and click again to confirm.

6. After you've moved all the users you want to deauthorize to the appropriate OU, follow the
instructions in the section, "Removing the Chromebook extension from all devices in an
organization" on page 46.

Absolute DDS 47
 Administrator's Guide for Absolute DDS
Chapter 6: Testing network connectivity using the Network Diagnostics Tool
Agent

Chapter 6: Testing network connectivity using the

Network Diagnostics Tool
The Absolute DDS Network Diagnostics Tool helps you test the network connectivity of your account's
devices to the Absolute Monitoring Center. The Network Diagnostics Tool tests whether your device's
Absolute DDS agent calls are blocked or otherwise interrupted by your network's proxies and firewalls.
This section contains the following topics:
Downloading the Absolute DDS Network Diagnostics Tool
Using the Network Diagnostics Tool

Downloading the Absolute DDS Network Diagnostics Tool

To download the Absolute DDS Network Diagnostics Tool from the DDS console:
1. Log in to the DDS console as an Administrator.
2. On the Home page, scroll down to the bottom of the page and click the Download Packages
link.
3. On the Download Packages page under the Network Diagnostics column, click the Download
Network Diagnostics Tool link. The file for the Network Diagnostics Tool is called DDSNdt.exe
and available as a zip file.
4. Depending on your browser and operating system, you may need to click through several dialogs
to Save the .zip file that includes DDSNdt.exe to a location of your choice.
5. When the download completes, you must extract the file DDSNdt.exe from the original zip file to
a location of your choice. You can copy the files to the hard drive or run them from a USB key or
network drive. For more information, see Using the Network Diagnostics Tool.

Using the Network Diagnostics Tool

You can run the Network Diagnostics Tool on each device that contains the Absolute DDS agent to
ensure uninterrupted connectivity in case of agent calls to the Absolute Monitoring Center.

To use the Network Diagnostics Tool:

1. Open a Command Prompt window as a user with administrator privileges.
2. Navigate to the file DDSNdt.exe that you extracted in the section, "Downloading the Absolute
DDS Network Diagnostics Tool" on page 48.
3. Enter one of the following commands into the command prompt window to run the Network
Diagnostics Tool:
To run the tool with the default data center location and to save the log file at the default
location, enter DDSNdt.exe and then press ENTER on your keyboard. The default data
center location is the Canadian data center. By default, the log file is saved in the working
directory.
To run the tool with the US data center location, enter DDSNdt.exe /datacenter=US and
then press ENTER on your keyboard.

Absolute DDS 48
Chapter 6: Testing network connectivity using the Network Diagnostics
Administrator's Guide for Absolute DDS Agent
Tool

To specify a location where the tool should save the log file, enter DDSNdt.exe
/log=<add the new location where you want to save the log file> and
then press ENTER on your keyboard. For example, if you want to save the log file to a folder
called NDTLogFile on your c drive, enter DDSNdt.exe /log=c:\NDTLogFile.

IMPORTANT The folder where you want to save the log file must exist on your device. If
you want to use a new folder, you must create the folder first. Do not use special characters
or spaces in the folder name.

To display a help file with all the different options available for the tool, enter DDSNdt.exe
/help and then press ENTER on your keyboard.
After the Network Diagnostics Tool finishes testing your device's connection, it saves the log file
either to the default location or to the location you have specified.

Viewing the Network Diagnostics log file

To view the log file, navigate to the location on your device where the tool saved the log file, and double-
click the log file to open it.
The log file may contain one or more HTTP status codes. See the following table for more information
about the status codes included in the log file.

Network DiagnosticsLog File:Status Codes

Status Code Description
200 OK The request succeeded.

202 ACCEPTED The request was accepted for processing, but the processing is not
complete.
302 FOUND The request resides temporarily under a different URL.
307 TEMPORARY REDIRECT The request resides temporarily under a different URL.
401 UNAUTHORIZED The request requires user authentication. The client needs to send
the request with a suitable authorization header field.
403 FORBIDDEN The server will not fulfill the request and it should not be repeated.
404 NOT FOUND The server could not find the URL. The status does not indicate
whether it is temporary or permanent.

Absolute DDS 49
 Glossary
A
Absolute Data & Device Security (DDS)
Formerly Computrace, technology from Absolute that allows you to track and secure devices and
the data they contain.

Absolute DDS console

A web-based user interface that enables corporate customers to centrally manage all assets within
the account.

Absolute Monitoring Center

A server with which the agent makes a secure connection to send device authentication and
inventory data. The Monitoring Center is where devices call for self-healing.

activation
An event where a device contacts a Monitoring Center for the first time (over the Internet) to obtain
a unique Identifier.

agent
A small software client that resides in the firmware or BIOS of a device. It's either embedded at the
factory or installed manually by a user. The agent makes regularly scheduled calls over the Internet
to the Monitoring Center and provides identification points on each agent call. The agent also
manages the programs that support activities such as Data Delete and Device Freeze.

agent call
A secure connection established by an agent to a Monitoring Center. During a call, the hardware
profiles are sent to the Monitoring Center and instructions are sent to the device.

agent executables
Agent executables are used to install the agent on your managed devices and are unique to your
account.

Agent Management utility

Part of the Absolute agent installation package and is also known as the DDSInfo or CTMWeb
application, depending on the agent version. Facilitates managing individual agents and verifying
an agents state.

agent status
The operating condition of an agent. Possible values are Active (indicates that the agent has called
the Monitoring Center), Inactive (indicates that the agent has not yet called the Monitoring Center),
and Disabled (indicates that the agent is either flagged for removal or removed from the device).

Absolute DDS 50
Glossary Administrator's Guide for Absolute DDS Agent

agent version
The version number of the agent that contacts the Monitoring Center.

B
BIOS
Basic Input/Output System. Firmware embedded onto the system board of a computer.

BitLocker Drive Encryption (BitLocker)

BitLocker is a full-disk encryption feature included in most versions of the Windows operating
system.

C
Computrace
Product name previous to Absolute DDS. Some folders and user interface elements still show this
product name.

CTMWeb application (for Mac agent 938)

Also known as CTMWeb.exe or the Agent Management utility, an application that lets users verify
and manage the agent's installation on a device. See also DDSInfo.

D
DDSInfo (for Mac agent 948)
DDSInfo agent management utility, an application that lets users verify and manage the agent's
installation on a device.

device
A piece of electronic communication hardware, such as Windows or Mac computers, and Android
smartphones, on which you can install the agent.

disk imaging
Used to copy standard applications onto unconfigured computers. Incorporating the agent Installer
onto disk images helps to ensure that the agent is fully functional on all managed devices.

E
ESN
Electronic Serial Number. See also Identifier.

EvDO
Evolution Data Only.

Absolute DDS 51
 Administrator's Guide for Absolute DDS
Glossary
Agent

F
Firmware Persistence
Most OEMs integrate Absolute's Persistence technology within a computers firmware or BIOS,
which is also known as hardware persistence. See Persistence technology.

full-disk encryption (FDE)

A software or hardware solution that secures, or encrypts, the entire contents of a physical drive.
FDE prevents unauthorized access to data storage. Absolute DDS detect FDE Hardware (self-
encrypting drives) and Software encryption programs that are installed on the hard drives of your
organizations managed devices.

G
group
A logical collection of devices based on criteria such as departments or geographical location. You
can use the group to filter reports and target specific managed devices for many Absolute DDS
functions.

I
ID
Identification.

Identifier
A unique Electronic Serial Number (ESN) assigned to the agent installed on a device.

IP
Internet Protocol.

M
managed device
A device on which an Absolute agent is installed.

Monitoring Center
See Absolute Monitoring Center.

O
OEM
Original Equipment Manufacturer.

Absolute DDS 52
Glossary Administrator's Guide for Absolute DDS Agent

OS
Operating System.

P
Persistence module
The application embedded within the firmware or BIOS of a device. See Persistence technology.

Persistence technology
Activated during the agents first call to a Monitoring Center, checks for the status of the agent and
initiates self-healing to restore the agent if it is missing, tampered with, or damaged.

R
Real-Time Technology (RTT)
A feature that lets you track your mobile broadband enabled devices. Additionally, this feature
leverages mobile broadband and SMS (text) and Internet protocol messaging to increase your data
protection speed.

S
SCCM
The Microsoft System Center Configuration Manager (SCCM) is a system management solution
that allows organizations to manage installed software, compliance settings, and other services on
a large group of servers, desktops, laptops, and mobile devices.

self-healing
When agent modules are corrupted or tampered with, or when attempts are made to remove the
agent from a device, the technology rebuilds (self-heals) itself.

SMS
Short Message Service (cellular phone text messaging).

stamped agent
Embeds account and order specific information, namely the seed of an electronic serial number
(ESN) into the package and also digitally signs the Windows installation package if an X.509.2
code signing certificate was originally entered using the Install wizard.

U
UMTS
Universal Mobile Telecommunications System.

USB
Universal Serial Bus.

Absolute DDS 53
 Index and optional otherwise) 33
Mobile Sentinel application (mandatory)
33
Absolute agent, described 6 sending diagnostic information to Absolute
Absolute Global Support Global Support 37
described 7 setting your password the first time 35
sending diagnostic information for Android system requirements for device
devices to 37 compatibility 32
Active Directory script, deploying the Agent to viewing
multiple Windows devices 15 Agent log 37
Agent log Agent Status information 36
viewing for Android devices 37 BIOS persistence technology 9
Agent Management utility BitLocker compatibility 9
configuring IP proxy settings for call details
Mac devices 30 viewing for
Windows devices 17 Windows devices 16
forcing a call from changing your password on
a Mac device 29 Android devices 35
a Windows device 17 Chromebook extension 39
an Android device 37 downloading and installing 45
starting from a removing 46
Windows device 16 Chromebooks
verifying installation of adding Google account to DDS 43
Mac devices 22 adding to DDS console 39, 42
Windows devices 13 deleting Google account from DDS 45
viewing Agent Status for command line
Windows devices 16 installing the agent on individual Mac
Agent status devices 21
viewing information for installing the agent on individual Windows
Windows devices 16
devices 12
Agent Status
configuring IP proxy settings
viewing
for Mac devices 30
information for
for Windows devices 17
Android devices 36
DDS console
Agent, described 6
installing the agent on individual Windows
Android devices
devices 12
allowing installation of outside
verifying installation of
applications 32
Mac devices 23
changing your password 35
Windows devices 14
downloading the Installer for
viewing
Mobile Agent and the Dashboard 33
managed Mac devices 23
Mobile Agent only 33
managed Windows devices 14
forcing a test call 37
reports for
installing the mobile Agent 34
Mac devices 23
instructions for downloading the
Windows devices 14
Installer 33 deploying the agent to
managing the Mobile Agent 35 individual
Mobile Agent Installer components Mac devices from the DDS console 20
Mobile Agent application (mandatory) Windows devices from a user
33 interface 11
Mobile Dashboard application
(mandatory to manage devices

Absolute DDS 54
Index Administrator's Guide for Absolute DDS Agent

multiple multiple devices using

Mac devices using disk imaging 24
disk imaging 24 forcing a call 29
Windows devices using installing the agent on
an Active Directory script 15 individual devices from
disk imaging 15 the command line 21
SMS 15 minimum requirements 19
disk imaging verifying
deploying the agent to multiple installation using
Mac devices 24 Agent Management utility 22
Windows devices 15 DDS console 23
downloading Agent installer for the agent is activated and calling in
Mac devices from the DDS console 20 successfully
Windows devices from a user interface 11 Mac devices 23
downloading Chromebook extension 45 viewing
downloading the Installer for managed devices in the Activation
Android devices 33 report 23
mobile Agent and the Dashboard 33 Mobile Agent
mobile Agent only 33 downloading
Electronic Serial Number 26, 28 for Android devices 33
forcing a call from a with the Dashboard for Android
Android device 37 devices 33
Mac device 29 installing on
Windows device 17 Android devices 34
installing managing
Agent Android devices 35
on individual removing from
Windows devices from Android devices 38
a user interface 12 Mobile Agent application for Android
the command line 12 devices 33
on multiple Mobile Agent for Android devices
Mac devices using downloading the Installer 33
disk imaging 24 mobile broadband adapters supported for
Windows devices using RTT 10
Active Directory script 15 Mobile Dashboard application for Android
disk imaging 15 devices 33
SMS 15 Mobile Sentinel application for Android
Mobile Agent on
devices 33
Android devices 34
Network Diagnostics Tool 48
outside applications on Android devices 32
downloading 48
installing agent on individual devices from the
running 48
command line 21 viewing log file 49
IP proxy settings persistence technology, BIOS persistence 9
configuring for Real-Time Technology, see RTT 9
Mac devices 30 removing the agent from
Windows devices 17 Android devices 38
Mac devices Mac devices 31
configuring IP proxy settings 30 Windows devices 18
deploying the agent to
individual devices from the DDS
console 20

Absolute DDS 55
Index Administrator's Guide for Absolute DDS Agent

requirements managed devices

for devices Mac 23
Windows Windows 14
RTT 9 the agent log for
RTT Android devices 37
mobile broadband adapters 10 Windows devices
requirements for Windows devices with configuring IP proxy settings 17
mobile broadband adapters 9 deploying the agent to
sending diagnostic information for individual devices from a user
Android devices 37 interface 11
setting your password on multiple devices using
Android devices 35 Active Directory script 15
starting the Agent Management utility 16 disk imaging 15
system requirements SMS 15
Android 32 forcing a call 17
minimum requirements installing the agent on
for Windows devices 8 individual devices from
minimum requirements for devices a user interface 12
Mac 19 the command line 12
Windows minimum requirements 8
RTT 9 RTT 9
technical support 7 starting the Agent Management utility 16
testing agent connection to the Monitoring verifying
Center 48 Agent is activated and calling in
upgrading the agent on successfully 14
Android devices 38 installation using
Mac devices 30 Agent Management utility 13
Windows devices 18 DDS console 14
verifying viewing
Agent is activated and calling in Agent call details 16
successfully on Agent Status information 16
Windows devices 14 managed devices in reports 14
installation of
Mac devices 22
Windows devices 13
the agent is activated and calling in
successfully on
Mac devices 23
verifying installation of
Mac devices
using the DDS console 23
Windows devices
using the DDS console 14
viewing
Agent call details for
Windows devices 16
Agent Status information for
Android devices 36
Windows devices 16
DDS console reports for
Mac devices 23
Windows devices 14

Absolute DDS 56