# Install PROTECT Agent

This guide provides step-by-step instructions for installing, configuring, and uninstalling GuardWare PROTECT Agent on your device. It includes system prerequisites, installation instructions, post-installation setup, and uninstallation instructions.

## **System Requirements**

Before proceeding, make sure the following requirements are met to avoid installation errors and ensure GuardWare PROTECT functions properly on your device.

<table><thead><tr><th width="200">Specifications</th><th>Minimum Requirements</th></tr></thead><tbody><tr><td>Operating System</td><td>Windows 10 or later with all the latest updates installed</td></tr><tr><td>Processor</td><td>Intel i5, 4 cores</td></tr><tr><td>RAM</td><td>8 GB</td></tr><tr><td>Free Disk Space</td><td>5 GB</td></tr><tr><td>Firewall</td><td>Open port: 443 (HTTPS)</td></tr><tr><td>Tools</td><td><a href="#check-tls-settings-via-internet-options">TLS 1.2 or later enabled</a><br><a href="https://developer.microsoft.com/en-us/microsoft-edge/webview2?form=MA13LH">WebView2 latest version</a> (Only for Windows 10) (Install EverGreen Standalone Installer)</td></tr></tbody></table>

### Check TLS Settings via Internet Properties in Windows

Follow these steps to verify that **TLS 1.2 or later** is enabled on your system:

1. Press **Windows + R** to open the Run dialog box.
2. Type `inetcpl.cpl` and press **Enter**.\
   The **Internet Properties** window opens.
3. Go to the **Advanced** tab and scroll down to the **Security** section.\
   ![](/files/hD1MscjD4hh41cn52uwG)
4. Locate the following options and select them if they are not already enabled.
   1. **Use TLS 1.2**
   2. **Use TLS 1.3** (if available)
5. Click **Apply**, then click **OK**.

## Whitelist GuardWare PROTECT

To ensure smooth installation and operation of the GuardWare PROTECT Agent, you need to configure antivirus exclusions. For details, see [Whitelist GuardWare PROTECT](/setup-and-deploy/whitelist-guardware/whitelist-protect.md).

## Azure AD Users

For users registered with Azure AD, proceed directly to the [Install GuardWare PROTECT Agent](#install-guardware-protect-agent) section.

## Local AD and External Users (On-Premises and Outside the Organisation)

If your users are registered with on-premises Active Directory (local AD), complete the [Pre-installation steps](#pre-installation-setup) below and then proceed to [install the PROTECT Agent](#install-guardware-protect-agent).

This also applies to users who are outside your organisation, such as partners, contractors, or clients, who are not part of your organisation’s Azure AD or Local AD.

### Pre-Installation Setup

Local AD users and external users need an invitation from GuardWare Australia to use GuardWare PROTECT. Once you receive an invitation, follow these steps:

1. Accept the invitation sent to your email.
2. After accepting, you’ll be prompted to **send a code to your email**. Click **Send code**.

<div align="left"><img src="/files/12445f9bdc75eec4e4c2a1cb9dceb39ba52c42f3" alt="" width="375"></div>

3. Enter the code sent to your email and **sign in**.
4. GuardWare requests certain permissions. Read the requested permission and accept. You’ll then be directed to the Welcome page, where you can see details on how to get started.

<div align="left"><img src="/files/649f5cb40dc942324c2d801f79b2ab13b85e524e" alt="" width="375"></div>

## Install GuardWare PROTECT Agent

1. Double-click the provided **PROTECT Agent installer** file to begin the installation.
2. In the **Setup Wizard**, click **Next** to continue.

<div align="left"><figure><img src="/files/bfc2e4a91bab9fad1cec0e56edbe8b73856669ea" alt="" width="375"><figcaption></figcaption></figure></div>

3. Read and accept the **End User Licence Agreement (EULA)** and click **Next**.

<div align="left"><img src="/files/zaPFKlP7uEZBXuJEIzlV" alt="" width="375"></div>

4. Choose the folder where you want to install GuardWare PROTECT and click **Next**. By default, PROTECT will be installed in: `C:\Program Files\`.
5. Click **Install**. The installation may take a few minutes to complete.

<div align="left"><figure><img src="/files/9be44d3a0aa9d718b2341bc6d482182597a08b98" alt="" width="375"><figcaption></figcaption></figure></div>

6. If you do not have Microsoft Azure CLI installed, a Setup Wizard will prompt you to install it. Read and agree to the licence agreement terms and click **Install**.

<div align="left"><figure><img src="/files/uRRwnIu5dO0in1ilCgg5" alt="" width="375"><figcaption></figcaption></figure></div>

7. If you do not have Microsoft Visual C++ Redistributable installed, a Setup Wizard will prompt you to install it. Read and agree to the licence agreement terms and click **Install**.\
   ![](/files/A2C839dOz6ImVUQnfgLo)
8. Once the installation is complete, click **Finish** to exit the Setup Wizard and continue with the PROTECT Agent installation.
9. During the agent installation, a User Account Control (UAC) dialog box may appear. This is a standard Windows security feature that verifies whether you want to allow the installer to make changes to your computer. When this dialog appears:
   1. Verify that the publisher is GuardWare Australia Pty Ltd.
   2. Click **Yes** to allow the installation to proceed. Clicking **No** cancels the installation.
10. Once the PROTECT Agent installation is complete, click **Finish** to exit the wizard.
11. You’ll be prompted to restart your device. Click **Yes**. After restarting your device, follow the steps in [Post-Installation Setup](#post-installation-setup).<br>

    <figure><img src="/files/I14UpyDdsg5SDwlhJCdu" alt=""><figcaption></figcaption></figure>

Restarting is mandatory for GuardWare PROTECT to install successfully.

## Post-Installation Setup

After restarting your device, a **Welcome Wizard** appears automatically. If you do not see it right away, please wait a few minutes.

1. In the Welcome wizard, click **Login with Azure**.

<div align="left"><figure><img src="/files/b5ed8eb8d2556b94dbc9268420084f0cc40477e7" alt="" width="375"><figcaption></figcaption></figure></div>

2. For Azure AD users:
   1. Select your work email address and click **Continue**.

      <div align="left"><figure><img src="/files/33b6bb47c2b4e346bad543a44af49e7e7e5bfe84" alt="" width="375"><figcaption></figcaption></figure></div>
   2. Select your **Tenant ID** and **Subscription** and click **Submit**.

      1. **Tenant ID:** The unique identifier of your Azure AD.
      2. **Subscription:** Defines the set of resources and the billing account.

         <div align="left"><figure><img src="/files/30b1d5d4419ba857d56809abade2b281aa42c008" alt="" width="375"><figcaption></figcaption></figure></div>

      Select the Subscription that contains your Key Vault. If multiple appear, select the one where the Key Vault and Service Principal for GuardWare PROTECT are set up. If you’re not certain which subscription applies, you can verify it in the [Azure Portal](https://portal.azure.com/) under **Subscription** or contact your administrator.

      <figure><img src="/files/524fb992c642a4f4d9f7fb8f36de4f4244a53f9d" alt=""><figcaption></figcaption></figure>
3. Click **Exit** when the setup is complete.
4. For external users:
   1. Select **Work or school account**.
   2. Enter the email address where you received the invitation, and click **Next**.
   3. Check your email for a verification code, then enter the code and click **Sign in**.
   4. When prompted to sign in automatically across desktop apps and browsers, select\
      **No, this app only** (for better security). This ensures your Azure login is used only within GuardWare PROTECT, preventing other apps or browsers on the same device from automatically accessing your credentials. You can always sign in separately to other apps when needed.
   5. Click **Exit** when the setup is complete.
5. During the process, if a Windows Security prompt appears stating that **Windows Firewall has blocked some features of** **GWProtectDesktop**, click **Allow**.\
   \
   If the **prompt does not appear** or **you did not allow** it in the above step, follow the steps below to allow **GWProtectDesktop** to communicate through Windows Defender Firewall. Allowing **GWProtectDesktop** through the firewall ensures the PROTECT Agent can communicate with required services and enforce file protection policies correctly.
   1. Open **Control Panel** > **System and Security** > **Windows Defender Firewall**.
   2. Click **Allow an app or feature through Windows Defender Firewall**.
   3. Select **Change settings**.
   4. Locate **GWProtectDesktop** in the list and enable the **Private** and **Public** networks.
   5. Click **OK** to save the changes.

      <div align="left"><figure><img src="/files/6db46ab113ec759ece59d81c966e4bd16133aaa3" alt="" width="563"><figcaption></figcaption></figure></div>

You can now use GuardWare PROTECT to add protection to sensitive files, set classifications, restrict access to Security Groups, add expiry dates, restrict circulation, and so on.

## Uninstall GuardWare PROTECT Agent

{% hint style="danger" %} <mark style="color:$danger;">**Make sure to remove protection from your protected files before uninstalling PROTECT; otherwise, you won't be able to access them afterwards.**</mark>
{% endhint %}

To remove GuardWare PROTECT from your device:

1. Double-click the **PROTECT Agent installer**.
2. In the **Setup Wizard,** click **Next** to continue.

<div align="left"><img src="/files/97c1ae5b8282dd99b47cb94a51bed477ff33e577" alt="" width="375"></div>

3. You’ll get options to modify, repair, or remove PROTECT. Choose **Remove**, then click **Remove** to uninstall GuardWare PROTECT.

<div align="left"><img src="/files/ccd1d6871d7ec4462d06215525e0c4c673151db6" alt="" width="375"></div>

<div align="left"><img src="/files/9dd36c0ffaaf81c6c804110363caa0bc75c187dd" alt="" width="375"></div>

4. (Optional) To review or change installation settings, click **Back**. To exit without uninstalling, click **Cancel**.
5. During the uninstallation, you may see the following dialogs:
   1. **Installer Information**

      When the Installer Information appears, click **OK** to continue with the uninstallation.\
      ![](/files/2lm0H8KRnEa51cLNM5BB)
   2. **User Account Control (UAC)**\
      This is a standard Windows security feature that verifies whether you want to allow the installer to make changes to your computer. When this dialog appears:
      1. Verify that the publisher is displayed as GuardWare Australia Pty Ltd.
      2. Click **Yes** to allow the uninstallation to proceed. If you select **No**, the uninstallation will be cancelled.
6. After uninstallation is complete, you will be prompted to restart your device. Click **Yes**.

{% hint style="info" %}
Restarting is mandatory for GuardWare PROTECT to uninstall fully.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardware.com/setup-and-deploy/install-agent/install-protect-agent.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.