Does anyone have Q about having a MSI package for the basic version ?
Only an EXE installer is provided. We need do deploy it via Intune, it require a MSI or MSIx.
If i use the MSI provided with Licensed Client, a licence is needed (Basic works only 14 days).
Tried to build a custom MSIx, but have to manage Signature (W10 doesnt allow unsigned package to be installed)
Run the exe - don’t go through options just leave running. Then look in your appdata/local/temp files. I think. Grab the msi from there.
This is what I use. Works and tested.
Download the installer and start the install. Grab the msi it extracts from the exe (I think it puts it into %temp% if I recall) and copy it somewhere else. Complete the install.
Configure all the VPN settings the way you like and save the profile. Dig through your registry for the key that represents the profile and export the entire hive.
Go to https://reg2ps.azurewebsites.net/ and paste the contents of the reg file and click “create remediation script”. Save the script
package the installer msi from step 1 using intune package utility and deploy it as a vanilla win32 package msi with default switches/settings.
Package the powershell script from step 3 using intune package utility and deploy as win32 package with install syntax “powershell -executionpolicy bypass -file myregkeyscript.ps1”. Use just “cmd /c” as your uninstall command. For “detection” use one of the keys it will create as part of the install
Make the reg key package dependent on the msi package, and assign the MSI to users/groups of your choice.
Trying to deploy the exe directly, trying to script the config using FTG cli, both failed for me.
https://www.reddit.com/r/fortinet/comments/rfzq8c/msi_file_for_forticlient_vpn/
https://www.reddit.com/r/fortinet/comments/rhigof/how_to_setup_config_for_forticlient_via_intune/
Also you can totally deploy .exe Files with Intune, just need to pack them in a .intunewin File first.
What makes you think that you can’t?
Open the exe with 7zip. A lot of exe files have an msi in them.
Once installed, all the settings are in registry, so it’s pretty easy to automate.
This is all going from memory. In addition to getting the MSI, you can actually customize the MSI with your config file exported from an already configured client. Use ORCA to edit the Data property of the Properties table and store your config there. After install, the client will be configured. You can also edit properties here to select what features to install.
You can download an offline version via the support portal, iirc it comes in a few formats and can be deployed a variety of ways.
Even easier if you can switch to the Windows Store version. Then you can use Intune to deploy via Microsoft store, then deploy a follow up powershell script to configure your connection settings.
As I struggled a lot finding it, here is the path (as of July 2022):
C:\ProgramData\Applications\Cache\{stange-code-blabla}
ex:
C:\ProgramData\Applications\Cache\{CAE02F27-4AC1-473B-B78A-179183D2AFFD}
Yep, this. Found this solution by searching this sub a while back.
yes that worked very well. TY !
ty for the comment. What i know about intune is in the APP, when i want to deploy a ‘line-of-business-App’, i have not a large amount of options… I will look at your suggestion. May i deploy the MSI AND the XML config that way ?
Now i have already found the MSI installer in the temp folder, i wish to automatically configure the settings.
thank you but when we use this version, if we choose the basic install (free vpn), its valid only 14 days. I did get the msi in the user temp file while installing.
thanks. will look at it. Didnt know there was a Windows store version. Usually, the advantage of this (Windows Store) is ‘auto-update’.
You have a reference for a PS configuration script ?
Don’t use the Line-of-Business App, use Win32 Apps, they are far more “modern”/advanced.
If the ConfigImport is done via a .MSI Parameter then you can do it with one Command, AFAIK its a Command that needs to be used after the Client is installed. In this case you need to use a Script (also check first if the Installation was even successfull), i do recommend PSADT (https://psappdeploytoolkit.com/ ) for this, plain Powershell/CMD works too tho.
MSI files have this kind of built in database that is used for configuring the installation process. You can actually do everything that the Forticlient configuration client does if play with it enough. ORCA is a database editor for MSI files made by Microsoft. Orca.exe - Win32 apps | Microsoft Learn
Very interesting, that is definitely not normal as I’ve used that same offline installer a number of times, and it was indeed the free VPN only (non trial version).
Support ticket time! Best of luck friend.