Installing the Celiveo 365 Admin Browser Agent (ABA)

The Admin Browser Agent is a secure module that is installed as an accessory to the browser used by the Celiveo 365 administrator or technician.

That module finds, imports, deletes printers, and loads embedded agents in the printers.
Those must be on networks accessible from the browser PC.
The ABA is built on a full Zero-Trust-Access security based on certificate chains used to establish a mutual authentication TLS connection to the Cloud.

The presence of the ABA is detected by the Celiveo 365 Web Admin portal, it will propose to download and install it if not detected by the browser session.

The ABA can be generated and secured to one single Entra ID user, or shared by multiple users on a specific Windows workstation.

Single User Access ABA

The Single User Access ABA certificate chain is tied to the user Entra ID identity. Select the Single User Access icon then click Next.

An ABA installation package is dynamically generated, click on “Download” to download it.
The package includes a high-security certificate chain generated for the logged in administrator .

The certificate password key is displayed in the popup, it won’t appear twice, it is not retained by Celiveo 365.
You therefore have to copy it in a safe place as it is requested during the ABA installation process, to install the Zero Trust Access certificate.

*If you intend to use the same User-ABA on different machines (for the same user), copy the password that is provided during your initial download and use it to install the same ABA package on a different computer.

In the Celiveo 365 Web Admin portal, if you download the ABA and it has already been generated for that user, the following popup appears:

If you keep the password, the same package that was previously produced is downloaded by the browser.
The certificate password is not available, you have to retrieve it from your notes when you initially generated the ABA.
The related certificate public key is not erased in the Cloud.

If you forgot the ABA certificate password, you can request a new certificate:

Delete any old ABA installation package from your PC, install the new package after writing the certificate password in a safe place.
The related certificate public key is erased in the Cloud so that the old package can’t be used anymore.

*You should generate a new ABA for an admin user whose identity was compromised, so that the past certificate chain is revoked and a new one is generated

!Only one ABA can be installed on a PC If you need more than one user to use a Windows PC, you need to install a multi-user ABA.

Shared User Access ABA

The shared User Access ABA certificate chain is tied to the user Entra ID identity. Select the Single User Access icon then click Next.

Enter the PC workstation name in the popup then press “Next”.

An ABA installation package is dynamically generated, click on “Download” to download it.
The package includes a high-security certificate chain generated for the logged in administrator, protected by a password.

The certificate password key is displayed in the popup, it won’t appear twice, it is not retained by Celiveo 365.
You therefore have to copy it in a safe place as it is requested during the ABA installation process, to install the Zero Trust Access certificate.

*You should not install the same shared ABA on different machines as that implies using a workstation name on more than one PC. If you want to install a Shared User Access ABA on another PC, just generate another Shared User Access ABA from that other PC.

In the Celiveo 365 Web Admin portal, if you request a Shared User Access ABA for a Workstation name that already has a shared User Access ABA generated, the following popup appears:

If you keep the password, the same package that was previously produced is downloaded by the browser.
The certificate password is not available, you have to retrieve it from your notes when you initially generated that ABA.
The related certificate public key is not erased in the Cloud.

If you forgot the ABA certificate password, you can request a new certificate:

Delete any old ABA installation package from your PC, install the new package on the workstation after writing the certificate password in a safe place.

*You should generate a new ABA for a workstation that has been compromised, so that the past certificate chain is revoked and a new one is generated

!Only one ABA can be installed on a PC.

Updating the ABA

The Celiveo 365 Admin Browser Agent (ABA) is regularly updated to support new printers and add more capabilities.
It is therefore important you always use the current version.

When the ABA starts it verifies if a newer version of the ABA is available.
If this is the case the following window appears:

Click on “Download and install now” to install the update.

*You don’t need to reenter the certificate key during updates.

You can also verify manually if you have the latest ABA version, using the “Check for Updates” option in the ABA menu.

*Notes:
For very high security environments, once the import and sync process is done, the ABA can be uninstalled if needed and it will not have an impact on the Web Admin or on Synced Printers.
If the certificate password is forgotten, a new ABA needs to be generated and downloaded from the Web Admin with its new password. The previously installed ABA will stop working because the certificate is revoked for security purpose.

©2024 Celiveo Pte Ltd – All Rights Reserved