Deploy the Windows Agent

Guidance

• Use Allow Windows Agent Enrollment on the existing asset.
• Run the downloaded production package once and approve UAC.
• Verify the four endpoint states and Detailed Posture after completion.

Before you install

• Use a qualified Windows x64 platform listed in System Requirements.
• Sign in as a user who can approve UAC for a per-machine installation.
• Keep the device online and able to reach its commissioned OZVO Edge over HTTPS.
• Locate the existing Observed Asset in OZVO; do not create a duplicate device.

Deploy and enroll

1. Sign into the OZVO dashboard.
2. Open Assets and locate the existing Windows asset.
3. Choose Allow Windows Agent Enrollment.
4. Download and run the production OZVO Windows Setup package from the displayed action.
5. Approve the Windows UAC prompt.
6. Allow Setup to install or upgrade and enroll. Do not launch a second copy.
7. Return to OZVO when Setup completes.

Verify the result

• Verified — authenticated device evidence matches the endpoint identity.
• Enrolled — the Agent has an approved endpoint identity.
• Healthy — current evidence does not indicate an Agent health condition.
• Current — posture evidence is within the current freshness window.
• Detailed Posture — all ten posture sections show their latest typed state.

Supported workflow boundary

Normal installation and enrollment are performed by the production Setup experience. Do not use engineering bootstrap commands, direct database edits, manual certificates, manual CNG key operations, or manual Windows service creation.