Views:

Deploy persistent and non-persistent virtual desktops in a VDI environment.

Important
Important
  • Follow these instructions carefully. If you clone your own VDI machines, it causes agent IDs to be duplicated and deployed agents cannot perform response actions.
  • To use this feature, you must first complete the Initial Setup wizard on the Endpoint Groups tab.
  • Virtual desktop support requires a Citrix, VMware, or Microsoft hypervisor environment.
Tip
Tip
We support multi-session VDI solutions. We do not change or limit the functionality of your virtual desktop operating systems. Our VDI solution works by creating unique device IDs for each virtual desktop after provisioning.

Feature Support

Feature
Persistent
Non-persistent
Agent upgrade (in-place)
Supported
Not supported
Agent upgrade (template)
Supported
Supported
Important
Important
You must use a snapshot of your template from before you ran ImageSetupTool.exe.
Vulnerability Assessment
Supported
Not supported
Zero Trust Secure Access
Supported on provisioned desktops
Supported on provisioned desktops
Important
Important
The image setup tool does not support enabling Zero Trust Secure Access on the base image template. To enable Zero Trust Secure Access on virtual desktops, deploy after newly-provisioned machines appear on the Inventory List on the console.

Tested Environments

Provider
Supported Platforms
VMware
  • VMware Horizon 8.3
Microsoft
  • Azure Virtual Desktop
  • Windows 365
Citrix
  • Citrix Virtual Desktops
  • Citrix Virtual Apps

Procedure

  1. Configure your virtual desktop template, including operating system, VM settings, and software.
  2. Configure all software for a VDI environment, including endpoint protection software.
    Important
    Important
    For Apex One customers, run the template generation tool before exporting.
  3. Download and install the agent program on the virtual desktop by going to the Endpoint Inventory app and clicking on the Agent Installer tab.
  4. (Optional) Remove non-persistent agents by configuring inactive agent removal in the Endpoint List.
  5. Verify that your virtual desktop appears on the Endpoint List tab in the Endpoint Inventory app, and ensure that the correct features are enabled.
  6. (Optional) Create a snapshot of your virtual desktop to facilitate future agent upgrades.
    For more information, see Updating the agent on virtual desktops.
  7. Download ImageSetupTool.exe from Trend Vision One and copy the admin token from the Agent Installer tab on the Endpoint Inventory app.
    Note
    Note
    The image setup tool is specific to your organization.
  8. Run ImageSetupTool.exe as an administrator on the virtual desktop to prepare the agent to run in a VDI environment.
    Important
    Important
    Specify if your virtual machine is persistent or non-persistent.
    Command
    Use Case
    Supported Features
    ImageSetupTool.exe --persistent
    Persistent virtual desktops
    • Standard agent auto-removal
    • Vulnerability Assessment available
    • In-place upgrades
    ImageSetupTool.exe --non-persistent
    Non-persistent virtual desktops
    • Non-persistent agent auto-removal available from Endpoint Inventory
    • Vulnerability Assessment disabled
    • In-place upgrades disabled
    ImageSetupTool.exe --persistent --no-login
    ImageSetupTool.exe --non-persistent --no-login
    Do not require a login for the newly provisioned machine
    • Citrix ICA virtual channels
  9. Paste the admin token copied from the Endpoint Inventory app when prompted.
  10. Delete the image setup tool from the virtual desktop once image setup completes.
  11. Export your virtual desktop template.
    Ensure that endpoint groups are configured to accommodate virtual desktops. For more information on endpoint grouping, see Managing endpoint groups.
  12. Sign in to virtual desktops to see the newly-provisioned endpoints appear on the Endpoint List in the Endpoint Inventory app.