Introduction to the Teramind Agent

Teramind Agent is an application that runs natively on the user’s computer, tracks their activities, and enforces any behavior policies and rules defined on the Teramind Dashboard. It must be installed on every machine that you want to track.

The Download Teramind Agent screen allows you to download the Teramind Agent.

For more information on the Agent specifications and requirements, please see the Teramind Agent Specifications and Supported Platforms article on our Knowledge Base.

The instructions below guide you through the local installation of the Agent. To learn how to deploy the Revealed or Stealth Agent remotely, please refer to the following articles in our Knowledge Base:

Note: Remote installation is strictly forbidden for the Standard Agent. It must be installed locally to ensure the mandatory acknowledgment notice is accepted by the user.

If you encounter any issues installing the Agent, please check out the Troubleshooting section of the Knowledge Base.

If you are a regular user (not an admin), you will be able to download the Revealed Agent only. You cannot download the Standard or Stealth Agent.

Notes for the Teramind Mac Users

At the moment, Teramind on Mac has limited functionalities and is only supported on macOS Big Sur (11.7.10) and newer. Check out this article to learn which Teramind features are available on the Mac.
You cannot run the installer from the browser directly on a Mac. You need to run it from the Launcher / Finder.
After installing the Agent, you may need to configure some macOS permissions for the Agent to function properly.

Agent Types

Teramind has three types of Agents you can choose from:

Cloud trial accounts only have access to the Revealed and Standard Agents. The Stealth Agent requires a vetting process. Please refer to the Stealth Agent section for details on how to gain access.

Please check out this article in our Knowledge base to learn the differences between the Agent types.

Standard Agent

The Standard Agent offers the same monitoring capabilities as the Stealth Agent, with the primary distinction residing in the installation process. On Windows, the Standard Agent displays a mandatory "popup" acknowledgment notice that must be accepted by the user before installation can proceed.

Note: Currently, the macOS version of the Standard Agent does not require the acknowledgment notice.

Once installed, the Agent operates silently in the background, just like the Stealth Agent. The acknowledgment notice is only shown during the initial installation; subsequent updates to the Agent will not trigger the popup.

Key Restrictions and Requirements:

Cloud Trials Only: The Standard Agent is exclusively available for Cloud trials. Once you have been vetted, you can switch to the Stealth Agent. For more information on this process, please refer to the Stealth Agent section.
No Silent Deployment: To ensure the user sees the acknowledgment notice, remote deployment via GPO, SCCM/SCOM, scripts, MDM tools, etc. is strictly prohibited.
Locked Filename: The installer enforces a fixed filename structure to prevent attackers from disguising the file. If renamed, the installer will not function.
No Installation Parameters: Custom installation parameters or switches aren’t supported.

Downloading the Standard Agent

To download the Standard Agent, do the following:

1. Click the Standard Agent tab from the Download Teramind Agent screen.

2. Click the Windows Installer x64 button or the MacOS Installer button to download the installer.

3. If the user has a Windows ARM computer, click Windows Installer ARM64 to download the ARM installer.

4. You can also click the Copy download URL link to copy the download URL into the clipboard, open it in your browser, save the installer file on a USB stick, and take it to the target computer(s). The same installer can be used to install the Revealed Agent on multiple computers.

5. Near the bottom of the screen, you will see links to our Knowledge Base resources to help you with the deployment process.

Installing the Standard Agent (Windows)

1. Open an elevated Command Prompt (search for “cmd” in the Start menu, right-click “Command Prompt”, and select “Run as administrator”).

2. Run the following command:

msiexec /i <path-to-teramind-agent.msi>

The < path-to-teramind-agent.msi > is the path where you saved the installation package (.msi file). For example:

msiexec /i c:\Users\Admin\Downloads\teramind_agent_x64_s-i(__8393b2bf7cca79d089e51d56ef558f75a5ca2073).msi

3. You will see the Install Teramind Agent notification window:

4. Click the Begin Installation button to install the Agent.

Installing the Standard Agent (Mac)

On macOS, the installation process for the Standard Agent is same as the Stealth Agent.

1. Run the following command in the Terminal (Applications > Utilities > Terminal):

sudo installer -pkg "<path-to-teramind-mac-installer>" -target /

The <path-to-teramind-mac-installer> is the path where you saved the installation package (.pkg file).

For example:

sudo installer -pkg "/User/John/Downloads/tmagent-i(__261e84a5119d483d322c3a398d159d493fc6b803).pkg" -target /

2. After you have installed the Agent, you will need to enable a few macOS permissions for the Agent to be able to record the screen and other activities properly.

Enrolling: Adding Users to the Dashboard

The employee account will be created automatically when the Standard Agent is installed on a user's computer - you do not need to add them manually to the Dashboard. However, you can still edit the employee’s profile.

Revealed Agent

The Revealed Agent is also known as the Visible or Freelance Agent. It's built for transparency and user-led monitoring. Unlike other Agent types, it only tracks activity when the user is actively logged* into the application and chooses to start the monitoring.

This Agent empowers users by allowing them to select the specific project or task they are currently working on. Additionally, users can view a history of their past tasks and, if permitted by an administrator, have the flexibility to create their own tasks directly within the interface. Check out the Using the Revealed Agent article to learn how to use the Revealed Agent interface.

The Revealed Agent is an ideal solution for monitoring contractors, vendors, and freelancers, or for organizations that prefer to give employees autonomy and control over their own monitoring sessions.

*Before a new user can log into the Revealed Agent and start monitoring, an administrator must first add them to the Teramind Dashboard from the Employees screen.

Key Features:

User-Driven Monitoring: Employees have full control to start and stop monitoring at their discretion, providing a clear boundary between work and personal time.
Project and Task Selection: Users can actively select specific projects and tasks from the Agent interface to ensure their work is categorized correctly in the Dashboard.
Task Creation: If permitted by an administrator, users also have the flexibility to create their own tasks directly within the Agent, allowing for more granular and accurate time-tracking as their workflow evolves.

Downloading the Revealed Agent

To download the Revealed Agent:

1. Click the Revealed Agent tab from the Download Teramind Agent screen.

2. Click the Windows Installer x64 button or the MacOS Installer button to download the installer.

3. If the user has a Windows ARM computer, click Windows Installer ARM64 to download the ARM installer.

5. Click the Send email instructions to me link to get the instructions and download links to your email. The email will look like this:

6. Click the Invite users to download agent option to create new employees and send invitations to their email addresses to install the Agent. A new window will pop up:

Enter the first name, last name, and email address of an employee. You can add a user by clicking the Add user button. You can remove a user by clicking the Remove button. Note that if you enter the email address of an existing employee, it will fail with the message “Email is already in use”.

Click the Submit button to add the user(s).

The user will receive an email with the invitation:

The user can click the Windows or macOS download link to download and install the Agent on their computer. The user can use the Username and Password included in the email to log into the Revealed Agent and, if allowed, log into the Dashboard.

Check out the How to use the Revealed Agent article to learn how a user can use it.

You can turn on the User can login to Teramind Dashboard option under the Employees > Account tab to let a regular user access their information.

7. Near the bottom of the screen, you will see links to our Knowledge Base resources to help you with the deployment process.

If you are using an installation script or other automation, you can get the Agent download links from the Dashboard or through the API. This Knowledge Base article, How to Obtain the Agent Download Links (Cloud) shows you how.

Installing the Revealed Agent (Windows)

You will need administrator privileges on the endpoint to install the Agent properly.

Run the Agent installer file on the computer. Notice that you will need administrator privileges to install the Agent properly. You will see the installer window:

1. Click the Begin installation button to install the Agent.

2. When the installation is complete, the user can launch the Agent from the Start Menu.

Installing the Revealed Agent (Mac)

1. Download the pkg file.

2. Rename the pkg file to include any optional parameters (see the Agent Installation Parameters (Mac) section to learn more).

3. Open it, and the installation dialog will open:

4. Click the Continue button. You will be taken to the next step, Destination Select:

5. Click the Continue button. You will be taken to the next step, Installation Type:

6. Click the Install button. You will be taken to the Installer screen:

7. Enter your username and password, and then click the Install Software button. The installation will start. When it finishes, you will see the The installation was successful message:

8. Click the Close button to finish the installation.

After you have installed the agent, you will need to enable a few macOS permissions for the agent to be able to record the screen and other activities properly.

Enrolling: Adding Users to the Dashboard

After you have installed the Revealed Agent on a user's computer, the user will be able to log into the Revealed Agent using their employee account in the Teramind dashboard. If an employee account has not yet been created, you will need to add them to the Teramind Dashboard so that they can be tracked properly. Check out the Creating a New Employee section to learn how to add a new user to the Dashboard.

Using the Revealed Agent

Check out this article to learn how to use the Revealed Agent: How to use the Revealed Agent.

Stealth Agent

Restricted Access:

The Stealth Agent is available exclusively to vetted customers. To complete your identity verification, please reach out to your Customer Success Manager or contact us via the Chat feature located at the bottom-right corner of your Teramind Dashboard, Knowledge Base, or website.

The Stealth Agent is also known as the Hidden or Silent Agent. It's designed for scenarios where you prefer that users are not aware they are being monitored.

It begins tracking as soon as a user logs into Windows or macOS. Once the Agent connects, typically within a minute of installation or the initial login - both the user and the computer will automatically appear on your Dashboard. Computer names are pulled directly from the operating system's hostname. To ensure a smooth setup, please keep the following in mind:

Unique Hostnames: We recommend ensuring each computer has a unique name to avoid confusion in your reports.
Renaming Devices: It is best to rename a computer before installing the Agent. If a computer is renamed after installation, Teramind will attempt to auto-update the name in the Dashboard. However, this often results in the creation of a new employee account to reflect the updated hostname.

Downloading the Stealth Agent

A regular Employee cannot download a Stealth Agent. Only an administrator can download a Stealth Agent from the Agent Download screen.

To download the Stealth Agent, do the following:

1. Click the Stealth Agent tab from the Download Teramind Agent screen.

2. Click the Windows Installer x64 button or the MacOS Installer button to download the installer.

3. You can also click the Copy download URL link to copy the download URL into the clipboard, open it in your browser, save the installer file on a USB stick, and take it to the target computer(s). The same installer can be used to install the Revealed Agent on multiple computers.

4. Near the bottom of the screen, you will see links to our Knowledge Base resources to help you with the deployment process.

Installing the Stealth Agent – Command Line (Windows/Cloud)

MSIEXEC can be used in either command line or from within a script, as follows:

msiexec /i <path-to-teramind-agent.msi> TMINSTANCE=<instance> /qn

Here, <instance> can be the instance name or instance ID. For example, “mycompany”, or “__e67a6d86f7ebb12372c23e8f889388b3eac97fc6”

For example:

msiexec /i "C:\Temp\Install Test\teramind_agent_x64.msi" TMINSTANCE=mycompany /qn

Or:

msiexec /i "C:\Temp\Install Test\teramind_agent_x64.msi" TMINSTANCE=__e67a6d86f7ebb12372c23e8f889388b3eac97fc6 /qn

If the agent file name already contains the instance name/ID (within the -i() parameter), and you don’t include the /qn parameter (silent install), then you don't have to specify the TMINSTANCE parameter.

For example:

msiexec /i "C:\Temp\Install Test\teramind_agent_x64_s-i(mycompany).msi"

You can use optional installation parameters to configure the installation and how the agent behaves. Please see the Agent Installation Parameters (Windows) section below for more information.

Installing the Stealth Agent – Command Line (Mac/Cloud)

To install the Mac Stealth Agent, run the following command in the Terminal (Applications > Utilities > Terminal):

sudo installer -pkg "<path-to-teramind-mac-installer>" -target /

The <path-to-teramind-mac-installer> is the path where you saved the installation package (.pkg file).

For example:

sudo installer -pkg "/User/John/Downloads/tmagent-i(__261e84a5119d483d322c3a398d159d493fc6b803).pkg" -target /

You can get the package from the Stealth Agent’s download screen.

You can use optional installation parameters to configure the installation and how the agent behaves. Please see the Agent Installation Parameters (Mac) section below for more information.

After you have installed the Agent, you will need to enable a few macOS permissions for the agent to be able to record the screen and other activities properly.

Enrolling: Adding Users to the Dashboard

The employee account will be created automatically when the Agent is installed on a user's computer - you do not need to add them manually to the Dashboard. However, you can still edit the employee’s profile.

Protecting the Agent Installation

You can optionally install the Teramind Stealth Agent in a protected mode using the DO_PROTECTION installation parameter (see below). The protection mode makes the agent installation more secure and prevents common tampering. The How to protect the Agent installation article on our Knowledge Base explains it in more detail.

Setting the macOS Permissions

After you have installed the Agent, you will need to enable a few macOS permissions for the Agent to be able to record the screen and other activities properly. Check out this article to learn how to apply the permissions.

Agent Installation/Configuration Parameters (Windows)

These installation parameters aren’t supported by the Standard Agent.

You can use some optional parameters as command-line options or through the Agent configuration file.

Agent Configuration File

Some of the installation parameters (where indicated) can also be applied through the Agent configuration file (config.cfg) post-installation. For example, you can use a command like: msiexec /i teramind_agent_v5.0.0_x64.msi TMROUTER=10.55.55.58:235 during the installation. Or, you can add this line, router=10.55.55.58:235, in the config file.

The config file is usually located in the following locations:

Stealth Agent: C:\ProgramData\{4CEC2908-5CE4-48F0-A717-8FC833D8017A}\config

Revealed Agent: C:\ProgramData\Teramind Agent\config

Here, <agent version> is the Agent version, for example, 20.0.1084. <guid> is the globally unique identifier of the Agent. For example, {551DD8F9-2009-4565-B57B-1390B7DA6AF0}. Check out this Knowledge Base article to learn how to find your Agent version.

Installation / Config File Parameter	Description
Installation Parameter: `/qn` Config File Parameter: N/A	Enables silent installation. For example, msiexec /i teramind_agent_v5.0.0_x64.msi /qn
Installation Parameter: `TMROUTER=<ip-of-vm:port>` Config File Parameter: `router=< ip-of-vm:port>`	This option is applicable for On-Premises deployments only. It can be used to assign the load balancer IP and port. For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMROUTER=10.55.55.58:235 Note that the *`port`* is optional. If not assigned, the default port (`443`) will be used. Please see the Settings > Server section for more information.
Installation Parameter: `TMINSTANCE=<account-name>` Config File Parameter: `instance=<account-name>`	Assigns the instance name. Provide an `<account-name>` or use `onsite` for an On-Premises deployment. For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMINSTANCE=onsite This option isn't required for Cloud deployments since the Cloud installer already has the instance name embedded.
Installation Parameter: `TMDISABLEAUDIO=<1/0>` Config File Parameter: `N/A`	Turns audio monitoring on (`0`) or off (`1`). For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMDISABLEAUDIO=1 This is similar to toggling the Audio option from the Monitoring Profile. Note: If this parameter isn't specified, then monitoring profile settings will be used.
Installation Parameter: `TMDOMAINOVERRIDE=<domain-name>` Config File Parameter: `domain-override=<domain-name>`	Supported on the Stealth Agent only. Can be used to override the user’s domain/computer name with the specified `<domain-name>`. For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMDOMAINOVERRIDE=acme.com
Installation Parameter: `DO_PROTECTION=<yes/no>` Config File Parameter: N/A	Installs the Stealth Agent in protected mode. For example, msiexec /i teramind_agent_v5.0.0_x64.msi DO_PROTECTION=yes Installing the Agent in protected mode helps: prevent users from seeing the Agent in the system services list prevent the stopping of the service using commands such as: ‘sc stop’ prevent the corruption of the service registration prevent uninstallation by an unauthorized admin You can specify the protection password in the Configurations > Settings > Agents> Stealth agent protection section. Make sure to set the password before installing the Agent. If you set the password afterwards, there might be problems with managing the Agent and uninstalling it.
Installation Parameter: `TMDISABLEAUTOUPDATE=<1/0>` Config File Parameter: disable-autoupdate=<1/0>	Supported on Cloud deployments only. Will enable (`0`) or disable (`1`) the auto update of the Agent. For example, msiexec /i teramind_agent_v0.1.249_x86.msi TMDISABLEAUTOUPDATE=1 This overrides the auto-update settings on the Configurations > Settings >Agents section of the dashboard. For more information, check out this article on the Teramind Knowledge Base.
Installation Parameter: `/lv "<log-file-name>"` Config File Parameter:* N/A	Enables installation logging. Replace the `<log-file-name>` with your file name. For example, msiexec /i teramind_agent_v0.1.249_x86.msi /l*v "C:\Windows\Temp\TM.log" For more information, check out this article: How to collect the Teramind Agent logs.
Installation Parameter: `TMROOTDIR=<directory>` Config File Parameter: N/A	Allows you to specify a directory/folder where the agent will be installed. Replace the `<directory>` with your directory/folder. For example, msiexec /i teramind_agent_v0.1.249_x86.msi TMROOTDIR=”c:\myagent”
Installation Parameter: `TMDNSNAME=<new name>` Config File Parameter: N/A	The Agent has a local proxy server to receive the data from the browser proxy injections. By default, its name is `tm.filter`, but you can use the `TMDNSNAME` parameter to override it. For example, msiexec /i teramind_agent_v0.1.261_x64.msi TMDNSNAME=localhost
Installation Parameter: `TMAGENTEXE=<new name>` Config File Parameter: N/A	By default, the Agent name is `dwm.exe`. However, Windows also has a service with the same name for its Desktop Windows Manager. We've added a new command-line parameter, `TMAGENTEXE,` so that you can change the default Agent name to something else to make it clearer and avoid confusion with Windows services. You can use the parameter when installing the Agent. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMAGENTEXE=my_agent.exe
Installation Parameter: `TMCLIPMONEXE=<custom-name.exe>` Config File Parameter: N/A	This parameter allows you to set a custom name for the clipboard monitor service (replacing the default “clm.exe”) of the Stealth Agent. This makes it easier to obfuscate the process name according to your own preferences. For example, msiexec /i teramind_agent_v24.13.2412_x64.msi TMINSTANCE=test TMCLIPMONEXE=my-name.exe
Installation Parameter: `TMADDENTRYTOARP=<1/0>` Config File Parameter: N/A	By default, Teramind Stealth Agent isn't shown on the Windows list of installed programs (known as the Add or Remove Programs list or ARP list). If enabled (`0`), this parameter will allow you to add the Stealth Agent to the installed programs list on Windows. For example, msiexec /i teramind_agent_v6.0.47_x64.msi TMADDENTRYTOARP=1
Installation Parameter: `TMHASHUSERNAMES=<1/0>` Config File Parameter: `hash-user-names=<1/0>`	If enabled (1), this option will obfuscate the usernames with an MD5 hash so that they are anonymized. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMHASHUSERNAMES=1 The user will then appear like: `9b628f6fc724858c4bfcd885b90b6594@desktop52` Note: This parameter can be used with a Stealth Agent only. If you try to use it with a Revealed Agent, the user will not be able to log in.
Installation Parameter: `TMHIDERDPCLIENTIP=<1/0>` Config File Parameter: `hide-rdp-client-ip=<1/0>`	When enabled (`0`), this option will let you hide the client's IP address from the server. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMHIDERDPCLIENTIP=0 Usually, when you connect to a computer over an RDP session, the Agent sends the IP address of the client to the server. However, for privacy or security reasons, you might not want to expose the client's IP address to the server. This option will force the Agent to replace the actual IP address with `0.0.0.0`.
Installation Parameter: `TMNOFSDRV=<1/0>` Config File Parameter: `driver-flags=<1/0>`	If used, this option will disable (`1`) or enable (`0`) the Teramind file driver. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMNOFSDRV=1 This is similar to disabling the File driver option from the Monitoring Profile > Advanced tab.
Installation Parameter: `TMENCRYPTION=<1/0>` Config File Parameter: `enable-encryption=<1/0>`	If used, this option will enable (`1`) or disable (`0`) end-to-end encryption. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMENCRYPTION=1 For more information, please check out the What is End-to-End (E2EE) Encryption and how to use it (On-Premises)? article on the Knowledge Base.
Installation Parameter: `TMNOREMOTETS=<1/0>` Config File Parameter: `disable-remote-troubleshooting=<1/0>`	Disables (`1)` or enables (`0`) the remote troubleshooting feature. For example, msiexec /i teramind_agent_v0.1.260.3940_x64.msi TMNOREMOTETS =1 Check out this Knowledge Base article to learn more.
Installation Parameter: N/A Config File Parameter: `show-reconnection-popup=<1/0>`	Disables (`0`) or enables (`1`). The default value is 0. If the value is set to `1`, during the network reconnection, the Agent will come to the foreground and display the "Reconnection" pop-up. After the reconnection is completed, the Agent will come to the foreground and display the "Connected" pop-up. If the value is set to `0`, the Revealed Agent will not come to the foreground to display those messages.
Installation Parameter: `TMREVEALEDPASSWORDLESS=<1/0>` Config File Parameter: `revealed-passwordless=<1/0>`	Disables (`1`) or enables (`0`) the auto-login of the Revealed Agent. If enabled, the user will be able to log into the Agent without requiring the username/password. For example, msiexec /i teramind_agent_v5.0.0_x64.msi TMREVEALEDPASSWORDLESS=1 TMROUTER=10.55.55.58 Note that the parameter requires some other conditions. For more information, check out this article on our Knowledge Base.

Proxy Configuration

Note that both HTTP and SOCKS proxies should be configured. Only an HTTP proxy or only a SOCKS proxy isn't sufficient since they tunnel different OSI-level protocols.

You can configure a proxy when installing the Agent. You can also configure them from the Agent configuration file (config.cfg) using the following parameters:

Installation Parameter	Config File Parameter	Description	Example
`TMHTTPPROXY`	`http-proxy`	The HTTP proxy and optional, port address.	`10.1.2.1:9005`
`TMSOCKSHOST`	`socks-host`	SOCKS Host.	`192.168.56.103`
`TMSOCKSPORT`	`socks-port`	Port.	`1082`
`TMSOCKSUSER`	`socks-user`	Username. This parameter is optional.	`john`
`TMSOCKSPASSWORD`	`socks-password`	Password. This parameter is optional.	`myP@ssword`
`TMUSESOCKS5`	`use-socks5`	`1` means use SOCKS 5, and `0` means use SOCKS 4. This parameter is optional. If not specified, SOCKS `5` will be used.	`1`

Here's an example:

msiexec /i teramind_agent_v5.0.0_x64.msi TMROUTER=10.55.55.58 TMINSTANCE=mycompany TMSOCKSHOST=192.168.56.103 TMSOCKSPORT=1082 TMSOCKSUSER=john TMSOCKSPASSWORD=myP@ssword TMUSESOCKS5=1

Agent Installation/Configuration Parameters (Mac)

These installation parameters aren’t supported by the Standard Agent.

You can use these optional parameters when installing the Mac Agent. There are two ways you can set the parameters as descibed below.

1. Rename the installer/package file to include the –() parameter. For example:

teramind_agent_v1.235.4632_hidden-do(acme.com).pkg

2. If the Agent is already installed, you can edit the parameters from the Agent configurations file (agent.conf). For example:

domain-override=aceme.com

The agent.conf file is located in your Agent installation folder, e.g., Macintosh HD > usr > local > teramind > agent > etc

The table below shows the supported parameters in the Mac Agent:

Installation / Config File Parameter	Description
Installation Parameter: `-i(<instance name>)` Config File Parameter: `instance=<instance name>`	This option assigns an instance name to the Agent. This name is the first part of your dashboard's URL. For example, in `https://acme.teramind.co`, the instance name is `acme`. For On-Premises deployments: Use "`onsite`" as the instance name. For example: teramind_agent_v1.235-i(onsite).pkg For Cloud deployments: This step is usually not required because the instance name is already embedded in the Cloud installer. Only use this option if you need an existing Agent to connect to a different instance.
Installation Parameter: `-r(<ip-of-vm_port>)` Config File Parameter: `router=<ip-of-vm:port>`	This parameter is applicable for On-Premises deployments only. It can be used to assign the load balancer IP and port. For example, teramind_agent_v1.235-r(10.55.55.58_235).pkg or, in the config file: router=10.55.55.58:235 Note that the *`port`*is optional. If not assigned, the default port (`443`) will be used. Please see the Configurations > Settings > Server section for more information.
Installation Parameter: `-d(<0/1>)` Config File Parameter: `disable-autoupdate=<0/1>`	Supported on the Cloud deployments only. The parameter enables (`0`) or disables (`1`) the auto update of the Agent. For example, teramind_agent_v1.235-d(0).pkg For more information, check out this article on the Teramind Knowledge Base.
Installation Parameter: `-do(<domain name>)` Config File Parameter: `domain-override=<domain name>`	This parameter can be used to exclude application bundles from the network driver. You will need to exclude applications by their bundle IDs. For example, teramind_agent_v1.235-do(acme.com).pkg
Installation Parameter: N/A Config File Parameter: `network-exclude-bundles`	Supported on the Stealth Agent only. Can be used to override the user’s domain/computer name with the specified `<domain-name>`. For example, `network-exclude-bundles=com.apple.Safari` You can add multiple bundle IDs separated by commas (no spaces), for example, network-exclude-bundles=com.operasoftware.Opera.helper,com.google.Chrome,com.apple.Safari Notes: When an application is excluded using the `network-exclude-bundles` parameter, the Agent will no longer track any network activity on the app. For example, if you specified, `network-exclude-bundles=com.apple.safari`, Teramind will not capture any browsing, uploading, and downloading activities on the Safari browser. When a browser is excluded using the `network-exclude-bundles` parameter, the Agent will no longer inject the Teramind proxy certificate, "Internet Widgits Pty Ltd", to any web pages visited on the browser: You can find an application's bundle ID by using a tool like osascript. Run the following command on your Terminal: osascript -e 'id of app "app_name"' Here, `app_name` is the application name. For example, `Opera`, `Google Chrome`, etc. The command will return the bundle ID of the specified `app_name`. For example:
Installation Parameter: N/A Config File Parameters: `log-settings=file:<filename>` `log-file-size=<size><MB\|GB>` `log-file-count=<size>` `log-total-size=<size><MB\|GB>`	These parameters can be used to configure the Agent log. For example, log-settings=file:~/tmagent.log log-file-size=10MB log-file-count=100 log-total-size=1GB For more information about Agent logging, check out this article on the Knowledge Base: How to collect the Teramind Agent logs.
Installation Parameter: `-nmp(<port1,port2, portN>)` Config File Parameter: `network-monitored-ports=<port1, port2, portN>`	This parameter will let you exclude network traffic from the Teramind Network Driver (NetApp) and the Network monitoring reports. This might be useful for troubleshooting or compatibility purposes (for example, when using an external proxy server). There are two ways you can exclude the ports: New Agent Installation: 1. Rename the installer package to include the `-nmp(<port1, port2, portN>)` parameter. For example: tmagent-revealed-23.34.4698-i(onsite)-r(192.168.1.201)-nmp(8080,443).pkg 2. And then install the Agent as usual. In the above case, ports `8080` and `443` will be excluded from network monitoring. Existing Agent Installation: 1. Add the parameter to your Agent Configuration file (`Macintosh HD` > `usr` > `local` > `teramind` > `agent` > `etc` > agent.conf): network-monitored-ports=8080,443 2. Uninstall the NetApp extension with the following command: open /Applications/.NetApp.app --args uninstall_network Provide the password when asked. 3. Reinstall the NetApp extension with the following command: open /Applications/.NetApp.app --args install_network 4. Provide the password when asked. The Agent will now ignore traffic from ports `8080` and `443`.
Installation Parameter: N/A Config File Parameters: `g-protect-workaround=<1/0>` `network-monitored-ports=<port 1>,<port 2>...,<port N>` `network-exclude-domains=<domain 1>, <domain 2>...,<domain N>`	These configuration parameters can be used to keep network monitoring working correctly when traffic is forced through a VPN such as Palo Alto GlobalProtect. Example: g-protect-workaround=1 network-monitored-ports=80,8080,443 network-exclude-domains= login.vpn.com, service.ringcentral.com Here are explanations for each parameter: g-protect-workaround: 1 = enables GlobalProtect support, 0 = disables it. network-monitored-ports (Optional): Comma-separated list of ports to monitor (default HTTP/HTTPS). network-exclude-domains (Optional): Comma-separated list of domains that should not be intercepted by Teramind’s certificate effectively bypassing the SSL inspection. Adjust these values based on the list of domains from your GlobalProtect configuration or your internal IT/security requirements. After adding the parameters, activate the Teramind Network Extension or reboot the Mac.
Installation Parameter: N/A Config File Parameters: `screencapture-method =<0-4>`	Deprecated since version 25.35.

Proxy Configuration

Note that both HTTP and SOCKS proxies should be configured. Only an HTTP proxy or only a SOCKS proxy isn't sufficient since they tunnel different OSI-level protocols.

You can configure SOCKS / HTTP proxies when installing the Agent. You can also configure them from the Agent configuration file (agent.conf). Here's an example:

tmagent-stealth-1.234.4626-i(onsite)-r(192.168.1.201)-ssrv(192.168.1.202)-sprt(1080)-susr(user)-spsw(pass)-sv5(0).pkg

The tables below list the parameters and their usage:

SOCKS Proxy

Installation Parameter	Config File Parameter	Description	Example
`ssrv`	`socks-server`	SOCKS server address.	`192.168.1.0`
`sprt`	`socks-port`	Port.	`1082`
`susr`	`socks-user`	Username. This parameter is optional.	`john`
`spsw`	`socks-password`	Password. This parameter is optional.	`myP@ssword`
`sv5`	`socks-version5`	`1` means use SOCKS 5 and `0` means use SOCKS 4. This parameter is optional. If not specified, SOCKS 4 will be used.	`1`

HTTP Proxy

Installation Parameter	Config File Parameter	Description	Example
`hsrv`	`http-server`	HTTP server address.	`192.168.1.1`
`hprt`	`http-port`	Port. This parameter is optional.	`80`
`husr`	`http-user`	Username. This parameter is optional.	`john`
`hpwd`	`http-password`	Password. This parameter is optional.	`myP@ssword`

Antivirus Considerations

The Teramind Agent and its drivers come digitally signed with an extended-validation certificate. We made every effort to coordinate our signature with the major antivirus vendors and, as a result, Teramind will not introduce any issues with the vast majority of antivirus software. Nevertheless, if you encounter any problems while downloading, installing, or updating the Agent, consult the Antivirus & EDR Configuration Guide.

How to protect your Agent installation from tampering

How to install the Windows Agent remotely (Cloud)

How to enable / disable auto-update of the Agent (Cloud)

How to install the Windows Agent remotely (On-Premise)

Windows Agent 26.7 (2026-04-02)

System > Download Agent

Introduction to the Teramind Agent

Notes for the Teramind Mac Users

Agent Types

Standard Agent

Key Restrictions and Requirements:

Downloading the Standard Agent

Installing the Standard Agent (Windows)

Installing the Standard Agent (Mac)

Enrolling: Adding Users to the Dashboard

Revealed Agent

Key Features:

Downloading the Revealed Agent

Installing the Revealed Agent (Windows)

Installing the Revealed Agent (Mac)

Enrolling: Adding Users to the Dashboard

Using the Revealed Agent

Stealth Agent

Restricted Access:

Downloading the Stealth Agent

Installing the Stealth Agent – Command Line (Windows/Cloud)

Installing the Stealth Agent – Command Line (Mac/Cloud)

Enrolling: Adding Users to the Dashboard

Protecting the Agent Installation

Setting the macOS Permissions

Agent Installation/Configuration Parameters (Windows)

Agent Configuration File

Proxy Configuration

Agent Installation/Configuration Parameters (Mac)

Proxy Configuration

Antivirus Considerations