I am a Zivver admin
Configure and manage Zivver
Office Plugin Installation Manual for Microsoft SCCM
Introduction
How to install the Zivver Office Plugin with Microsoft System Center Configuration Manager (SCCM).
Minimal technical requirements
System requirements
- Microsoft Windows 7 Extended Security Updates or higher.
- Microsoft .NET Framework 4.8 or higher.
- Microsoft Outlook 2016 or higher.
- Memory utilization: +/- 150 MB in total per Outlook session.
Product specific requirements
- HTTPS connection, port 443, TLS v1.2 or higher with https://*.zivver.com.
- Outlook in Cached Mode(1).
- A Microsoft supported scenario when using different versions of Office, Project, and Visio on the same computer.
(1) Zivver follows the recommended practice of Microsoft and Citrix for optimal performance with Outlook in Cached Mode. Performance issues related to Online Mode will be investigated on a best-effort basis.
SCCM specific requirements
- Access to SCCM, with the following permissions:
- Application Administrator Security Role, to create, modify, and deploy applications.
- Compliance Settings Manager Security Role, to create, modify, and deploy configuration items.
- Access to the Full Administrator or Operations Administrator Security Roles can also work, but contain unnecessary privileges.
Download link
Latest MSI installer download link
Installation
This chapter explains how to install and deploy the Zivver Office Plugin via SCCM.
Configure the Recommended additional settings described in this manual. With these recommended settings you ensure users will always be able to send secure emails.
Share the plugin
The plugin must be available on the network for it to be deployed via SCCM. Do these steps to create a distribution point on the server.
- Log in on a domain server as administrator.
- Create a new shared network folder or select an existing one.
- Put the Office plugin installer package in this folder.
Download the latest version - Make sure the package can be accessed.
Change the permissions on the shared folder if necessary. The plugin should now be available for installation from the shared network folder.
Create an application
The plugin can be configured in SCCM as a package or an application. In this manual, you will deploy the plugin as an application. The benefit of deploying the plugin as an application is that this allows for easier updates with the Supersedence feature.
Do these steps to create a new Application for the plugin in SCCM.
- Go to Software Library.
- Expand the Application Management folder.
- Select Applications.
- Right-click and select Folder > Create Folder to create a new folder for the plugin, based on how the tree is structured for your organization.
- Give the new folder a name.
For example Zivver Office Plugin. - Click OK to confirm.
- Right-click the folder you just created and select Create Application.
- Choose the option to Automatically detect information about this application from installation files.
- In the General tab of the Create Application Wizard, click Browse….
- Select the MSI package of the plugin in the network share, that was configured at Share the plugin, and click Open.
- As the Installation File Type, select Windows Installer (.MSI file) if this is not automatically specified already.
- Click Next.
- Click Next again.
- In the General Information tab, enter additional information about the application:
- Change the Name if you prefer.
- Enter any optional Administrator comments.
- Change Publisher to
Zivver B.V.
. - Add Administrative Categories if you prefer, depending on internal organizational standards.
This might help to filter and categorize the application. - The default command next to Installation Program should be fine, but consider the following:
- Add the parameter
/q
for a silent install if it is not specified already. - Add
REBOOT=REALLYSUPPRESS
so that the systems will not be rebooted. - Add
/L*V %FileLocation%
if you want to create a verbose log of the installation process. - Add
ALLUSERS=1 USEIMPERSONATE=0
to install the plug-in for all the users.
- Add the parameter
- Select one of three options for the Install Behavior. The options are as follows:
- Install for user - The client only installs the application for the user to whom you deploy the application.
- Install for system - The client installs the application only once. It’s available to all users.
- Install for system if resource is device; otherwise, install for user - If you deploy the application to a device, the client installs it for all users. If you deploy the application to a user, the client only installs it for that user.
- Click Next.
- Verify the information in the Summary pane and click Next again.
Wait a moment until the application is created. - Click Close to exit the application wizard.
The new application will now be listed in the Zivver Office Plugin application folder.
Configure the application properties
Configuring additional properties is optional. Do these steps to configure additional properties of the application that you created in the previous section.
- Go to Software Library.
- Right-click the Zivver Office Plugin application.
- Select Properties.
- Optional: In the General Information tab, activate the option Allow this application to be installed from the Install Application task sequence action without being deployed.
This allows the application to be deployed via Task Sequence, for example during imaging. - Optional: In the Application Catalog tab, configure additional properties for the plugin based on your preference.
For example, if you make the plugin available in Software Center, users will be able to find the plugin based on this information. - Click OK to close the Properties window.
Configure the deployment type
Do these steps to configure the Deployment Type for the application in SCCM.
- Select the Zivver Office Plugin under Applications.
- Select the Deployment Types tab at the bottom.
- Right-click the Deployment Type for the plugin.
- Select Properties.
- Optional: In the General tab, change the name of the deployment.
For example Zivver Office Plugin, along with the version number and the package typeMSI
. - Go to the User Experience tab.
- Set Installation behavior to Install for System.
- Set Logon Requirement to Whether or not a user is logged on.
- Set Installation program visibility to Hidden.
- Set Maximum allowed run time to
15
. - Set Estimated installation time to
2
. - Set the option Should Configuration Manager enforce specific behavior… to Determine behavior based on return codes.
- Go to the Dependencies tab.
- Click Add….
- In the Add Dependency window, enter a name for the Dependency Group.
For example Zivver Office Plugin. - Click Add….
- In the Specify Required Application window, select your installation of Outlook and the related deployment type.
- Click OK to confirm your selection.
- Click Add… again to add another Required Application.
- Select the installation of .NET Framework v4.5+ and its deployment type.
- Click OK to confirm and close the Specify Required Application window.
- Choose if you want to Auto Install the dependencies:
- Auto Install on: If the dependencies are not installed yet, they will be installed automatically before the plugin is installed.
- Auto Install off: The plugin will not be installed if the dependencies are not found on the deployment target, since the requirements are not met.
- Click OK to confirm and close the Add Dependency window.
- Click OK to close the Properties window.
The deployment type is now configured for the plugin.
Deploy the plugin
Do these steps to deploy the plugin by configuring a new Deployment.
- Right-click the Application for the plugin.
- Choose Deploy to start the Deploy Software Wizard.
- In the General tab, click Browse… next to Collection.
- Select the groups of Users or Devices you want to deploy the plugin to.
For example All Users. - Click OK to confirm.
- If you configured a default Distribution Group for the Collection, then activate the option Use default distribution point groups associated to this collection to distribute the plugin installer.
- Click Next.
- If you selected the option Use default distribution point groups associated to this collection, then this information is already configured. Proceed to step 13.
- On the Content tab, click Add.
- Click Distribution Point or Distribution Point Group to distribute the package.
- Select All Distribution Points.
- Click OK.
- Click Next to go to Deployment Settings.
- Set Action to Install.
- For Purpose, choose one of the following options:
- Available: Users can install the plugin manually in Software Center.
- Required: The plugin will be installed automatically for users (Recommended).
- If you set the Purpose to Available, consider to activate the option An Administrator must approve a request for installation on the device if your users need explicit permission to install the plugin.
- Click Next.
- On the Scheduling tab:
- If you want to deploy the plugin as soon as possible, leave the default settings.
- If you want to make the plugin available at a later date, then activate the option Schedule the application to be available at and enter a date and time.
- Click Next.
- On the User Experience tab, select an option for User Notifications, as per your preference. The options below are recommended, so users are not bothered with notifications:
- If you chose Available as the Install Purpose: Select Display in Software Center, and only show notifications for computer restarts.
- If you chose Required as the Install Purpose: Select Hide in Software Center and all notifications.
- Optional: If you chose Required installation, you may want to select Software Installation to install the plugin outside of maintenance windows after the deployment deadline. This will ensure that the plugin is installed everywhere as soon as possible.
- Click Next.
- Optional: Set a threshold to generate alerts if you prefer.
For example when deployment fails at a certain percentage. - Click Next.
- Review the information in the Summary tab.
- Click Next.
Wait a moment until the Deploy Software Wizard is finished. - Click Close to exit the wizard.
The plugin will now be deployed.
Recommended additional settings
This chapter describes the process to deploy recommended additional settings related to the plugin. You will use a Configuration Item in SCCM to deploy the additional settings in the registry.
Please find explanation about the recommended additional settings in the main Office plugin installation manual
Create a configuration item
Do these steps to create a new Configuration Item (CI) to configure the registry settings in.
- Go to Assets and Compliance in SCCM.
- Click Compliance settings.
- Right-click Configuration Items.
- Select Create Configuration Item (CI) to start the CI creation wizard.
- Enter a name for the new CI.
For example Recommended Zivver Office plugin settings. - Under Settings for devices managed with the Configuration Manager client:
- If you only manage Windows 10 devices, select Windows 10.
- If you manage systems with different versions of Windows, select Windows Desktops and Servers (Custom).
- Do not check any of the options under Settings for devices managed without the Configuration Manager client.
This applies to mobile devices. - Click Categories… to assign a category if you prefer.
This will improve searching and filtering within SCCM. - Click Next.
- Do not change the default settings on the Supported Platforms pane.
- Click Next to go to the Settings pane.
The actual settings will be configured in the following sections.
AddinList
- On the Settings pane, click New… to open the Create Setting window.
- Under Specify details about this setting… enter the following information:
- Name:
AddinList
- Description:
This setting blocks users from disabling the plugin in Outlook.
- Setting Type:
Registry Value
- Data Type:
String
, for a REG_SZ value.
- Name:
- Under Specify the registry value… enter the following information:
- Hive Name:
HKCU
(user level). - Key name:
SOFTWAREPoliciesMicrosoftofficex.0outlookresiliencyaddinlist
. Changex.0
for your version of Outlook:16.0
for Outlook 2016, 2019, and Outlook for Office 365. - Value Name:
AddinList
- If you use a 64-bit version of Outlook, check the option This registry value is associated with a 64-bit application.
- Hive Name:
- Click Apply.
- Go to the Compliance Rules tab.
- Click New… to create a new Compliance Rule.
- Give the rule a name.
For exampleAddinList Value Rule
. - Verify the rule applies to the correct registry setting, as indicated by Selected Setting.
- As Rule Type, select Value.
- Under The setting must comply with the following rule, select Equals in the drop-down list next to the name of this setting.
- Next to The following values enter:
ZivverOfficePlugin.AddinModule
- Activate the setting Remediate non compliant rules when supported, to change existing settings that don’t match this rule.
- Click OK to create the rule.
- Click OK again to close the Create Setting window.
You have now configured the AddinList setting.
DoNotDisableAddinList
- On the Settings pane, click New… to open the Create Setting window.
- Under Specify details about this setting… enter the following information:
- Name:
DoNotDisableAddinList
- Description:
This setting blocks Outlook from automatically disabling the plugin in case of a delay.
- Setting Type:
Registry Value
- Data Type:
Integer
, for a DWORD value.
- Name:
- Under Specify the registry value… enter the following information:
- Hive Name:
HKCU
(user level). - Key name:
SOFTWAREMicrosoftOfficex.0OutlookResiliencyDoNotDisableAddinList
. Changex.0
for your version of Outlook:16.0
for Outlook 2016, 2019, and Outlook for Office 365. - Value Name:
DoNotDisableAddinList
- If you use a 64-bit version of Outlook, check the option This registry value is associated with a 64-bit application.
- Hive Name:
- Click Apply.
- Go to the Compliance Rules tab.
- Click New… to create a new Compliance Rule.
- Give the rule a name.
For exampleDoNotDisableAddinList Value Rule
. - Verify the rule applies to the correct registry setting, as indicated by Selected Setting.
- As Rule Type, select Value.
- Under The setting must comply with the following rule, select Equals in the drop-down list next to the name of this setting.
- Next to The following values enter:
ZivverOfficePlugin.AddinModule
- Activate the setting Remediate noncompliant rules when supported, to change existing settings that don’t match this rule.
- Click OK to create the rule.
- Click OK again to close the Create Setting window.
You have now configured the DoNotDisableAddinList setting.
LoadBehavior
- On the Settings pane, click New… to open the Create Setting window.
- Under Specify details about this setting… enter the following information:
- Name:
LoadBehavior
- Description:
This setting determines whether the plugin is active or not in Outlook.
- Setting Type:
Registry Value
- Data Type:
Integer
, for a DWORD value.
- Name:
- Under Specify the registry value… enter the following information:
- Hive Name:
HKLM
(system level) - Key name:
SOFTWAREMicrosoftOfficeOutlookAddinsZivverOfficePlugin.AddinModule
. - Value Name:
LoadBehavior
- If you use a 64-bit version of Outlook, check the option This registry value is associated with a 64-bit application.
- Hive Name:
- Click Apply.
- Go to the Compliance Rules tab.
- Click New… to create a new Compliance Rule.
- Give the rule a Name.
For exampleLoadBehavior Value Rule
. - Optional: Enter a Description for the rule.
- Check if the rule applies to the correct registry setting, as indicated by Selected Setting.
- As Rule Type, select Value.
- Under The setting must comply with the following rule, select Equals in the drop-down list next to the name of this setting.
- Next to The following values enter:
0
. - Activate the setting Remediate noncompliant rules when supported, to change existing settings that don’t match this rule.
- Click OK to create the rule.
- Click OK again to close the Create Setting window.
You have now configured the LoadBehavior setting.
AutoEnableSsoAccounts
Configure AutoEnableSsoAccounts setting according to the following steps.
- On the Settings pane, click New… to open the Create Setting window.
- Under Specify details about this setting… enter the following information:
- Name:
AutoEnableSsoAccounts
- Description:
This setting automatically activates Zivver accounts in the plugin via SSO.
- Setting Type:
Registry Value
- Data Type:
Integer
, for a DWORD value.
- Name:
- Under Specify the registry value… enter the following information:
- Hive Name:
HKCU
(user level). - Key name:
SOFTWAREZivverOfficePluginSettings
- Value Name:
AutoEnableSsoAccounts
- If you use a 64-bit version of Outlook, check the option This registry value is associated with a 64-bit application.
- Hive Name:
- Click Apply.
- Go to the Compliance Rules tab.
- Click New… to create a new Compliance Rule.
- Give the rule a name.
For exampleAutoEnableSsoAccounts Value Rule
. - Optional: Enter a Description for the rule.
- Check if the rule applies to the correct registry setting, as indicated by Selected Setting.
- As Rule Type, select Value.
- Under The setting must comply with the following rule, select Equals in the drop-down list next to the name of this setting.
- Next to The following values enter:
1
- Activate the setting Remediate noncompliant rules when supported, to change existing settings that don’t match this rule.
- Click OK to create the rule.
- Click OK again to close the Create Setting window. You have now configured the AutoEnableSsoAccounts setting.
TryAutoReloginSso
Configure TryAutoReloginSso setting according to the following steps.
- On the Settings pane, click New… to open the Create Setting window.
- Under Specify details about this setting… enter the following information:
- Name:
TryAutoReloginSso
- Description: This setting determines whether the plugin is active or not in Outlook.
- Setting Type:
Registry Value
- Data Type:
Integer
, for a DWORD value.
- Name:
- Under Specify the registry value… enter the following information:
- Hive Name:
HKCU
(user level). - Key name:
SOFTWAREZivverOfficePluginSettings
- Value Name:
TryAutoReloginSso
- If you use a 64-bit version of Outlook, check the option This registry value is associated with a 64-bit application.
- Hive Name:
- Click Apply.
- Go to the Compliance Rules tab.
- Click New… to create a new Compliance Rule.
- Give the rule a name.
For exampleTryAutoReloginSso Value Rule
. - Optional: Enter a Description for the rule.
- Check if the rule applies to the correct registry setting, as indicated by Selected Setting.
- As Rule Type, select Value.
- Under The setting must comply with the following rule, select Equals in the drop-down list next to the name of this setting.
- Next to The following values enter:
1
- Activate the setting Remediate noncompliant rules when supported, to change existing settings that don’t match this rule.
- Click OK to create the rule.
- Click OK again to close the Create Setting window.
You have now configured the TryAutoReloginSso setting.
ShortRefreshTokenTTLHours
- On the Settings pane, click New… to open the Create Setting window.
- Under Specify details about this setting… enter the following information:
- Name:
ShortRefreshTokenTTLHours
- Description: This setting determines how long user session are active when they are logged in to Zivver.
- Setting Type:
Registry Value
- Data Type:
Integer
, for a DWORD value.
- Name:
- Under Specify the registry value… enter the following information:
- Hive Name:
HKCU
(user level). - Key name:
SOFTWAREZivverOfficePluginSettings
- Value Name:
ShortRefreshTokenTTLHours
- If you use a 64-bit version of Outlook, check the option This registry value is associated with a 64-bit application.
- Hive Name:
- Click Apply.
- Go to the Compliance Rules tab.
- Click New… to create a new Compliance Rule.
- Give the rule a name.
For exampleShortRefreshTokenTTLHours Value Rule
. - Check if the rule applies to the correct registry setting, as indicated by Selected Setting.
- As Rule Type, select Value.
- Under The setting must comply with the following rule, select Equals in the drop-down list next to the name of this setting.
- Next to The following values enter:
720
This will set the active sessions in Zivver to last one month. - Activate the setting Remediate noncompliant rules when supported, to change existing settings that don’t match this rule.
- Click OK to create the rule.
- Click OK again to close the Create Setting window.
You have now configured the ShortRefreshTokenTTLHours setting.
Create a configuration item (contd.)
This section describes the steps to finalize the configuration of the CI from the previous section.
- Back in the Create Configuration Item Wizard, click Next.
- Click Next again, since the Compliance Rule is already configured.
- Review the information in the summary.
- Click Next.
Wait a moment until the CI is created. - Click Close to close the wizard.
The new CI should now be listed in the Configuration Items pane.
Create a configuration baseline
This section describes the steps to create a Configuration Baseline for the CI from the previous section.
- Select Configuration Baselines in the Assets And Compliance menu.
- Right-click Configuration Baselines and select Create Configuration Baseline.
- Enter a name.
For exampleZivver Plugin Settings
. - Optional: Enter a description.
- Below Configuration Data, click Add.
- Select Configuration Items.
The Add Configuration Items window opens. - Select all of the items related to the Zivver plugin that were just created, and click Add.
- All of the settings should now be listed under Configuration items that will be added to the configuration baseline.
- Click OK to confirm the selection.
- Click OK.
The configuration baseline is now created and ready to be deployed.
Deploy the settings
This section describes the steps to deploy the configuration baseline from the previous section.
- Right-click the configuration baseline you created in the previous section.
- Click Deploy to open the Deploy Configuration Baselines dialog.
- Activate the option Remediate noncompliant rules when supported to change any existing registry values.
- Under Select the collection for this configuration baseline deployment, click Browse.
- Select the User- or Device Collection you want to apply the settings to.
- Under Schedule, choose how often you want to enforce the Configuration Baseline.
For example every hour or every day. - Click OK to confirm the Deployment Configuration.
The settings will now be applied to the registries of selected users or machines.
Update the plugin
This chapter explains how to use Supersedence to upgrade an existing version of the plugin to the latest version.
Configure the update
Configure a new Application and Deployment Type for the updated version, as well as the Supersedence settings. Then let the plugin update supersede the existing version of the plugin according to the steps below.
- Create a new Application for the new version of the plugin according to the steps described at section Create an application.
- Configure a new Deployment Type for the update of the plugin according to the steps described at section Configure deployment type.
- Right-click the application of the plugin update.
- Select Properties.
- Go to the Supersedence tab.
- Click Add.
- Click Browse.
- Select the Application for the old version of the plugin.
- Click OK to confirm the selection.
The deployment type for the old version of the plugin should now be listed. In the New Deployment Type column, select the Deployment Type for the update of the plugin.
You do not need to activate the Uninstall option, since the new plugin version will overwrite the existing version during the upgrade.Click OK to close the Specify Supersedence Relationship window.
Click OK to confirm the Supersedence settings and close the Properties window.
Deploy the update
Do these steps to deploy the plugin update.
- Right-click the Application of the new version of the plugin.
- Select Deploy.
This will start the Deploy Software Wizard. - Deploy the update of the plugin, as described in the chapter Deploy the plugin, but add the following step:
- In the Deployment Settings pane, activate the option Automatically upgrade any superseded versions of this application.
This option ensures that all old versions of the plugin will be upgraded automatically, even if the Purpose is set to Available.
The update will be deployed, and existing installations will be upgraded.
Uninstall the plugin
This chapter describes how to uninstall the Zivver Office Plugin. You will first delete the existing deployments, because a deployment with action Install
takes precedence over Uninstall
and the action cannot be changed for existing deployments.
- Select the Application of the plugin that will be uninstalled.
- Go to the Deployments tab.
- Right-click the Deployment for the plugin.
- Select Delete to remove the existing deployment.
- Right-click the Application of the plugin.
- Select Deploy.
- Deploy the update, as instructed in the chapter Deploy the plugin, with the following additional step:
- Select Uninstall as the Deployment action on the Deployment Settings page of the Deploy Software Wizard.