# Install the authenticator on Windows

> Download and install the Ironchip desktop authenticator on Windows from the admin console or GitHub, then enroll the user.

URL: https://docs.ironchip.com/en/identidad/usuarios/autenticador-windows/

This guide explains how to install the Ironchip desktop authenticator for Windows. It has three parts: download the installer, install it and enroll the user.

## Requirements

- 64-bit Windows. On versions older than Windows 10 you also need Microsoft Visual C++ Redistributable x64.
- Administrator permissions on the computer.
- Connectivity to the Ironchip API (`https://api.ironchip.com` by default).

:::note
Since version 1.8.0, Windows Logon is a separate installer. If you had the sign-in feature installed with an earlier version, it is removed when you update: install it from [Windows logon](https://docs.ironchip.com/en/identidad/integraciones/puestos/windows-logon/).
:::

## Download the installer

You have two ways to download the authenticator installer.

### From the admin console

1. Go to the Ironchip admin console, [app.ironchip.com](https://app.ironchip.com), and sign in with your administrator account.
2. Go to the **Plugins** section, find the **Windows Authenticator** card under **Authenticators** and click **Download**.

### From GitHub

1. Go to the official Ironchip repository, [github.com/Ironchip-Security](https://github.com/Ironchip-Security), where all the downloads are, and open **Ironchip-Windows-Authenticator**.
2. Go to [github.com/Ironchip-Security/Ironchip-Windows-Authenticator/releases](https://github.com/Ironchip-Security/Ironchip-Windows-Authenticator/releases), which lists all the available versions, and download `IronchipWindowsAuthenticator.msi` from the latest one.

## Install with the wizard

Once you have the installer on the computer, run it as administrator and follow these steps:

1. Check that it is the version you want and click **Next**.

   [Image: Installer welcome screen showing the authenticator version]

2. Accept the terms of use.

   [Image: Installer screen to accept the terms of use]

3. Select the features you want to install. Here you only need **Ironchip Authenticator** and, if you need it, **USB support**, which lets you store your identity on a USB drive and is not installed by default.

   [Image: Installer screen to select the features to install]

4. In **Ironchip Host**, leave the API URL as it is (`https://api.ironchip.com`) unless your company is in another environment. Then select one of the three proxy options depending on whether you have an automatic proxy (**Automatic**), a manual proxy (**Manual**, with its host and port) or no proxy (**None**).

   [Image: Installer proxy configuration screen]

5. Click **Install**. Administrator permissions are required. When it finishes, you can check **Launch Ironchip Authenticator** to open the application.

   [Image: Final installer screen with the Install button]

## Install from the command line

To install the authenticator unattended, for example in a mass deployment, use `msiexec.exe` from a console with administrator permissions:

```powershell
msiexec.exe /i "C:\Path\To\File\IronchipWindowsAuthenticator.msi" IRONCHIP_HOST="https://api.ironchip.com" ADDLOCAL="AuthenticatorFeature,USBFeature" /q
```

All properties are optional:

| Property                     | Default value              | Description                                                                                                                |
| ---------------------------- | -------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
| `IRONCHIP_HOST`              | `https://api.ironchip.com` | Ironchip API URL. Change it only if your company is in another environment.                                                |
| `ADDLOCAL`                   | Authenticator without USB  | Features to install: `AuthenticatorFeature` (the authenticator) and `USBFeature` (USB support). Separate them with commas. |
| `IRONCHIP_PROXY_SELECTED`    | `none`                     | Proxy mode: `none`, `automatic` or `manual`.                                                                               |
| `IRONCHIP_PROXY_MANUAL_HOST` | Empty                      | Proxy host. Only needed with `IRONCHIP_PROXY_SELECTED="manual"`.                                                           |
| `IRONCHIP_PROXY_MANUAL_PORT` | Empty                      | Proxy port. Only needed with `IRONCHIP_PROXY_SELECTED="manual"`.                                                           |

For example, to install the authenticator without USB support and with a manual proxy:

```powershell
msiexec.exe /i "C:\Path\To\File\IronchipWindowsAuthenticator.msi" IRONCHIP_HOST="https://api.ironchip.com" ADDLOCAL="AuthenticatorFeature" IRONCHIP_PROXY_SELECTED="manual" IRONCHIP_PROXY_MANUAL_HOST="proxy.example.com" IRONCHIP_PROXY_MANUAL_PORT="8080" /q
```

## Enroll the user

To learn how to enroll users, see [Enrollment](https://docs.ironchip.com/en/identidad/usuarios/alta/).