Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents


Windows Platform Requirements

  • Suuported Platform
    Windows 10, version 1709, and later

  • Device Join
    User Device must be either:
    • Azure AD joined
    • Hybrid Azure AD joined
    • Azure AD registered

  • Accessable Domains:
    The Client need to be able to connect via TCP 443 (SSL) to
    • *.truedem.com
    • *.truedem.app
    • *.epmapi.com
    • *.servicebus.windows.net

      Info

      Please make sure Ensure that Proxy proxy authentication is not required and SSL inspection is not in place whenever disabled for these domains are accessed.

      Furthermore, companies (especially large enterprises) should ensure that split tunneling is in place for all communication towards the endpoints mentioned above.

    If you use
    • . Large enterprises should implement split tunneling for communications to the mentioned endpoints.

  • AppLocker Rules
    When using AppLocker (Windows Defender),

    please make sure you

    ensure that TrueDEM is listed as a Trusted Application.

    >>

     AppLocker - Allow Rule

  • Make sure that Background Apps are enabled on the Device

Image Removed

Code BlockComputer\


  • Powershell transcription
    Ensure that PowerShell transcription is turned off. Check your GPO settings:

    Info

    Computer Configuration\ Administrative Templates\Windows Components\Windows PowerShell - Turn on PowerShell Transcription
    User Configuration\ Administrative Templates\ Windows Components\Windows PowerShell - Turn on PowerShell Transcription


Windows 11 Privacy & Security Location Settings

Info

Starting with Windows 11 26100, new Privacy & Security Location settings allow further restriction of location, wifi, and cellular data. OfficeExpert TrueDEM requires access to location information. Grant permission to avoid regular prompts from OfficeExpert requesting access. Enable the following Regkeys on devices:


Customers onboarded in EU Datacenter (portal.panagenda.eu)
Code Block
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272y]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272y]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\BackgroundAccessApplicationsConsentStore\cellularData\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272y]
"NCBEnabledValue"=dword:00000001
  • Win11 Privacy & Security Location Settings
Info

06/2024 - This is currently only valid if you plan to use a Windows 11 Insider Build Version

Code Block
Computer\"Allow"


 Customers onboarded in US Datacenter (portal.panagenda.us)

Code Block
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location\PerfraxInc.OfficeExpertEPMEUOfficeExpertEPM_3z4kejx6m272ywmk1sxh3zvv7j]
"Value"="Allow"

Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\PerfraxInc.OfficeExpertEPMEUOfficeExpertEPM_3z4kejx6m272ywmk1sxh3zvv7j]
"Value"="Allow"

Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData\location\PerfraxInc.OfficeExpertEPMUS_3z4kejx6m272y]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\PerfraxInc.OfficeExpertEPMUS_3z4kejx6m272y]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData\PerfraxInc.OfficeExpertEPMEUOfficeExpertEPMUS_3z4kejx6m272y]
"Value"="Allow""



Anchor
macOSRequirements
macOSRequirements

macOS Platform Requirements

  • Supported Platform
    macOS Version 13+ (Ventura or above)
    macOS ARM64

  • Accessable Domains
    Make sure the same domains (see above) can be accessed from the device.

  • Hostname
    Ensure that the hostname is configured correctly.

    Info

    scutil --set HostName <new host name>


.

Antivirus related info

In general there should never be the situation to whitelist anything on the AntiVirus level. However it may happen that the AV Vendor complains about EPM. The following two processes are the ones which you would potentially need to whitelistGenerally, whitelisting items at the AntiVirus level should not be necessary. However, instances may arise where the AV Vendor flags OfficeExpert TrueDEM. In such cases, you might need to whitelist the following two processes:

    • PerfraxAgent.Exec.Net
    • tracert.exe

MacOS Platform Requirements

There are no requirements at the moment




Changes to This Document

We may update this document from time to time by posting the updated document to our website. You acknowledge that it is your responsibility to review this document periodically.

If we make changes that materially reduce your rights or protections, we will send you an update notice via the contact information you have provided to us.

Table of Contents