Windows Platform Requirements

• Suuported Platform
  Windows 10, version 1709, and later
  
  
• Device Join
  User Device must be either:
  • Azure AD joined
  • Hybrid Azure AD joined
  • Azure AD registered
    
    
• Accessable Domains:
  The Client need to be able to connect via TCP 443 (SSL) to
  • *.truedem.com
  • *.truedem.app
  • *.epmapi.com

  • *.servicebus.windows.net
    
    

    Info
    Ensure that proxy authentication is not required and SSL inspection is disabled for these domains. Large enterprises should implement split tunneling for communications to the mentioned endpoints.

• AppLocker Rules
  When using AppLocker (Windows Defender), ensure that TrueDEM is listed as a Trusted Application. AppLocker - Allow Rule

• Powershell transcription
  Ensure that PowerShell transcription is turned off. Check your GPO settings:

  Info
  Computer Configuration\ Administrative Templates\Windows Components\Windows PowerShell - Turn on PowerShell Transcription User Configuration\ Administrative Templates\ Windows Components\Windows PowerShell - Turn on PowerShell Transcription

Windows 11 Privacy & Security Location Settings

Relevant for All Customers 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
 
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
 
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"

Computer\
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272y]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\locationwifiData\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272y]
"Value"="Allow"

Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiDatacellularData\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272y]
"Value"="Allow"
Computer\HKEY_CURRENT_USER\Software

 Customers onboarded in US Datacenter (portal.panagenda.us)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\PerfraxInc.OfficeExpertEPMEU_3z4kejx6m272ylocation]
"Value"="Allow"

Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularDatalocation]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularDatalocation\PerfraxInc.OfficeExpertEPMEUOfficeExpertEPM_3z4kejx6m272ywmk1sxh3zvv7j]
"Value"="Allow"

Relevant for Customers onboarded in US Datacenter (portal.panagenda.us)

Computer\
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\locationwifiData]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\locationwifiData\PerfraxInc.OfficeExpertEPMUSOfficeExpertEPM_3z4kejx6m272ywmk1sxh3zvv7j]
"Value"="Allow"

Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData]
"Value"="Allow"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiData\cellularData\PerfraxInc.OfficeExpertEPM_wmk1sxh3zvv7j]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\wifiDatalocation\PerfraxInc.OfficeExpertEPMUS_3z4kejx6m272y]
"Value"="Allow"

Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularDatawifiData\PerfraxInc.OfficeExpertEPMUS_3z4kejx6m272y]
"Value"="Allow"
Computer\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\cellularData\PerfraxInc.OfficeExpertEPMUS_3z4kejx6m272y]
"Value"="Allow""

macOS Platform Requirements

• Supported Platform
  macOS Version 13+ (Ventura or above)
  macOS ARM64
  
  
• Accessable Domains
  Make sure the same domains (see above) can be accessed from the device.
  
  

• Hostname
  Ensure that the hostname is configured correctly.

  Info
  scutil --set HostName <new host name>

.

Antivirus related info

Generally, whitelisting items at the AntiVirus level should not be necessary. However, instances may arise where the AV Vendor flags OfficeExpert TrueDEM. In such cases, you might need to whitelist the following two processes:

• • PerfraxAgent.Exec.Net
  • tracert.exe

MacOS Platform Requirements

Changes to This Document

We may update this document from time to time by posting the updated document to our website. You acknowledge that it is your responsibility to review this document periodically.

If we make changes that materially reduce your rights or protections, we will send you an update notice via the contact information you have provided to us.