Create a custom installer

Fortinet offers a repacking tool for both Microsoft Windows and Mac OS X operating systems. The following section provides instructions on creating a custom installer file using the FortiClient Configurator tool.

When selecting to install custom features, only modules selected are installed. To enable other features you will need to uninstall FortiClient, and reinstall an MSI file with these features included in the installer.

FortiClient (Windows) Configurator tool

Windows has a hard limit of 260 characters on file path length. It is recommended to run the FortiClient Configurator tool in a shallow directory structure, such as c:\temp\, to avoid hitting the hard limit.

To create a custom installer using the FortiClient Configurator tool:

1. Unzip the FortiClientTools file, select the FortiClientConfigurator file folder, and double-click the exe application file to launch the tool.

The tool opens at the Welcome page.

 

Licensed	Licensed mode requires a FortiClient license file.
Trial	In FortiClient 5.4, the FortiClient Configurator tool can be used in trial mode. In trial mode, all online updates are disabled. The trial installer is intended to be deployed in a test environment.

2. Browse and select the FortiClient Configurator Activation Key file (.lic) on your management computer.

The FortiClient Configurator tool is not installed on the management computer. You must upload the FortiClient Configurator Activation Key file (.lic) each time you run the tool.

3. After entering the FortiClient Configurator license, select Next. The Configuration File page is displayed.

Select Config File (optional)	The configuration file (.conf, .sconf) settings will be included in the installer file.
Password	If the configuration file is encrypted (.sconf), enter the password used to encrypt the file.
FortiClient Telemetry Gateway IP List (optional)	The FortiClient Telemetry Gateway IP List will be included in the installer file. This option is disabled when using Trial mode.

You can use an XML editor to make changes to the FortiClient configuration file. For more information on FortiClient XML configuration, see the FortiClient XML Reference in the Fortinet Document Library, http://docs.fortinet.com.

4. Browse and select the FortiClient configuration file on your management computer. This is an optional step. If you do not want to import settings from a configuration file, select Skip to continue. The Settings page is displayed.

The following options are available for custom installations:

Features to Install
Everything	All Security and VPN components will be installed.
Security only	Only AntiVirus, Web Filtering, and Application Firewall will be installed.
VPN only	Only VPN components (IPsec and SSL) will be installed.
Other	Select one of the following from the drop-down list: l AntiVirus, Web Filtering and Vulnerability Scan only l Web Filtering only l Vulnerability Scan only l Application Firewall only l Application Firewall, Web Filtering and Vulnerability Scan l Application Firewall, VPN, Web Filtering and Vulnerability Scan l Single Sign-On mobility agent only
Options
Desktop Shortcut	Select to create a FortiClient desktop icon.
Start Menu	Select to add FortiClient to the start menu.
Features to Install
Enable Software Update	Select to enable software updates. This option is disabled when Rebrand FortiClient is selected. This option is also disabled when using Trial mode.
Configure Single Sign-On mobility agent	Select to configure Singe Sign-On mobility agent for use with FortiAuthenticator.
Rebrand FortiClient	Select to rebrand FortiClient. When selected, the option to enable software update is not available. For more information on rebranding FortiClient, see Appendix C – Rebrand FortiClient on page 128.

5. Select the features to install and options and select Next to continue.

If you selected to configure the single sign-on mobility agent, the Single Sign-On Mobility Agent Settings page is displayed.

6. Configure the following settings:

Server IP/FQDN	Enter the IP address or FQDN of the FortiAuthenticator server.
Port Number	Enter the port number. The default port is 8001.
Pre-Shared Key	Enter the FortiAuthenticator pre-shared key.
Confirm Pre-Shared Key	Enter the FortiAuthenticator pre-shared key confirmation.

7. Select Next to continue. If you selected to rebrand FortiClient, the Rebranding page is displayed.
8. Rebrand FortiClient elements as required. The resources folder contains graphical elements. For more information, see Appendix C – Rebrand FortiClient on page 128.
9. Select Next to continue. The Package Signing page is displayed.
10. Configure the following settings:

Select Code Signing Certificate (optional)	If you have a code signing certificate, you can use it to digitally sign the installer package this tool generates.
Password	If the certificate file is password protected, enter the password.

11. Browse and select the code signing certificate on your management computer. This is an optional step. If you do not want to digitally sign the installer package, select Skip to continue. The Execution page is displayed.

This page provides details of the installer file creation and the location of files for Active Directory deployment and manual distribution. The tool creates files for both 32-bit (x86) and 64-bit (x64) operating systems.

12. When you select Finish, the folder containing the newly created MSI file will open.

Before deploying the custom MSI files, it is recommended that you test the packages to confirm that they install correctly. In FortiClient 5.2.0 and later, an .exe installation file is created for manual distribution.

Installation files are organized in folders within the FortiClientTools > FortiClient Configurator > FortiClient repackaged folder. Folder names identify the type of installation files that were created and the creation date.