Migrate to Advanced Installer for SASE Client for Windows

Last updated
Save as PDF

For supported software information, click here.

Starting in Release 7.10.3, the Versa SASE client for Windows uses Advanced Installer (Microsoft Software Installer (MSI) package) instead of EXE or MSI Wrapper. Advanced Installer strengthens tamper protection, eliminates version inconsistencies during upgrades, improves enterprise deployment compatibility, and establishes a consistent MSI-to-MSI upgrade path for future releases. The native Advanced Installer manages the application as a single package, and ensures consistent version reporting, cleaner upgrades, and accurate visibility into the installed client version.

The installation methods are the same for Advanced Installer as for the earlier client releases, with the addition of some new CLI commands to support MSI. For more information, see Migrate to Release 7.10.3 Advanced Installer and CLI Support for Advanced Installer, below.

Note: Downgrading from Release 7.10.3 to Releases 7.10.2 or earlier is not supported with Advanced Installer, because these versions use legacy EXE or MSI Wrapper. To downgrade from 7.10.3 to an earlier release, uninstall the 7.10.3 Advanced Installer after retaining the user data, and perform a fresh installation of the required legacy EXE or Wrapper MSI (Releases 7.10.2 or earlier). For more information, see CLI Support for Advanced Installer, below.

Migrate to Release 7.10.3 Advanced Installer

The migration to the Release 7.10.3 Advanced Installer follows the same procedures as for earlier client releases. You can use one of the following methods:

Manual—The administrator can initiate a manual upgrade using the UI, CLI, or Unified Endpoint Management (UEM) tools such as Microsoft Intune or Ivanti Neurons. In this case, the end user runs the 7.10.3 Advanced Installer MSI package via UI or the latest client version is deployed through a silent installation. This upgrade uninstalls the previous client version and installs the Advanced Installer. For more information, see Mass Deploy Versa SASE Client using UEM.
Automatic—Migration can be done automatically using one of these following methods:
- If automatic software update is enabled for SASE clients, the Advanced Installer for Release 7.10.3 gets uploaded to the auto-update server. The client checks for updates during the first successful connection of the day, and if a newer version is available, prompts the user to download and install the update. For more information, see Support for Automatic Software Updates.
- The client compares the installed version against the configured preferred version. If the versions differ, users are prompted to update. During the grace period, users can defer the update. When the grace period ends, access is blocked until the user completes the update. For more information, see Preferred Client Version Flow.

After the migration:

A single 7.10.3 Advanced Installer entry displays in the Control Panel.
Legacy EXE or Wrapper MSI entries are deleted.
Client registration and user settings are preserved where applicable.
Connection and tunnel functionality continue to operate normally.

CLI Support for Advanced Installer

To issue the Advanced Installer CLI commands, launch the command prompt with Administration privileges. Use the following CLI commands to perform actions related to Advanced Installer:

To silently install Advanced Installer, issue the msiexec /i <MSI-file-name> CLI command. For example:
```
msiexec /i VersaSASEClient_7.10.3_x64.msi
```
To install Advanced Installer with verbose logging, issue the msiexec /i <MSI-file-name.msi> /L*V <log-file-path> CLI command. For example:
```
msiexec /i VersaSASEClient_7.10.3_x64.msi /L*V "C:\Temp\VSA_Install_7.10.3.log"
```
To install Advanced Installer silently with auto-launch enabled, issue the msiexec /i <MSI-file-name> AUTOLAUNCH=true /qn. For example:
```
msiexec /i VersaSASEClient_7.10.3_x64.msi AUTOLAUNCH=true /qn
```
To install Advanced Installer with pre-logon enabled, issue the msiexec /i <MSI-file-name> PROP2=CheckBox PRELOGON_FILE_PATH="prelogon-file-path" /L*V install.log /qn= CLI command (note that the other CLI commands related to pre-logon remain the same). For example:
```
msiexec /i "VersaSASEClient_7.10.3_x64.msi" PROP2=CheckBox PRELOGON_FILE_PATH="C:\Path\To\json" /L*V install.log /qn
```
To install Advanced Installer with SSO enabled, issue the msiexec /i <MSI-file-name> EnterpriseName= ""<FQDN>="" <UserName>="" EnableSSO="true" /qn CLI command. For example:
```
msiexec /i VersaSASEClient_v7.9.1_x64.msi EnterpriseName="" FQDN="" UserName="" EnableSSO="true" /qn
```
To uninstall Advanced Installer silently using the MSI file (by default, enterprise data is retained), issue the msiexec /x <MSI-file-name> /qn. For example:
```
msiexec  /x VersaSASEClient_7.10.3_x64.msi /qn
```
To uninstall Advanced Installer silently with verbose logging (by default, enterprise data is retained), issue the msiexec /x <MSI-file-name> /qn /L*V <log-file-path>. For example:
```
msiexec /x VersaSASEClient_7.10.3_x64.msi /qn /L*V "C:\Temp\VSA_Uninstall_7.10.3.log"
```
To uninstall Advanced Installer silently without retaining enterprise data, issue the msiexec /x <MSI-file-name> RETAINDATA="false" /qn CLI command. For example:
```
msiexec /x VersaSASEClient_7.10.3_x64.msi RETAINDATA="false" /qn
```
To uninstall Advanced Installer silently using the product code, issue the msiexec /x <product-code> /qn CLI command. To check the product code:
1. Open the Registry Editor from your Windows device. To do this, type regdit in the Run dialog and press Enter.
2. In the left menu, select Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Versa Secure Access\Version.
3. The product code appears in the main pane, as shown below.
To uninstall Advanced Installer with Tamper Protection override, issue the following CLI command:
- msiexec /x <product-code> TAMPEROVERRIDEKEY="<key>" /qn

You can use the following legacy commands for reference during migration testing:

To install the legacy EXE silently, issue the <EXE-file-name> /VERYSILENT /AUTOLAUNCH CLI command. For example:
```
VersaSASEClient_v7.10.2_x64.exe /VERYSILENT /AUTOLAUNCH
```
To install the wrapper MSI silently, issue the msiexec /i "<Wrapper-MSI-file-name>" WRAPPED_ARGUMENTS="/verysilent" CLI command. For example:
```
msiexec /i "VersaSASEClient_v7.10.2_x64.msi" WRAPPED_ARGUMENTS="/verysilent"
```

Supported Software Information

SASE Client Releases 7.10.3 and later support all content described in this article.

Additional Information

Use the Versa SASE Client Application