Installation

Orion Authenticator can be deployed manually or distributed at scale through SCCM, Intune, or any Mobile Device Management (MDM) solution

---

Installation paths

OS	Default installation path
Windows	C:\Program Files\1Kosmos\Orion
macOS	/Applications/1Kosmos Orion Authenticator.app

Installing on Windows

Interactive installation

1. Download the Orion Windows installer (e.g., OrionWindowsAuthenticator-1.0.0.0.exe).

2. Double-click the installer to launch the wizard.

3. Follow the on-screen prompts.

4. Restart the workstation after installation completes.

Silent installation (with progress bar)

For unattended installations where the progress bar is shown:

OrionWindowsAuthenticator-1.0.0.0.exe /SILENT /NORESTART
shutdown /r /t 20 /d p:4:2 /c "Windows Orion Authenticator"

Fully silent installation

For unattended installations with no UI at all:

OrionWindowsAuthenticator-1.0.0.0.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
shutdown /r /t 20 /d p:4:2 /c "Windows Orion Authenticator"

A workstation restart is required after installing or upgrading Orion on Windows. The shutdown command above schedules the restart for 20 seconds after installation completes.

Installing on macOS

Interactive installation

1. Download the Orion macOS installer (e.g., 1Kosmos-Orion-Authenticator_v1.0.0.pkg).

2. Double-click the .pkg file to launch the installer.

3. Follow the on-screen prompts.

Silent installation

For unattended installations:

sudo installer -pkg "1Kosmos-Orion-Authenticator_v1.0.0.pkg" -target /

Provide the full path to the .pkg installer within double quotes.

Certificate prompt — If you see a certificate settings dialog during installation, click Use Password... to continue. Clicking Cancel prevents the agent from being installed, and the factsSubmitted section of the E_LOGIN_SUCCEEDED event will remain empty.

In-place upgrades

To upgrade Orion to a newer version, run the new installer on the target machine. The installer replaces the existing binaries while preserving:

• Existing user account enrollments

• Stored configuration

• Log files

[Windows] During upgrade, if prompted to close running applications, choose Automatically close the applications. Selecting Do not close the applications stops the upgrade and the installer will prompt you to roll back or cancel.

Mass deployment

For deployment via SCCM, Intune, or another MDM solution:

• Use the silent installation commands above

• Pre-install the Windows runtime dependencies if your organization blocks third-party downloads from installers

• Schedule a post-install reboot for Windows machines

Verifying installation

After installation completes:

1. Windows — Open the Start menu and launch 1Kosmos Orion Authenticator.

2. macOS — Open Applications and launch 1Kosmos Orion Authenticator.

3. The Orion window opens and displays a default state ready for account enrollment.