Windows installation

Agent CLI is for the technician's Windows x64 workstation; setup does not enroll a customer device. Install as the ordinary account that uses it. It needs OpenSSH client tools (ssh/scp/ssh-keygen), not OpenSSH server. HTTPS authentication and Windows trust/revocation connectivity are required for Authenticode verification.

Verified package and account

Use OpalSpan Downloads; expect publisher Ready IT ApS and same-release complete installer/ZIP companions. Stable installer/ZIP URLs serve verified selected files, not redirects. Setup changes HKCU PATH: restart the terminal under that same account. Profiles use Windows Credential Manager. Existing compatibility storage remains %LOCALAPPDATA%\Forge\cli and bin; keep profile/host-key identity. Copying only one executable breaks readiness. Getting started owns sign-in.

Scripted setup and lifecycle

Silent setup needs explicit wait/exit-code handling. --verify-only checks without installation; --result requires a new absolute JSON path with existing parent and silent/verify mode. Do not overwrite an old receipt. Verified complete update/repair preserves activation on failed validation and keeps profiles; customer Daemon is independent. Close/disconnect active commands before uninstall; the uninstaller does not terminate them. Only when removing saved access is intended, use opalspan logout --all; never logout as routine cleanup. The retained Installed Apps label is exactly Forge Technician CLI; registry identity Forge.Cli stays compatible. Removal does not authorize deleting profile/host-key history. Troubleshooting.