Skip to main content

Silent Mode Deployment

This documentation explains how to configure and deploy the VaultysHub extension in Silent mode, in order to detect Shadow IT without direct user intervention.

info

Silent mode itself does not depend on any module, but it is only useful with the Shadow IT module: it is this module that exploits the detections reported by the extension. See Pricing and modules.

Silent mode is particularly useful when most of your collaborators do not yet use VaultysHub on a daily basis: the extension detects their applications without them having to configure it.

Objective of Silent mode​

Silent mode allows for the automatic installation and configuration of the VaultysHub extension on user machines without interaction. Thus, even if users do not have VaultysHub, their connections to external applications are detected and reported in the admin console, in order to identify unlisted applications (Shadow IT).

Accessing the extension settings​

Go to Configuration from the sidebar navigation, then select the Extension tab.

Go to 'Configuration' from the sidebar navigation

01.extension-settings-tab

The Silent Mode section is accessible via the dedicated accordion.

Click here to expand the section and access its configuration

Enable Silent mode​

Click on Silent Mode to expand the section, then activate the switch Enable Silent Mode.

Activate this switch to enable 'Silent Mode'. Once active, the extension can be automatically deployed on user machines.

Once activated, the section displays the deployment options.

04.silent-mode-enabled-overview

Configure the deployment​

Browser selection​

Select the browsers on which the extension should be installed.

Select the browsers on which the extension should be installed. Multiple browsers can be selected simultaneously.

The supported browsers are: Chrome, Firefox, Edge, Opera, Brave, and Vivaldi. Multiple browsers can be selected simultaneously.

Browser profiles (optional)​

Specify the browser profiles to target if user machines use multiple ones.

Specify the targeted browser profiles (optional). Example: Default,Profile1,Profile2

Advanced options​

Check this box to force the reinstallation of the extension even if a previous version is already present.

Check Force Reinstall to force the reinstallation of the extension, even if a previous version is already present on the machine.

Check this box to pin the extension to the browser's toolbar. In Silent mode, it is recommended to disable this option.

Check Pin Extension to pin the extension to the browser's toolbar. In Silent mode, it is recommended to disable this option to keep the extension invisible to users.

CLI installation command​

The command is automatically generated based on the selected parameters.

The installation command is automatically generated with the selected parameters. The secret key is hidden by default.

Example command:

smartlink-cli install-extension --browser chrome --smartLinkUrl https://acme.link.vaultys.org --secret <secret_key>

10.copy-command-and-download-cli

  • Copy command: copies the complete command (with the secret in clear text) to the clipboard
  • Regenerate secret: generates a new deployment secret
  • Select the target platform (Windows, macOS, Linux) and then click Download CLI to download the corresponding VaultysHub CLI tool

Large-scale deployment via MDM​

For environments with many user machines, it is recommended to deploy the extension via a centralized management tool (MDM), such as:

  • Microsoft Intune
  • Jamf (macOS)
  • Workspace ONE
  • Fleet / Munki / Puppet / Ansible
  • MDM integrated into your IT system

The MDM will allow:

  • To automatically execute the VaultysHub CLI installation command on each machine.
  • To set the parameters (--browser, --profiles, --forceReinstall, etc.) as needed.
  • To ensure that the extension remains installed and active, even after a browser or machine update.
  • To schedule automatic checks and reinstalls if necessary.

No MDM?​

In this case, installation must be done with smartlink-cli and the corresponding command, retrieved via the VaultysHub admin interface, on each machine individually.

Best practices​

  • Always test the command on a small group of users before a global deployment.
  • If you are using an MDM, ensure that the execution rights of the VaultysHub CLI are granted.
  • Keep a local copy of the VaultysHub CLI corresponding to your OS and version.
  • In case of an extension update, regenerate the command from the VaultysHub console to avoid any conflict.

Summary​

The Silent mode of VaultysHub allows for the deployment of the extension on many machines without human intervention, while maintaining reliable detection of Shadow IT. Thanks to the VaultysHub CLI, configuration and installation can be automated across all systems via an MDM or internal scripts.