Overview

This article provides information about different methods of migrating from the standalone Umbrella Roaming Client to Cisco Secure Client with Umbrella Roaming Module. It will cover simple GUI Install, Command Line and new SecureX packages.

Note: This article is currently for Windows devices only.

Looking to upgrade from AnyConnect? Click here. 

Cisco Secure Client Installation

Using GUI to install Cisco Secure Client

Except where specified, this process is the same for new installs of Cisco Secure Client and upgrade installs moving from Umbrella Roaming Client. 

1. Download Cisco Secure Client from software.cisco.com

2. Double click on Setup file application

3. It will present following window:
   
   
   Select Umbrella, Diagnostic and Reporting Tool.  Selecting Lock down Computer Services is optional and will allow only administrators start/stop the services on a device if selected.
   
   NOTE: Selecting Umbrella module, will by default install `Core & AnyConnect VPN` module but it will be hidden and you do not need to use or need license for it.
   
   

4. Click on Install Selected and it will start installing the modules. Upon completion, you will see following windows when you bring up Cisco Secure Client:

• If you are upgrading from the standalone Umbrella Roaming Client:
  At this time, Cisco Secure Client will detect and uninstall the Umbrella Roaming Client. Please allow some time for this to launch and complete.
• If you are installing fresh (without Umbrella Roaming Client or AnyConnect installed): 
  You will need your organizations orginfo.json file. You can download this from your dashboard by browsing to Deployments > Core Identities > Roaming Computers > Roaming Client then clicking on Download on top right corner and selecting Download Module Profile.
  Once downloaded, copy the OrgInfo.json file into the %ProgramData%\Cisco\Cisco Secure Client\Umbrella folder and restart the services.
  
  Looking for info on upgrading from AnyConnect? Click here. 

Cisco Secure Client should now be fully installed.

Command line install

Notes on Command Line Install:

• Commands must be run by an administrator
• These steps apply the same if Umbrella Roaming Client is currently active or not
• The commands below assume you wish to hide the VPN module, which is useful if you do not use Cisco as a VPN provider. If you do not wish to hide the VPN module, run the below commands without the PRE_DEPLOY_DISABLE_VPN=1 argument.
  

Before starting command line install you will need to:

• Download Cisco secure client predeploy zip from software.cisco.com 
• Extract it in a folder from where you can run commands

To install:

1. Open command prompt as administrator
2. Navigate to folder where you extracted the zip file (for instance, if you extracted in a folder called folder_name under your username
   cd c:\users\username\folder_name
3. To install core-vpn module, run the following command:

   msiexec /package cisco-secure-client-win-[VERSION]-core-vpn-predeploy-k9.msi /norestart /qn PRE_DEPLOY_DISABLE_VPN=1 

   Note: Replace [Version] with version number you are installing. For example, if you were installing 5.0.01242 the MSI would be called cisco-secure-client-win-5.0.01242-core-vpn-predeploy-k9.msi
   
   
4. To install umbrella module, run the following command:

    msiexec /package cisco-secure-client-win-5.0.01242-umbrella-predeploy-k9.msi /norestart /qn PRE_DEPLOY_DISABLE_VPN=1

   Note: Replace [Version] with version number you are installing. For example, if you were installing 5.0.01242 the MSI would be called cisco-secure-client-win-5.0.01242-umbrella-predeploy-k9.msi

Using SecureX

Using Cisco secure X, you can build a package that can be deployed to the devices. Please follow steps mentioned below, to create deployable package.

• To create Cisco secure X account, please visit https://docs.umbrella.com/umbrella-user-guide/docs/log-into-securex 
• Another way to creating Secure X account is https://www.cisco.com/site/au/en/products/security/securex-platform/index.html > Clicking on activate SecureX link.
• Once you have Secure X account, please login to it and follow steps mentioned in https://docs.securex.security.cisco.com/Secure-Client-Help/Content/sc-deployment-management.html  to create Secure Client Install Package
• Creating this package will provide you with both Full Installer and Network Installer links you can download and execute to install. 

Check this out: With Secure X package build, you will be able to select which modules come in the Full/Network Installer through SecureX and OrgInfo.json would be set up here so no manual placement post-install is needed.

With standalone client installed (using Full Installer Package)

1. Download Full installer package and double click on .exe file. It will popup following window:
2. Click Continue to begin the installation process
3. Upon completion, it will remove standalone Umbrella Roaming Client if it was previously installed

Cisco Secure Client should now be fully installed.

Using Network Installer Package:

1. Double click on Network installed package and you will see following popup:
   
2. Click Continue. This will install Cisco Secure Client and uninstall the standalone Umbrella Roaming Client if installed.

Cisco Secure Client should now be fully installed.