Windows Installation

Install the BlueSentinel DLP agent on Windows endpoints.

Prerequisites

  • Windows 10 or Windows 11
  • Administrator privileges
  • Network connectivity to the central server on port 5100

Installation

Using the PowerShell Installer

powershell
# Run as Administrator
.\installer\install_windows.ps1

The installer will prompt for:

  • Server URL — The HTTPS URL of your central server (e.g., https://your-server:5100)
  • Enrollment Token — Generated from the admin dashboard under Enrollment

What the Installer Does

  1. Creates the application directory at C:\ProgramData\BlueSentinel\
  2. Copies the agent files and bundled Python runtime
  3. Creates subdirectories: logs\, certs\, queue\
  4. Writes the initial configuration with server URL and enrollment token
  5. Registers a Windows Service for auto-start on boot
  6. Starts the agent immediately

File Locations

PathPurpose
`C:\ProgramData\BlueSentinel\`Main application directory
`C:\ProgramData\BlueSentinel\policy.json`Current policy (offline fallback)
`C:\ProgramData\BlueSentinel\bluesentinel.db`Local SQLite database
`C:\ProgramData\BlueSentinel\logs\`Log files
`C:\ProgramData\BlueSentinel\certs\`TLS certificates
`C:\ProgramData\BlueSentinel\queue\`Offline alert queue

Windows Service

The agent runs as a Windows Service with these properties:

  • Service Name: BlueSentinel
  • Startup Type: Automatic
  • Run As: Local System
  • Recovery: Restart on failure (1st, 2nd, and subsequent failures)

Verify Installation

powershell
# Check if the service is running
Get-Service BlueSentinel

# Check the logs
Get-Content "C:\ProgramData\BlueSentinel\logs\bluesentinel.log" -Tail 50

# Check enrollment
Get-Content "C:\ProgramData\BlueSentinel\policy.json" | ConvertFrom-Json

Group Policy Deployment

For large-scale deployments, you can deploy the agent via Group Policy:

  1. Package the installer as an MSI or use a startup script
  2. Configure the enrollment token and server URL via environment variables or a config file
  3. Deploy via GPO Computer Configuration → Scripts → Startup

Uninstallation

Warning: Uninstallation requires disabling the anti-tamper protection first via the admin dashboard.

powershell
# Stop and remove the service
Stop-Service BlueSentinel
sc.exe delete BlueSentinel

# Remove files
Remove-Item -Recurse -Force "C:\ProgramData\BlueSentinel"