What is a C2 Identity agent?

A C2 Identity agent enables devices to be managed by C2 Identity. After installing the agent on a device, you can monitor the device’s status and assign privileges to users.

C2 Identity agent pre-deployment reminder

C2 Identity provides authentication for C2 Identity accounts and signals the users to connect to the internet for data synchronization with the C2 Identity server under the following conditions:

Newly-created user accounts must be connected to the internet using Ethernet cables for their first logins to sync the users’ data.
Existing users can be authenticated locally. However, if the existing users change their passwords on the C2 Identity web portal, they must reconnect to the internet for authentication. Otherwise, the agent will require users to enter their previous password to authenticate the new password.

To learn more about how to add a managed device, please refer to this article.

How a C2 Identity agent works

The following steps describe how a C2 Identity agent (hereafter "agent") functions:

Manage users' access privileges to a device:
- Take over local users that have the same usernames as C2 Identity users with device access privileges. These users' access to the device will be authenticated and authorized by C2 Identity.¹ ²
- Create and enable C2 Identity users with access privileges on the device.³
- Disable users on the device when they are suspended in C2 Identity's admin portal.
Data pulling: The agent retrieves information from C2 Identity if any changes related to the device are made in C2 Identity's admin portal. The agent also pulls data when a C2 Identity user signs in to the device.
Data pushing: The agent updates device information to C2 Identity when there are information changes.

System requirements

Windows: Windows 7, 10, and 11 (64-bit only)
Windows Server: Windows Server 2008 R2 and above
macOS: macOS Catalina (10.15), Big Sur (11), and Monterey (12)

What websites will a C2 Identity agent connect to?

To ensure proper data synchronization between your devices and C2 Identity servers, please make sure your C2 Identity agent has access to the following websites:

identity.eu.c2.synology.com (Europe site - Frankfurt)
identity.tw.c2.synology.com (APAC site - Taiwan)
identity.us.c2.synology.com (North America site - Seattle)
global.download.synology.com (for software updates only)

Notes:

C2 Identity agents do not take over local users whose usernames do not match any C2 Identity users with device access privileges. These accounts still have access to the device after the agent is activated, but their logins are authenticated by the device itself.
In Windows, if you can’t entirely take over the managed users’ access privileges due to linked Microsoft accounts or enabled Windows pin or picture password, refer to this article.
C2 Identity doesn't create and enable these accounts on the device until they are used to sign in to the device for the first time.

Further reading

C2 Identity - Tutorials & FAQs Overview

Czy ten artykuł okazał się pomocny?

Tak ／ Nie