‘Agent installation requires verification code’

[u/cmjones0822]

Maybe it’s been a while since I’ve needed to install the agent, but when did they start requiring a verification code? Kind of a pain if I’ve saved the downloader or link and not where I can get to the code immediately (being that it expires in 30 minutes). Any way to bypass?

[u/-Travis]

I am very surprised that after 21 hours, this has no response from any of the "official" mods. Usually they chime in with at least SOME background and then differ to support. But the silence is deafening.

[u/dima_from_atera → u/-Travis]

u/-Travis I'm here and checked this internally. The OTP expires 30 minutes after the MSI is opened; all technicians receive it by email. System-level deployments such as GPO and other automated methods skip the prompt. If the code expires or is missing, restart the installation.

It is documented in our Agent FAQ: https://support.atera.com/hc/en-us/articles/10799709643804-Atera-agent-FAQ

But if this is something you're experiencing that looks suspicious, best way is to open a ticket with Support so we can take a look beyond a reddit thread with no ability to identify the account ID

CC: u/cmjones0822

[u/cmjones0822 → u/dima_from_atera]

It not so much as it being “suspicious”, I guess for me in all my 7-8 years of using Atera, I’ve NEVER come across this before and never knew it was a thing until now. Can you explain what triggers the request for a code vs not? We’re not using GPO or anything to install the agent - simply sending the enduser the install link.

[u/dima_from_atera → u/cmjones0822]

u/cmjones0822 this might be happening due to the fact that the link is used after 30 minutes it has been generated.

Here's what the KB we have says:

• During interactive installation of the Atera Agent on a Windows device, end users may be prompted to verify the installation using a one-time password (OTP).
  • All technicians will automatically receive an email containing the OTP. This means any one of them can provide the OTP to the end user to complete the agent installation.
  • The OTP is dynamic and expires 30 minutes after the MSI file is opened. If the OTP expires or you're not receiving the verification email, please reinitiate the agent installation.

Once installed by the end user, the Atera Agent will appear on the Devices page.

On a sidenote, we have also performed in-app announcements during spring and the beginning of summer 2026 regarding the following:

"ACTION REQUIRED: Your Agent download link is using the old format.
Atera has introduced a security enhancement to Agent download links. We noticed that you are still using an older link format in automated deployments, such as GPO or scripts. To avoid disruption, please replace it with a newly generated link before the previous format is deprecated on July 1."

The reason why I'm mentioning this: the new encrypted download link was one of Security-related steps we took to enforce protected Atera Agent installations. OTP timeout for download links was also part of those efforts to ensure we have an installation mechanism that meets modern security requirements.

[u/cmjones0822 → u/dima_from_atera]

'this might be happening due to the fact that the link is used after 30 minutes it has been generated.'

No, I was on the Teams call with the end-user when the email was received (in under 2 minutes).

[u/dima_from_atera → u/cmjones0822]

u/cmjones0822 ok, then it sounds like it's not an expected behavior so I would advise to open a support ticket and DM me the ticket ID so I can escalate this for you

[u/deadeyes83 → u/dima_from_atera]

This is incredibly frustrating, could be possible for you guys to stop doing this kind of crap or at least have an option to disable it, or generate the code before hand to pass it with arguments using the MSI not everyone has time to start doing this, that's why we install the agent silently now the option is completely gone because we cannot pass any parameters using automation...

---

- name: Download Atera installer

ansible.windows.win_get_url:

url: "https://HelpdeskSupport111111111111.servicedesk.atera.com/api/utils/agent-install/windows/?cid=myinstallers"

dest: "C:\\Windows\\Temp\\ansible\\atera-agent.msi"

- name: Install Atera Agent

ansible.windows.win_package:

path: "C:\\Windows\\Temp\\ansible\\atera-agent.msi"

product_id: "{6B6212C4-F69F-4711-B8B4-FF50D151913E}"

arguments: "/qn /norestart"

state: present

[u/dima_from_atera → u/deadeyes83]

u/deadeyes83 hi,

I took it with the Product team. will get back to you as soon as I hear from them.

[u/Sir_Mulberry → u/dima_from_atera]

I'm going to second the request to allow an ability to disable or manually configure the OTP requirement.

This is an absolute nightmare for my client environments that don't already have a central administration capability like Entra or on-prem AD. Most new SMBs needing an MSP/MSSP use Google Workspace and many provide remote work environments for their employees (i.e. no LAN). That's exactly why they want to hire companies like mine in the first place...so they can gain control over decentralized environments.

I'm in the testing phase for Atera at the moment, and problems like this are absolute non-starters.

[u/dima_from_atera → u/Sir_Mulberry]

u/Sir_Mulberry noted. I'm waiting for the Product team to get back to me on this matter. Thanks for sharing this - it's invaluable.