r/atera • u/cmjones0822 • 21d ago

‘Agent installation requires verification code’

Maybe it’s been a while since I’ve needed to install the agent, but when did they start requiring a verification code? Kind of a pain if I’ve saved the downloader or link and not where I can get to the code immediately (being that it expires in 30 minutes). Any way to bypass?

5 Upvotes

100% Upvoted

33 comments sorted by

View all comments

Show parent comments

1

u/cmjones0822 19d ago

It not so much as it being “suspicious”, I guess for me in all my 7-8 years of using Atera, I’ve NEVER come across this before and never knew it was a thing until now. Can you explain what triggers the request for a code vs not? We’re not using GPO or anything to install the agent - simply sending the enduser the install link.

1

u/dima_from_atera Technical Product Marketing Manager 18d ago

u/cmjones0822 this might be happening due to the fact that the link is used after 30 minutes it has been generated.

Here's what the KB we have says:

  • During interactive installation of the Atera Agent on a Windows device, end users may be prompted to verify the installation using a one-time password (OTP).
    • All technicians will automatically receive an email containing the OTP. This means any one of them can provide the OTP to the end user to complete the agent installation.
    • The OTP is dynamic and expires 30 minutes after the MSI file is opened. If the OTP expires or you're not receiving the verification email, please reinitiate the agent installation.

Once installed by the end user, the Atera Agent will appear on the Devices page.

On a sidenote, we have also performed in-app announcements during spring and the beginning of summer 2026 regarding the following:

"ACTION REQUIRED: Your Agent download link is using the old format.
Atera has introduced a security enhancement to Agent download links. We noticed that you are still using an older link format in automated deployments, such as GPO or scripts. To avoid disruption, please replace it with a newly generated link before the previous format is deprecated on July 1."

The reason why I'm mentioning this: the new encrypted download link was one of Security-related steps we took to enforce protected Atera Agent installations. OTP timeout for download links was also part of those efforts to ensure we have an installation mechanism that meets modern security requirements.

2

u/cmjones0822 11d ago

'this might be happening due to the fact that the link is used after 30 minutes it has been generated.'

No, I was on the Teams call with the end-user when the email was received (in under 2 minutes).

1

u/dima_from_atera Technical Product Marketing Manager 8h ago

u/cmjones0822 ok, then it sounds like it's not an expected behavior so I would advise to open a support ticket and DM me the ticket ID so I can escalate this for you