Windows Installation Guide | Notion

Windows Installation Guide — Surf Outbound Agent

Prerequisites

Windows 10 / 11
Must be run as Administrator — the installer writes to HKLM registry keys and C:\ProgramData, both of which require admin rights. Running without admin will silently fail.

Step 1 — Download the installer

Download the exe:

https://package-sharing.s3.eu-west-2.amazonaws.com/oneloginlite/surfsetup.exe - for s3 hosted

https://package-sharing.s3.eu-west-2.amazonaws.com/surf/extension/surfextsetup_es.exe - store hosted

Step 2 — Run as Administrator

Right-click surfsetup.exe → "Run as administrator"

Expected result

Chrome and Edge will automatically install the Surf extension on next launch
Verify at chrome://policy — you should see ExtensionInstallForcelist with Status OK

What gets installed

Location	Purpose
`C:\ProgramData\SurfSecurity\domainCheck.exe`	Native messaging binary
`C:\ProgramData\SurfSecurity\domainchecklogin.json`	Native messaging manifest
`HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.surf_security.extension.login`	Chrome native messaging registration
`HKLM\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\com.surf_security.extension.login`	Edge native messaging registration
`HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist`	Chrome force-install policy
`HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist`	Edge force-install policy

Cleanup / Reinstall

Download and run the PowerShell cleanup script as Administrator: