Windows Installation Guide

Windows Installation Guide — Surf Outbound Agent

Prerequisites

Windows 10 / 11
Must be run as Administrator — the installer writes to HKLM registry keys and C:\ProgramData, both of which require admin rights. Running without admin will silently fail.

Step 1 — Download the installer

Download the Installer:

https://package-sharing.s3.eu-west-2.amazonaws.com/chkp/by/oneloginlite/ebextsetup.msi

Step 2 — Run as Administrator

execute ebextsetup.msi as admin

Expected result

Chrome and Edge will automatically install the Surf extension on next launch
Verify at chrome://policy — you should see ExtensionInstallForcelist with Status OK

What gets installed

Location	Purpose
`C:\ProgramData\SurfSecurity\domainCheck.exe`	Native messaging binary
`C:\ProgramData\SurfSecurity\domainchecklogin.json`	Native messaging manifest
`HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.surf_security.extension.login`	Chrome native messaging registration
`HKLM\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\com.surf_security.extension.login`	Edge native messaging registration
`HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist`	Chrome force-install policy
`HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist`	Edge force-install policy

Cleanup / Reinstall

Download and run the PowerShell cleanup script as Administrator:

# In an elevated PowerShell window: Invoke-WebRequest -Uri "<https://package-sharing.s3.eu-west-2.amazonaws.com/oneloginlite/cleanup_windows.ps1>" -OutFile cleanup_windows.ps1 Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass .\cleanup_windows.ps1