Windows installation

Requirements

• Windows 7 SP1 / Server 2008 R2 or later, 32-bit or 64-bit. One installer covers the whole family; see the table below.
• Administrator privileges to run the installer.
• Outbound HTTPS/WSS access to nx.3fe.ru. No inbound ports are needed.
• An enrollment token nyxet_… created in the dashboard (Admin → Agents → Enrollment tokens). Enable With relay on the token for SSH access through the control plane.

Installer: https://nx.3fe.ru/downloads/nythronix-agent-setup.exe. It is also linked on the sign-in page and in the enrollment token section.

Supported Windows versions

There is one installer for all systems. It detects the Windows version and architecture and installs the appropriate agent build, so you do not need to identify the system beforehand.

System	Browser terminal	SSH relay and commands	OpenSSH
Windows 10 1809+ / Server 2019+, 64-bit	Yes	Yes	Built-in component, bundled version as fallback
Windows 7 SP1 / 8 / 8.1 / Server 2008 R2 / 2012 / 2012 R2, 64-bit	No	Yes	Bundled with the installer
Any 32-bit Windows	No	Yes	Bundled with the installer

The browser terminal requires ConPTY, introduced in Windows 10 1809. On older systems, most dashboard features still work: online status, SSH relay, tunnels, read-only commands, and agent updates. Terminal-dependent features do not: Launch shell, tmux and zellij sessions, and consent-code access. Open a terminal to an older machine through a neighboring modern machine using SSH to another agent.

Note

On Windows 7 and Server 2008 R2, OpenSSH Server comes from the installer bundle: there is no component store, and downloads fail because TLS 1.2 is disabled by default. The installer puts OpenSSH in its own folder, preserving an administrator’s existing installation. OpenSSH and your SSH access remain after the agent is removed. The bundled files bring the installer size to about 12 MB.

What the wizard asks

1. Additional tasks.
   • Install OpenSSH Server (sshd): selected by default. The wizard runs Add-WindowsCapability … OpenSSH.Server, sets sshd to start automatically, and starts it. This needs Windows Update or WSUS access; the step is skipped if sshd is already installed. No inbound port is opened: operators reach the machine’s 127.0.0.1:22 through the Nythronix relay.
   • Make PowerShell the default shell for SSH logins: not selected by default. Writes HKLM\SOFTWARE\OpenSSH\DefaultShell.
2. Control server.
   • Server URL: defaults to https://nx.3fe.ru. Accepts both https://… and wss://…/agent/ws.
   • Enrollment token: paste nyxet_…. Leave empty when updating an already-enrolled machine.
   • Machine name in the dashboard: optional. When supplied, this name is displayed instead of the network hostname. Any language is supported, for example “Checkout 2, warehouse”. Leave empty to keep the default name.

The wizard then copies nythronix-agent.exe into %ProgramFiles%\Nythronix Agent, runs enroll (saving credentials in %ProgramData%\Nythronix\agent.json), registers the NythronixAgent service (LocalSystem, automatic startup, restart on failure), and starts it. The machine appears as Online within a few seconds.

If sshd cannot be installed automatically, the wizard shows a warning and still installs the agent. You can install sshd later:

Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
Set-Service -Name sshd -StartupType Automatic
Start-Service sshd

Silent installation

nythronix-agent-setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART ^
  /SERVER=https://nx.3fe.ru /TOKEN=nyxet_… /NAME="Checkout 2, warehouse" /TASKS=sshd /LOG=C:\setup.log

• /SERVER=: control server URL.
• /TOKEN=: enrollment token. Without it, installation fails on an unenrolled machine; an enrolled machine keeps its current registration.
• /NAME=: optional dashboard name. The default name is used if omitted.
• /TASKS=sshd,pwsh: tasks to perform; empty /TASKS= skips sshd installation.
• /LOG=: standard Inno Setup log.

A reusable token (Max uses greater than 1) is useful for rolling out one command to multiple machines. Machines inherit its tags automatically.

File locations

Item	Location
Executable	%ProgramFiles%\Nythronix Agent\nythronix-agent.exe
Credentials and update verification key	%ProgramData%\Nythronix\agent.json
Service log	%ProgramData%\Nythronix\logs\agent.log.* (daily rotation)
Installer step log	%ProgramData%\Nythronix\logs\setup-step.log
Server URL for reinstallation	HKLM\SOFTWARE\Nythronix\Agent\ServerUrl

The service appears in services.msc as NythronixAgent. You can also control it through the agent from an administrator command prompt:

"%ProgramFiles%\Nythronix Agent\nythronix-agent.exe" service stop
"%ProgramFiles%\Nythronix Agent\nythronix-agent.exe" service start

Dashboard terminals launch PowerShell 7 (pwsh.exe) when installed, otherwise Windows PowerShell. The tmux and zellij engines are unavailable on Windows.

Updating

Two options:

• Automatic. In Admin → Agents, set the machine’s Update policy to auto or auto_idle_only (update only without active sessions). The agent downloads new releases, verifies SHA-256 and the Ed25519 signature with the key pinned at enrollment, and restarts under service control.
• Manual. Run the new installer with the token field empty. It stops and replaces the service while preserving enrollment.

Uninstalling

Open Settings → Apps (Apps & features) → Nythronix Agent → Uninstall. The uninstaller runs service stop and service uninstall and removes program files, but keeps %ProgramData%\Nythronix with enrollment data so reinstallation does not need a new token. Delete that folder manually if the machine should no longer connect, and delete its record in Admin → Agents.

OpenSSH Server installed by the wizard is left in place when the agent is removed.