Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified admin/img/image10.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified admin/img/image5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file removed admin/img/image6.png
Binary file not shown.
Binary file modified admin/img/image7.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file removed admin/img/image8.png
Binary file not shown.
Binary file removed admin/img/image9.png
Binary file not shown.
28 changes: 6 additions & 22 deletions admin/index.et.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

**[In English](index.md)**

**Versioon:** 26.04/1
**Versioon:** 26.06/1

**Väljaandja:** [RIA](https://www.ria.ee/)

Expand Down Expand Up @@ -30,6 +30,7 @@
| 16.06.2025 | 25.06/1 | AWP asendatud IDPlug-iga. — Muutja: Raul Metsma
| 31.10.2025 | 25.10/1 | Lisatud SmartCard Client. — Muutja: Raul Kaidro
| 19.05.2026 | 26.04/1 | Avaldatud veebidokumentatsioonina. Lisatud Edge NativeMessagingAllowlist konfiguratsioon. — Muutja: Raul Metsma
| 11.06.2026 | 26.06/1 | Uuendatud GPO-MSI levitamise juhiseid ja kuvatõmmiseid. — Muutja: Raul Metsma

---

Expand Down Expand Up @@ -87,7 +88,7 @@ DigiDoc4 on rakendus, mis võimaldab dokumente allkirjastada ja digiallkirjastat

#### ID-updater

ID-updater on kohustuslik komponent, mis sisaldab teiste ID-tarkvara komponentide jaoks vajalikke kolmanda osapoole teeke (Qt, OpenSSL jms). Installatsiooni käigus luuakse ka *Task Scheduleri* käsk `id updater task`, mis vaikimisi kontrollib uue tarkvara saadavust kord nädalas ja uuenduse leidmisel pakub selle kasutajale välja.
ID-updater on kohustuslik komponent, mis sisaldab teiste ID-tarkvara komponentide jaoks vajalikke kolmanda osapoole teeke (Qt, OpenSSL jms). Installatsiooni käigus luuakse ka *Task Scheduleri* käsk `id updater task`, mis vaikimisi kontrollib uue tarkvara saadavust kord nädalas ja uuenduse leidmisel pakub selle kasutajale välja. MSI-paigalduse puhul ei ole ID-updater kohustuslik komponent.

![Näide: ID-updater leidis uuema versiooni tarkvarast (EST)](./img/image3.png)

Expand Down Expand Up @@ -144,15 +145,7 @@ Juhendis järgnevalt kirjeldatavad MST failid on allalaetavad asukohast <https:/

Palun märgake ka seda, et uute MSI versioonidega on ka mitmeid MST faile uuendatud ja kindlasti kasutage uusi — vanad ei toimi.

##### ID Updater

Kohustuslik komponent, soovituslik installeerida esimesena.

Kohandused:

- Juhuks, kui automaatset uuenduste otsimist (ajastatud käsk `id updater task`) ei soovita aktiveerida, tuleb koos selle MSI installiga kasutada ka transformfaili `2410-no_autoupdate.mst`. Usutavasti on selle keelamine mõttekas, kuna MSI installatsioonid ei toeta sel viisil tarkvara uuenduste kontrolli.

![Näide transformfaili lisamisest GPO-MSI installile](./img/image6.png)
> **Märkus:** Võrreldes juhendi varasemate versioonidega ei ole GPO-MSI paigalduste puhul enam vaja paigaldada komponenti `ID-updater` ning komponendid ei vaja enam transformfaile, mis sunnivad tarkvara paigaldamist samasse kausta `PROGRAMMIFAILID\Open-EID`.

##### IDPlug

Expand All @@ -179,7 +172,6 @@ Vajalik, kui soovitakse paksu kliendiga sertifikaate hallata, allkirjastada ja k

Kohandused:

- GPO-MSI installatsioonide puhul on vaja kasutada transformfaili `2410-DD-Location.mst`. Sellisel juhul installeeritakse tarkvara vajalike draiveritega samasse kausta `PROGRAMMIFAILID\Open-EID`.
- Vaikimisi MSI installatsioon töölauale vajalikke ikoone ei paigalda. Kui on soov seda teha, tuleb installatsioonile lisada ka transformfail `2410-DD-Shortcut`.

![Näide transformfaili lisamisest GPO-MSI installile](./img/image7.png)
Expand All @@ -188,17 +180,9 @@ Kohandused:

Windows paremklikiga allkirjastamise ja krüpteerimise lubamine.

Kohandused:

- GPO-MSI installatsioonide puhul on vaja kasutada transformfaili `2410-DD-Shell-Location.mst`. Sellisel juhul installeeritakse tarkvara vajalike draiveritega samasse kausta `PROGRAMMIFAILID\Open-EID`.

![Näide transformfaili lisamisest GPO-MSI installile](./img/image8.png)

##### Web eID

Brauserite laiendused ja omarakendus (*native app*). GPO-MSI installatsioonide puhul on vaja kasutada transformfaili `2410-Web-Location.mst`. Sellisel juhul installeeritakse tarkvara vajalike draiveritega samasse kausta `PROGRAMMIFAILID\Open-EID`.

![Näide transformfaili lisamisest GPO-MSI installile](./img/image9.png)
Brauserite laiendused ja omarakendus (*native app*).

MSI kohandatud pakkide loend näeb GPMC halduskonsoolis välja nii:

Expand All @@ -208,7 +192,7 @@ GPO-MSI installatsioonide puhul ilmuvad kõik installeeritud programmid ka progr

![MSI installatsioonid programmide loendis](./img/image11.png)

> **Märkus:** MSI-de installatsioonide järjestus ei ole oluline, ent kõik sõltuvad MSI-st „OpenEID Updater". Samuti on oluline minidraiver, millest samuti teised komponendid sõltuvad.
> **Märkus:** MSI-de installatsioonide järjestus ei ole oluline, kuid vajalik minidraiver peab olema paigaldatud, sest teised komponendid sõltuvad sellest.

> **Märkus:** MST failid on allalaetavad asukohast <https://www.id.ee/artikkel/open-eid-administreerimise-ja-paigaldamise-juhised-administraatoritele/>.

Expand Down
28 changes: 6 additions & 22 deletions admin/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

**[Eesti keeles (In Estonian)](index.et.md)**

**Version:** 26.04/1
**Version:** 26.06/1

**Published by:** [RIA](https://www.ria.ee/)

Expand Down Expand Up @@ -30,6 +30,7 @@
| 16/06/2025 | 25.06/1 | Replaced AWP with IDPlug. — Changed by: Raul Metsma
| 31/10/2025 | 25.10/1 | Added SmartCard Client. — Changed by: Raul Kaidro
| 19/05/2026 | 26.04/1 | Published as online documentation. Added Edge NativeMessagingAllowlist configuration. — Changed by: Raul Metsma
| 11/06/2026 | 26.06/1 | Updated GPO-MSI distribution guidance and screenshots. — Changed by: Raul Metsma

---

Expand Down Expand Up @@ -87,7 +88,7 @@ DigiDoc4 is an application that enables the signing, validation, encryption, and

#### ID-updater

ID-updater is a mandatory component that bundles shared third-party libraries (Qt, OpenSSL, etc.) required by other ID-software components. During installation, the task scheduler task `id updater task` is created, which checks the availability of new software once per week and suggests any identified updates to the user.
ID-updater is a mandatory component that bundles shared third-party libraries (Qt, OpenSSL, etc.) required by other ID-software components. During installation, the task scheduler task `id updater task` is created, which checks the availability of new software once per week and suggests any identified updates to the user. For MSI installations, ID-updater is not a mandatory component.

![Example: ID-updater found a newer version of the software (EST)](./img/image3.png)

Expand Down Expand Up @@ -146,15 +147,7 @@ The MST files described below in the manual can be downloaded from the location

Below is a brief overview about how to configure GPO-MSI installations.

##### ID-updater

ID-updater is a mandatory component. It is recommended to install it first.

Options:

- If you do not want to activate the automatic software update functionality (deferred `id updater task`), use the transform file `2410-no_autoupdate.mst` with this MSI installation. And it probably makes sense to disable it, since MSI installations don't support software update checking in this way.

![Sample about adding a transform file to the MSI installation](./img/image6.png)
> **Note:** Compared to earlier versions of this guide, `ID-updater` no longer needs to be installed for GPO-MSI deployments, and components no longer need transform files that force installation into the same `PROGRAM FILES\Open-EID` folder.

##### IDPlug

Expand All @@ -181,7 +174,6 @@ DigiDoc4 is a necessary component if you want to sign and encrypt documents as w

Options:

- For GPO-MSI installations, it is necessary to use the transform file `2410-DD-Location.mst`. In this case, the software is installed in the same folder `PROGRAM FILES\Open-EID` as the necessary drivers.
- The default MSI installation does not install the necessary icons on the desktop. However, if desktop icons are required, the transform file `2410-DD-Shortcut` must also be added to the installation.

![Adding transform files for MSI installation](./img/image7.png)
Expand All @@ -190,17 +182,9 @@ Options:

Enables right-click signing and encryption of files in Windows Explorer.

Options:

- For GPO-MSI installations, it is necessary to use the transform file `2410-DD-Shell-Location.mst`. In this case, the software is installed in the same folder `PROGRAM FILES\Open-EID` as the necessary drivers.

![Sample of adding a transform file to a GPO-MSI installation](./img/image8.png)

##### Web eID

Browser extensions and native app. For GPO-MSI installations, it is necessary to use the transform file `2410-Web-Location.mst`. In this case, the software is installed in the same folder `PROGRAM FILES\Open-EID` as the necessary drivers.

![Sample of adding a transform file to a GPO-MSI installation](./img/image9.png)
Browser extensions and native app.

The list of MSI custom packages in the GPMC management console looks like this:

Expand All @@ -210,7 +194,7 @@ For GPO-MSI installations, all installed programs also appear in the software li

![MSI installations in the program list of the Control Panel](./img/image11.png)

> **Note:** The order of MSI installation components is not important, but all components depend on the MSI `Open-EID updater`. The minidriver is also important, as other components depend on it.
> **Note:** The order of MSI installation components is not important, but the required minidriver must be installed because other components depend on it.

> **Note:** MST files can be downloaded from <https://www.id.ee/en/article/administrators-guide-for-administration-and-installation-of-open-eid/>.

Expand Down