Audience: CS engineers (installation & operations) — primary: HQ CS, secondary: overseas subsidiary / dealer CS · Applies to: v1.2.0 and later · Last updated: 2026-10-02
Use the tabs above to jump straight to what you need: Overview (background & reference), Server (set up and run the Server Agent), Client (Client Agent & clinical-PC issues), 5DI (5D special environment).
Previously, each PC in a hospital connected to the cloud individually to update its software. This caused version mismatches, compatibility problems, and wasted time/bandwidth when many PCs installed at once.
RAY Unified Installer solves this by having a single Application Server inside the hospital centrally manage the SW installation files, while the Application Client PCs receive and install/update software from that Server.
The users are CS engineers — this is not operated by hospital end-users. The Agent runs as a background service; the CS engineer manages it through a browser (CS Console).
These are invariant premises. If a field requirement conflicts with them, do not change things on your own — contact HQ (Platform Development Team).
| Policy | Content | Note |
|---|---|---|
| OS scope | Windows 10+, both 32/64-bit | macOS/Linux not supported |
| Admin-privileged residency | The Agent resides as a Windows service with admin rights | CS approves the UAC elevation at first install |
| Cloud is separate | The Agent only passes the country code + parses responses; it does not build the cloud catalog | A missing SW is often a cloud-registration matter, not an Agent bug |
| UI = CS Console (Web) | Access via browser to localhost | No separate installed GUI |
| Security | Intra-hospital network only / SHA-256 for SW / fixed password for console | No mutual auth between Server↔Client |
| Manual server swap | No automatic failover | On Server failure, CS manually swaps + re-points Clients |
| Coexistence | Coexists with each SW's own auto-update | — |
| Agent self-update | Both Server/Client update automatically | Server via internet, Client via Server |
[Cloud] ←(internet, Server only)
│
[Application Server + Server Agent] ← managed by CS via CS Console
│ (intra-hospital LAN only)
├─[Client PC + Client Agent] ─ installs clinical SW
├─[Client PC + Client Agent]
└─ ...
Which software is managed is defined by the product, while each SW's version and installer file are looked up individually in the cloud (RDC — RAYTeams Developer Center). In other words, "what we manage" is an HQ decision and "what its latest version is" comes from the cloud. You therefore cannot add or remove entries in the field; conversely, an SW on the list may show no version if nothing is published for it in the cloud.
Currently managed SW (as of 2026-08 — subject to change):
| SW | Notes |
|---|---|
| RAYTeams | Required — the common baseline for every PC. Shown at the top of the list and cannot be excluded |
| SMARTDent | SMARTDent 3D ships inside the SMARTDent installer, so it is not a separate entry |
| RAYBridge | |
| RAYFace | Prerequisite for RAYFace Smile Design / Ortho Simulator |
| RAYFace Smile Design | Depends on RAYFace — selecting it auto-selects RAYFace |
| RAYFace Ortho Simulator | Depends on RAYFace — selecting it auto-selects RAYFace |
| RAYFusion | |
| RAYDENT Studio | |
| RAYDENT Splint | |
| RAYDENT Converter |
RAYServer and the RAYScan series are currently not managed by this product (HQ decision). They are installed together with RAYScan and do not appear in this product's catalog, site configuration, or deployment lists.
Selection rules: RAYTeams is shown in the list and is always included (it cannot be unchecked or set to "do not install"). Where a dependency exists, the prerequisite SW is auto-selected.
Catalog vs. Site configuration — the catalog is the full list of installable SW in the cloud; the site configuration is the subset of SW/versions this specific hospital will actually use. All subsequent Client deployments are based on the site configuration.
| Item | Value |
|---|---|
| Standard install path | C:\Ray\RAYSWInstaller\ (subfolders packages\, logs\, data\) |
| CS Console URL | http://127.0.0.1:8096/cs/ (health: http://127.0.0.1:8096/health) |
| Windows service names | ray-server-agent / ray-client-agent |
| Install executables | ray-server-agent.exe / ray-client-agent.exe |
| Deployment setup | RAY-Unified-Installer-server-setup.exe / RAY-Unified-Installer-client-setup.exe (double-click → auto-installs to standard path) |
| Downloaded installers (Server) | C:\Ray\RAYSWInstaller\packages\ — kept flat, under the original file name |
| Downloaded installers (Client) | C:\Ray\RAYSWInstaller\data\client-cache\binaries\<SW>\<version>\ |
| Progress file | C:\Ray\RAYSWInstaller\jobs.json (which SW is downloading, and how far) |
These paths are anchored on where the Agent executable lives. If you installed somewhere other than the standard path, the same structure is created under that folder.
C:\Ray\RAYSWInstaller\logs\agent-YYYY-MM-DD.log (per-day, with retention).| Item | Policy |
|---|---|
| Network | Intra-hospital LAN only. WAN is Server↔cloud only |
| Server↔Client auth | None |
| SW integrity | SHA-256 (mandatory when provided) + code signing on official releases |
| Console access | Fixed password (hash-stored), localhost-only |
| Logs | No plaintext logging of sensitive data |
Firewall and antivirus policies differ from hospital to hospital. Verifying the items below before your site visit prevents most installation failures.
| Target | Direction | Port | Notes |
|---|---|---|---|
| Server (representative PC) | Inbound | TCP 8096 | Clinical PCs connect here. The firewall rule is added automatically during installation; allow it manually if that fails |
| Server (representative PC) | Outbound | TCP 443 (HTTPS) | Downloads the SW list and installer files from the cloud |
| Client (clinical PC) | Inbound | Not required for the Agent | The Agent only listens inside its own PC. Exceptions required by the managed SW itself are out of scope for this table (see the note below) |
| Client (clinical PC) | Outbound | TCP 8096 → Server | One-way: the Client connects to the Server |
| Client (clinical PC) | Internet | Not required | Clients never contact the cloud directly |
Outbound addresses the Server needs:api-rsp-application.rayteams.com · api-teams-info.rayteams.com · common.rayplatform.com · r2.rayplatform.com · ray-data.s3.ap-northeast-2.amazonaws.com
⚠️ This table covers only the Unified Installer's own traffic (Server/Client Agent).
The managed SW has its own communication requirements, so a firewall exception for that program may be needed separately — especially when it is installed in a configuration where other PCs connect to it. Whether and in what form it is needed depends on the SW and the site configuration, so check that SW's installation/configuration guidance as well. Configuring a site from this table alone as "clinical PCs need no inbound rules at all" can cause problems on the SW side.
Firewall exceptions for the managed SW are registered by each SW's own installer (decided 2026-08-28). Unified Installer only registers its own traffic (Server inbound 8096). If a given SW's exception is not registered, contact that SW's development team.
A PC using 5DI configuration needs the RAYTeams local service (port 8008) running on that PC. This is PC-internal traffic, so no firewall change is required.
C:\Ray\RAYSWInstaller\ (especially packages\) from real-time scanning, since that is where large installer files are downloaded, extracted and executed. Real-time scanning can lock those files and make installs slow or fail.C:\Ray\ or the individual SW install paths.CLI quick reference
ray-server-agent install | uninstall | start | stop | version | setpw | ping
ray-client-agent install --server=http://<ServerIP>:8096 | uninstall | start | stop | version | ping
Country code — ISO 3166-1 alpha-2 (e.g., KR, US). If unset, auto-estimated: saved setting → IP → timezone → KR.
Glossary
FAQ
The Server Agent runs on one representative PC and is the hub you configure and operate from.
RAY-Unified-Installer-server-setup.exe (or ray-server-agent install) → start.http://127.0.0.1:8096/health.http://127.0.0.1:8096/cs/ in a browser.KR.The "Current version" column — this column shows the version pinned in the site configuration, not the version installed on that PC. An SW with no version pinned yet shows "Not configured" (regardless of whether it is installed).
How installation follows — saving the site configuration only decides what to use; the actual install path differs by target PC.
| Target | How |
|---|---|
| The representative PC (Server) itself | The install link on each SW in the SW list, or select the self entry in the Clients view and deploy |
| Clinical PCs (Clients) | Select the target PCs in the Clients view and deploy |
So the order is pick versions in the site configuration → save → (install from the SW list on the representative PC / deploy from Clients to clinical PCs). RAYTeams is no exception: being in the site configuration does not install it — you still have to run a deployment.
Track deployment progress in the Jobs view.
What you can see
| View | What it shows |
|---|---|
| Jobs | Per deployment job: N targets · success / failed / pending / in progress, per-PC status, and Server→Client transfer volume (GB) |
| Clients | Per PC: installed SW and versions, colour-coded (matches configuration / differs / not in configuration), plus connected vs offline counts |
Jobs aggregation is per deployment job. To see how far the whole site has progressed (all PCs × all SW), use the SW deployment status view (added in v1.2.0). You can read the coverage rate without opening each PC one by one.
Installation progress percentages are not shown. Vendor installers report progress inconsistently, which produced unreliable numbers, so status is shown only as
pending / in progress / success / failed.
.exe/.msi is executed directly; .zip is extracted and the inner Setup.exe is run.If a download fails
Rolling back to a lower version (downgrade)
Reboot after installation
Register the environment files from a reference PC on the server, then push them to the PCs you select in one go. This replaces the work of visiting each PC to copy files by hand.
This feature does not know anything about the SW. It moves the files you specify to the location you specify. Which parts of a given SW's settings are synchronised to a server and which are stored per PC is that SW's own concern, and this feature does not take part in it. It therefore does not perform "settings backup/restore" or "version compatibility" handling.
Procedure
Things to know
| Item | Detail |
|---|---|
| When it runs | Only when an operator runs it. There is no automatic synchronisation |
| Rollback | On the target PC the existing files are preserved before replacement. If it fails, they are restored |
| Separate results | Installation results and file-deployment results are shown separately, so you can tell apart a PC where the install succeeded but only the file deployment failed |
| Blocked paths | Drive roots (C:\), system folders (C:\Windows, etc.) and the Agent's own install path are blocked for safety |
| Running apps | If an app is holding the target files, that PC is skipped. Force-closing is applied only to SW agreed in advance |
Close the apps on the target PCs before deploying and the run finishes in one pass, with no skipped PCs.
Specify per PC the cases where the same SW has to be installed differently on different machines (server configuration, 3D viewer, and so on).
Procedure
Things to know
| Item | Detail |
|---|---|
| Persistence | Once set, the options keep applying to later installations. There is no need to pick them each time |
| Scope | Only PCs that have options set are affected. PCs without any setting behave exactly as before |
| Verification | The last applied result is shown on screen. If an installation fails, the applied record is cleared and it shows as "pending" |
If the option list does not appear — the list comes from the SW catalogue. It means the options for that SW are not registered in the catalogue yet; once they are, they appear automatically without reinstalling the Agent. Contact HQ (Platform Development Team).
When the site's internet link is slow, or you want to bring large installers with you, drop the installer files into the Server's packages folder. They then appear in the version picker as a Local · vVERSION option and are installed from that file instead of being downloaded again.
Procedure
C:\Ray\RAYSWInstaller\packages\ on the representative PC (Server).Local · vVERSION appears in that SW's version picker, select it and save.Rules — follow these or the file will not be picked up
| Item | Rule |
|---|---|
| Location | Only the top level of packages\ is scanned. Files inside subfolders are ignored (subfolders are the download-cache area) |
| Extension | Only .exe, .msi, .zip. .exe/.msi run directly; a .zip is extracted and its inner Setup.exe is run |
| File name | The name must contain a dotted version for the version to be recognised (e.g. RAYBridge_2.3.6.6_Setup.exe, RAYFace Smile Design v1.2.6.16-FULL.exe). Without one the file still appears by name, but version comparison/display will not work — a name containing the version is recommended |
| Name matching | The leading part of the file name must match the SW name for the file to attach to that SW. Keeping the original cloud file name is the safest option |
| Where to place | Server (representative PC) only. Clinical PCs neither need nor use these files |
What about fully offline sites? This only removes the installer download. Listing the SW and resolving latest versions still requires internet on the Server. For sites with no internet at all, contact HQ (Platform Development Team). An offline bundle containing the software itself is not currently provided.
http://127.0.0.1:8096/health in another tab; if alive, refresh/clean up tabs.The Client Agent runs on each clinical PC and installs software as instructed by the Server.
ray-client-agent ping --server=http://<ServerIP>:8096ray-client-agent install --server=http://<ServerIP>:8096 → startAfter installation, the Client screen on that PC shows the connected Server address and connection status. If the Server address changes, re-point it with Server IP 변경 (Change Server IP) on this screen.
Give each PC a name you can recognise. Consulting room 2 instead of DESKTOP-4F8K2A means you will not pick the wrong target when deploying.
Installer files the Client pulls from the Server are kept on that PC at:
C:\Ray\RAYSWInstaller\data\client-cache\binaries\<SW>\<version>\<original installer file name>
.incoming.bin; once complete and verified, it is renamed to the original file name.C:\Ray\RAYSWInstaller\jobs.json.uninstall removes only the Windows service. The tray helper (auto-start registry), firewall rule, and data\ / packages\ / install folder remain.A 5D environment ties the hospital's PCs and devices (CT, RAYFace scanner) together into one clinical network so they can exchange data. Without this step, the software on each PC is merely installed — the machines do not know about one another.
At a 5D site a CS engineer has two jobs, in a fixed order.
| Order | What | Where |
|---|---|---|
| ① | Install the software on each PC (including RAYTeams) | This product — site configuration on the Server tab → deploy from Clients |
| ② | Group the PCs/devices and apply settings & licenses | The 5DI Config screen |
You cannot do ② before ①. The 5DI Config screen works by talking to the local service that RAYTeams provides on each PC, so a PC only appears in the list once RAYTeams is installed and running on it.
Why RAYTeams is required: the component that actually applies the 5D configuration and licenses is the local service built into RAYTeams. The CS Console is only the screen that instructs it. The CS Console (browser) calls those local services directly —
localhost:8008for the local PC,http://{ip}:8008for remote ones.
Step 1 — Review the PC list
Opening the screen auto-lists the PCs on the network that are running RAYTeams. Each PC card also shows the devices (serial numbers) attached to that PC.
Step 2 — Assign roles (CT server / RAYFace server)
Select the PCs to group, then assign a role on each PC card.
| Role | Rule |
|---|---|
| CT server | If the site has a CT device, assign exactly one |
| RAYFace server | If the site has a RAYFace device, assign exactly one |
The two roles are independent axes, so depending on the site one PC may hold both roles, or they may be different PCs. If an assignment is missing or more than one PC is assigned, the reason is shown at the top of the screen and you cannot continue.
Step 3 — Group the network
With the target PCs checked, run Group network. On a site that is already configured, the button reads Re-group.
Step 4 — Apply settings & licenses
Pressing Apply settings/license raises a second prompt, "Confirm apply?" (two-step confirmation against mis-clicks). Confirm, and the settings and licenses are applied to each PC.
Step 5 — Reboot
Once applied, each PC must be rebooted for the settings to take effect. The screen shows a reboot notice; skipping this step makes it look as though nothing was applied.
If a PC shows as unreachable — resolve that PC's connectivity/firewall problem first, then Retry. If only some PCs fail, the rest are still applied normally.
The menu is conditional. It appears only when RAYTeams is installed AND its local service is running (i.e. the Console can reach localhost:8008). If RAYTeams is installed but has never been launched, that local service is not up yet, so the menu stays hidden — this is normal, not a bug.
To make it appear:
If it still does not appear after launching RAYTeams and refreshing, the RAYTeams local service is not responding on port 8008 — check that RAYTeams is actually running and that no firewall/other software is blocking the local port.
The legacy 5D Installer is no longer used — support has ended (it can still be run).
The legacy 5D Installer separated ① SW installation from ② 5D configuration / license application. From now on:
Step ② works exactly as it did in the legacy 5D Installer. All features are the same; only manual Client addition is not supported (use the automatic load of PCs on the network).
In short: in a 5D environment, install SW with Ray Unified Installer and apply 5D configuration/licensing in 5DI Config.
Written for use on site, no technical background needed. Check this tab first when something looks wrong.
Server (the designated PC)
Client (treatment PCs)
Network & security (both sides)
ray-client-agent ping --server=http://<ServerIP>:8096 succeed from each clinical PC?C:\Ray\RAYSWInstaller\ been excluded from real-time antivirus scanning? (especially recommended where large SW is deployed)Q. How long does a deployment take?
It varies widely by SW. Small titles take tens of seconds, large ones several minutes. A 4 GB package adds download and unpack time on top. Deploying several titles at once takes the sum of them.
Q. Are SW titles installed in parallel?
No. They install one at a time, in order. The next title starts only after the previous one finishes — this prevents vendor installers from colliding.
Q. Can I deploy during clinic hours?
Not recommended. Target SW that is running will be closed, and some titles may require a reboot. Deploy outside clinic hours.
Q. Does a user have to be logged on to the PC?
Recommended. Installs run on the logged-on user's desktop with administrator rights. With nobody logged on, the install is attempted in the background and results can vary by SW. Deploy with a user logged on for predictable results.
Q. Can I deploy while connected over Remote Desktop (RDP)?
Yes. A remote session is recognised as the target session, so remote administration works as-is.
Q. Does a black command window appear during install?
No. Installs run without showing a window. If a particular SW's own installer is built to show a screen, that SW's screen may appear.
Q. Completion is not shown immediately — did it fail?
No. Completion is reported only after the installer program has fully finished. Files may appear early while the install is still running. For large SW, several minutes of "installing" is normal.
Q. The PC was shut down or rebooted mid-install.
That title may be left half-installed. Deploy to that PC again — re-installing the same title is safe.
Q. Can I re-deploy SW that is already installed?
Yes. Deployment always fetches the full package and re-installs, so re-deploying is also the repair procedure.
Q. Can I install to a single PC only?
Yes. Select just that PC on the Clients screen and deploy.
Q. What happens if a download is interrupted?
The partially downloaded temporary file is kept so the transfer can resume. Only a verified file is renamed to its final name, so an incomplete file is never used for installation. The clinical PC↔Server leg retries every 10 seconds, up to 6 times, resuming from what is already on disk (v1.2.0). If the limit is exceeded that PC's deployment is marked failed — just redeploy to that PC, and it will resume. The Server↔cloud leg retries automatically, up to 3 times.
Q. Is resume (continuing from where it stopped) supported?
Yes, from v1.2.0. It works on the in-clinic leg (clinical PC ↔ Server): after an interruption, the next transfer continues from where it stopped. Short outages are recovered by automatic retry, so in most cases no one has to intervene. However, the leg where the Server downloads from the cloud (internet) cannot resume — the distribution CDN does not support range requests. On sites with unstable internet links we still recommend staging large installers in the packages folder in advance (see the Server tab).
Q. A download has been running for hours — has it failed?
There is no cap on total elapsed time, so a multi-GB download over a slow link is normal. If no data arrives at all, the connection is dropped (20 seconds on the in-clinic leg, 3 minutes on the internet leg). The in-clinic leg then resumes via automatic retry, so a brief "retrying" followed by continued progress is normal.
Q. Can I roll back to a lower version (downgrade)?
The Installer does not compare version order; it runs the installer for exactly the version you specify. However, many vendor installers refuse a downgrade (the installer window appears but the version stays the same). Uninstall the existing version first, then install the target version. Also note the deployment job may still show success in this case, so always verify the actually installed version afterwards.
Q. Is a reboot required after installation?
The Installer never reboots a PC automatically. If an installer reports "reboot required", the Jobs view shows "Success — reboot required" — but many titles never send that signal. The absence of that message does not mean a reboot is unnecessary, so reboot each target PC once after a batch deployment.
Q. Will installation work if the clinical PC account is not an administrator?
Yes. The Agent runs with administrator rights, so installation proceeds even when the logged-on account is a standard user (it falls back to a background install). Some vendor installers need a visible desktop, though, so we recommend having an administrator logged on at least during the deployment window.
Q. A Client shows as offline (stale).
Check that PC's power, network and Agent. If power and network are fine but it stays offline, restart the Agent service on that PC and wait about a minute.
Q. It says complete, but nothing appears in Add/Remove Programs or on the desktop.
Some titles never create a desktop icon and register only in the Start menu (RAYTeams, for example). If it is missing from the Start menu too and will not launch, contact HQ with that PC's Agent log.
Q. The version does not go up.
Check which version is actually installed on that PC first. If it stays the same after re-deploying the latest version, contact HQ with that PC's Agent log.
Q. A job stays "installing" for a long time.
Normal for large SW. If it stays that way for more than 30 minutes, contact HQ with that PC's Agent log.
Q. SW is still listed after deployment.
Refresh the screen first. If it remains, that title's install may not have finished.
Q. I uninstalled the SW, but the Clients list still shows it as installed (green).
Installed-state detection does not read Windows Add/Remove Programs. It reads a designated file belonging to that SW and takes its version. So the entry stays green when:
The display refreshes every 30 seconds, so if it persists past that, it is one of the three above. Check whether files remain in that SW's install folder; if the cause is unclear, send HQ that PC's Agent log, the file listing of the install folder, and whether an Add/Remove Programs entry exists.
Q. Can I tell a hotfix build apart from the official build after installation?
Not when both carry the same version number. Installed-version detection reads the executable's version information, so a hotfix built with the same version looks identical on screen. If you apply a hotfix in the field, keep a separate record of it. (We are working with each SW team on giving hotfixes distinct version numbers, and considering a deployment-history display in the Installer.)
Q. The Server PC's IP changed.
Every Client needs the new address. Re-point the server address on each Client PC. If the IP changes often, use a static IP for the Server PC.
Q. I forgot the console password.
It can be reset on that PC using the reset procedure (HQ-provided script). It cannot be reset remotely.
Q. The link is slow, or I want to bring large installers with me.
Copy the installer files into the top level of C:\Ray\RAYSWInstaller\packages\ on the representative PC beforehand. After a refresh they appear in the version picker as Local · vVERSION and are not downloaded again. See "Staging installers in advance" on the Server tab for the rules.
Q. The clinic has no internet at all.
The approach above only removes the installer download. Listing the SW and resolving latest versions still requires internet on the representative PC, so contact HQ for a fully offline site. An offline bundle containing the software itself is not currently provided.
Q. I want to install SW that is not in the list.
It cannot be added on site. The managed SW list is decided by HQ — raise the request with HQ.
Q. I set the wrong country.
Change it on the settings screen, then confirm the SW list and versions switched to the new baseline.
Q. Can Server and Client be installed on the same PC?
No. They cannot coexist on one PC. To install SW on the Server PC itself, use its own entry on the Clients screen.
Q. Does the Agent update itself?
Yes. Both Server and Client update automatically. Allow up to about an hour for it to take effect.
Q. What do I need to open on the firewall?
On the Server (designated PC): inbound TCP 8096 and outbound HTTPS 443. Clinical PCs need no inbound rule for the Agent — only outbound 8096 to the Server. This covers the Unified Installer's own traffic; firewall exceptions required by the managed SW are separate — check that SW's configuration guidance. The 8096 rule is added automatically when the Server is installed, but hospital security policy can override it, so verify. The list of cloud addresses to allow is on the Overview tab under "Network, firewall & antivirus pre-checks".
Q. Do I need to add antivirus exclusions?
Official release Agents are code-signed, so usually not. On sites handling large SW, however, we recommend excluding C:\Ray\RAYSWInstaller\ (especially packages\) from real-time scanning — a scanner holding an installer file open can make installs slow or fail.
Q. Where are downloaded installer files stored?
On the Server, in C:\Ray\RAYSWInstaller\packages\ under their original file names; on clinical PCs, in C:\Ray\RAYSWInstaller\data\client-cache\binaries\<SW>\<version>\. You may delete these to free disk space — they will be downloaded again on the next deployment.
Accurate material makes diagnosis dramatically faster.
C:\Ray\RAYSWInstaller\logs\ on that PC, the file for that dateC:\Ray\RAYSWInstaller\packages\index.jsonThe log file matters most. It records when each install started, when it ended and what the result was, so the cause can be narrowed down without guesswork.