RAY Unified Installer — CS Engineer Manual

Audience: CS engineers (installation & operations) — primary: HQ CS, secondary: overseas subsidiary / dealer CS · Applies to: v1.2.0 and later · Last updated: 2026-10-02

Use the tabs above to jump straight to what you need: Overview (background & reference), Server (set up and run the Server Agent), Client (Client Agent & clinical-PC issues), 5DI (5D special environment).

Overview & Background

Why this product exists

Previously, each PC in a hospital connected to the cloud individually to update its software. This caused version mismatches, compatibility problems, and wasted time/bandwidth when many PCs installed at once.

RAY Unified Installer solves this by having a single Application Server inside the hospital centrally manage the SW installation files, while the Application Client PCs receive and install/update software from that Server.

The users are CS engineers — this is not operated by hospital end-users. The Agent runs as a background service; the CS engineer manages it through a browser (CS Console).

Core policies — the design premises

These are invariant premises. If a field requirement conflicts with them, do not change things on your own — contact HQ (Platform Development Team).

PolicyContentNote
OS scopeWindows 10+, both 32/64-bitmacOS/Linux not supported
Admin-privileged residencyThe Agent resides as a Windows service with admin rightsCS approves the UAC elevation at first install
Cloud is separateThe Agent only passes the country code + parses responses; it does not build the cloud catalogA missing SW is often a cloud-registration matter, not an Agent bug
UI = CS Console (Web)Access via browser to localhostNo separate installed GUI
SecurityIntra-hospital network only / SHA-256 for SW / fixed password for consoleNo mutual auth between Server↔Client
Manual server swapNo automatic failoverOn Server failure, CS manually swaps + re-points Clients
CoexistenceCoexists with each SW's own auto-update—
Agent self-updateBoth Server/Client update automaticallyServer via internet, Client via Server

Architecture at a glance

[Cloud]  ←(internet, Server only)
      │
[Application Server + Server Agent]   ← managed by CS via CS Console
      │ (intra-hospital LAN only)
      ├─[Client PC + Client Agent] ─ installs clinical SW
      ├─[Client PC + Client Agent]
      └─ ...

Managed software

Which software is managed is defined by the product, while each SW's version and installer file are looked up individually in the cloud (RDC — RAYTeams Developer Center). In other words, "what we manage" is an HQ decision and "what its latest version is" comes from the cloud. You therefore cannot add or remove entries in the field; conversely, an SW on the list may show no version if nothing is published for it in the cloud.

Currently managed SW (as of 2026-08 — subject to change):

SWNotes
RAYTeamsRequired — the common baseline for every PC. Shown at the top of the list and cannot be excluded
SMARTDentSMARTDent 3D ships inside the SMARTDent installer, so it is not a separate entry
RAYBridge
RAYFacePrerequisite for RAYFace Smile Design / Ortho Simulator
RAYFace Smile DesignDepends on RAYFace — selecting it auto-selects RAYFace
RAYFace Ortho SimulatorDepends on RAYFace — selecting it auto-selects RAYFace
RAYFusion
RAYDENT Studio
RAYDENT Splint
RAYDENT Converter

RAYServer and the RAYScan series are currently not managed by this product (HQ decision). They are installed together with RAYScan and do not appear in this product's catalog, site configuration, or deployment lists.

Selection rules: RAYTeams is shown in the list and is always included (it cannot be unchecked or set to "do not install"). Where a dependency exists, the prerequisite SW is auto-selected.

Software catalog / selection in CS Console
Software catalog / selection in CS Console

Catalog vs. Site configuration — the catalog is the full list of installable SW in the cloud; the site configuration is the subset of SW/versions this specific hospital will actually use. All subsequent Client deployments are based on the site configuration.

Components & standard values

ItemValue
Standard install pathC:\Ray\RAYSWInstaller\ (subfolders packages\, logs\, data\)
CS Console URLhttp://127.0.0.1:8096/cs/ (health: http://127.0.0.1:8096/health)
Windows service namesray-server-agent / ray-client-agent
Install executablesray-server-agent.exe / ray-client-agent.exe
Deployment setupRAY-Unified-Installer-server-setup.exe / RAY-Unified-Installer-client-setup.exe (double-click → auto-installs to standard path)
Downloaded installers (Server)C:\Ray\RAYSWInstaller\packages\ — kept flat, under the original file name
Downloaded installers (Client)C:\Ray\RAYSWInstaller\data\client-cache\binaries\<SW>\<version>\
Progress fileC:\Ray\RAYSWInstaller\jobs.json (which SW is downloading, and how far)

These paths are anchored on where the Agent executable lives. If you installed somewhere other than the standard path, the same structure is created under that folder.

Agent self-update (automatic)

Recommended settings (best practices)

  1. Fix the Server to one wired, always-on PC — it is a single point of failure.
  2. Set the country code explicitly at setup — do not rely on IP/timezone auto-estimation.
  3. Use a distinct fixed password per site, stored safely.
  4. Deploy outside clinic hours — force-close and reboot may occur.

Logs

Security policy

ItemPolicy
NetworkIntra-hospital LAN only. WAN is Server↔cloud only
Server↔Client authNone
SW integritySHA-256 (mandatory when provided) + code signing on official releases
Console accessFixed password (hash-stored), localhost-only
LogsNo plaintext logging of sensitive data

Network, firewall & antivirus pre-checks

Firewall and antivirus policies differ from hospital to hospital. Verifying the items below before your site visit prevents most installation failures.

Ports

TargetDirectionPortNotes
Server (representative PC)InboundTCP 8096Clinical PCs connect here. The firewall rule is added automatically during installation; allow it manually if that fails
Server (representative PC)OutboundTCP 443 (HTTPS)Downloads the SW list and installer files from the cloud
Client (clinical PC)InboundNot required for the AgentThe Agent only listens inside its own PC. Exceptions required by the managed SW itself are out of scope for this table (see the note below)
Client (clinical PC)OutboundTCP 8096 → ServerOne-way: the Client connects to the Server
Client (clinical PC)InternetNot requiredClients never contact the cloud directly

Outbound addresses the Server needs:
api-rsp-application.rayteams.com · api-teams-info.rayteams.com · common.rayplatform.com · r2.rayplatform.com · ray-data.s3.ap-northeast-2.amazonaws.com

⚠️ This table covers only the Unified Installer's own traffic (Server/Client Agent).

The managed SW has its own communication requirements, so a firewall exception for that program may be needed separately — especially when it is installed in a configuration where other PCs connect to it. Whether and in what form it is needed depends on the SW and the site configuration, so check that SW's installation/configuration guidance as well. Configuring a site from this table alone as "clinical PCs need no inbound rules at all" can cause problems on the SW side.

Firewall exceptions for the managed SW are registered by each SW's own installer (decided 2026-08-28). Unified Installer only registers its own traffic (Server inbound 8096). If a given SW's exception is not registered, contact that SW's development team.

A PC using 5DI configuration needs the RAYTeams local service (port 8008) running on that PC. This is PC-internal traffic, so no firewall change is required.

Account privileges

Antivirus

Appendix

CLI quick reference

ray-server-agent install | uninstall | start | stop | version | setpw | ping
ray-client-agent  install --server=http://<ServerIP>:8096 | uninstall | start | stop | version | ping

Country code — ISO 3166-1 alpha-2 (e.g., KR, US). If unset, auto-estimated: saved setting → IP → timezone → KR.

Glossary

FAQ

Server

The Server Agent runs on one representative PC and is the hub you configure and operate from.

1. Install the Server Agent

  1. On the representative PC, run RAY-Unified-Installer-server-setup.exe (or ray-server-agent install) → start.
  2. Confirm residency at http://127.0.0.1:8096/health.

2. Initial CS Console setup

  1. Open http://127.0.0.1:8096/cs/ in a browser.
  2. Set a fixed password (8+ characters) — used for console access thereafter (stored as a hash).
  3. Set the country code — the basis for the per-country latest-version policy. If unset, auto-estimated: saved setting → IP → timezone → KR.
CS Console settings — password / country / options
CS Console settings — password / country / options

3. Site configuration — the key step

  1. In the SW tab, review each SW's Cloud version / Local version.
  2. Select the SW and versions this hospital will use — RAYTeams appears at the top of the list marked "Required" and cannot be excluded (if you leave its version unset, the latest cloud version is applied).
  3. Save → done. The selection is stored on the Server and becomes the basis for all Client deployments.
Site configuration editor
Site configuration editor

The "Current version" column — this column shows the version pinned in the site configuration, not the version installed on that PC. An SW with no version pinned yet shows "Not configured" (regardless of whether it is installed).

How installation follows — saving the site configuration only decides what to use; the actual install path differs by target PC.

TargetHow
The representative PC (Server) itselfThe install link on each SW in the SW list, or select the self entry in the Clients view and deploy
Clinical PCs (Clients)Select the target PCs in the Clients view and deploy

So the order is pick versions in the site configuration → save → (install from the SW list on the representative PC / deploy from Clients to clinical PCs). RAYTeams is no exception: being in the site configuration does not install it — you still have to run a deployment.

4. Deploy to Clients

  1. In the Clients tab, select the target Client(s).
  2. The SW in the site configuration is sent in sequence → the Client Agent performs a silent install.
  3. Any running target app is force-closed (with warning) before install. The Server itself (self) can be an install target.
Clients tab — targets and deployment
Clients tab — targets and deployment

5. Deployment jobs & monitoring

Track deployment progress in the Jobs view.

Deployment jobs
Deployment jobs

What you can see

ViewWhat it shows
JobsPer deployment job: N targets · success / failed / pending / in progress, per-PC status, and Server→Client transfer volume (GB)
ClientsPer PC: installed SW and versions, colour-coded (matches configuration / differs / not in configuration), plus connected vs offline counts

Jobs aggregation is per deployment job. To see how far the whole site has progressed (all PCs × all SW), use the SW deployment status view (added in v1.2.0). You can read the coverage rate without opening each PC one by one.

SW rollout status — site-wide coverage

Installation progress percentages are not shown. Vendor installers report progress inconsistently, which produced unreliable numbers, so status is shown only as pending / in progress / success / failed.

6. SW install/update model

If a download fails

Rolling back to a lower version (downgrade)

Reboot after installation

7. File deployment (added in v1.2.0)

Register the environment files from a reference PC on the server, then push them to the PCs you select in one go. This replaces the work of visiting each PC to copy files by hand.

This feature does not know anything about the SW. It moves the files you specify to the location you specify. Which parts of a given SW's settings are synchronised to a server and which are stored per PC is that SW's own concern, and this feature does not take part in it. It therefore does not perform "settings backup/restore" or "version compatibility" handling.

Procedure

  1. In the CS Console File deployment menu, register a source folder. Its contents are stored on the server.
  2. Select the target PC(s) and run the deployment.
  3. Results are shown per PC.

File deployment screen

Things to know

ItemDetail
When it runsOnly when an operator runs it. There is no automatic synchronisation
RollbackOn the target PC the existing files are preserved before replacement. If it fails, they are restored
Separate resultsInstallation results and file-deployment results are shown separately, so you can tell apart a PC where the install succeeded but only the file deployment failed
Blocked pathsDrive roots (C:\), system folders (C:\Windows, etc.) and the Agent's own install path are blocked for safety
Running appsIf an app is holding the target files, that PC is skipped. Force-closing is applied only to SW agreed in advance

Close the apps on the target PCs before deploying and the run finishes in one pass, with no skipped PCs.

8. Per-PC SW install options (added in v1.2.0)

Specify per PC the cases where the same SW has to be installed differently on different machines (server configuration, 3D viewer, and so on).

Procedure

  1. Open the target PC on the Clients screen.
  2. Select the additional install options per SW and save.
  3. From the next installation onward, those options apply to that PC only.

Per-PC SW install options

Things to know

ItemDetail
PersistenceOnce set, the options keep applying to later installations. There is no need to pick them each time
ScopeOnly PCs that have options set are affected. PCs without any setting behave exactly as before
VerificationThe last applied result is shown on screen. If an installation fails, the applied record is cleared and it shows as "pending"

If the option list does not appear — the list comes from the SW catalogue. It means the options for that SW are not registered in the catalogue yet; once they are, they appear automatically without reinstalling the Agent. Contact HQ (Platform Development Team).

9. Staging installers in advance (the packages folder)

When the site's internet link is slow, or you want to bring large installers with you, drop the installer files into the Server's packages folder. They then appear in the version picker as a Local · vVERSION option and are installed from that file instead of being downloaded again.

Procedure

  1. Open C:\Ray\RAYSWInstaller\packages\ on the representative PC (Server).
  2. Copy the installer files directly into the top level of that folder.
  3. Press Refresh in the CS Console site-configuration (or setup wizard) screen.
  4. When Local · vVERSION appears in that SW's version picker, select it and save.

Rules — follow these or the file will not be picked up

ItemRule
LocationOnly the top level of packages\ is scanned. Files inside subfolders are ignored (subfolders are the download-cache area)
ExtensionOnly .exe, .msi, .zip. .exe/.msi run directly; a .zip is extracted and its inner Setup.exe is run
File nameThe name must contain a dotted version for the version to be recognised (e.g. RAYBridge_2.3.6.6_Setup.exe, RAYFace Smile Design v1.2.6.16-FULL.exe). Without one the file still appears by name, but version comparison/display will not work — a name containing the version is recommended
Name matchingThe leading part of the file name must match the SW name for the file to attach to that SW. Keeping the original cloud file name is the safest option
Where to placeServer (representative PC) only. Clinical PCs neither need nor use these files

What about fully offline sites? This only removes the installer download. Listing the SW and resolving latest versions still requires internet on the Server. For sites with no internet at all, contact HQ (Platform Development Team). An offline bundle containing the software itself is not currently provided.

10. Existing environment (hospital with individual SW already installed)

11. Server troubleshooting

Client

The Client Agent runs on each clinical PC and installs software as instructed by the Server.

1. Install the Client Agent

  1. Verify connectivity: ray-client-agent ping --server=http://<ServerIP>:8096
  2. Install: ray-client-agent install --server=http://<ServerIP>:8096 → start
  3. The Client then polls the Server every 30 seconds.

After installation, the Client screen on that PC shows the connected Server address and connection status. If the Server address changes, re-point it with Server IP 변경 (Change Server IP) on this screen.

Client Agent screen — connected Server and connection status
Client Agent screen — connected Server and connection status

1-1. Giving a PC an alias (added in v1.2.0)

Give each PC a name you can recognise. Consulting room 2 instead of DESKTOP-4F8K2A means you will not pick the wrong target when deploying.

2. Where downloaded installers are stored

Installer files the Client pulls from the Server are kept on that PC at:

C:\Ray\RAYSWInstaller\data\client-cache\binaries\<SW>\<version>\<original installer file name>

3. Full removal

5DI (5D special environment)

New to 5D? What this work actually does

A 5D environment ties the hospital's PCs and devices (CT, RAYFace scanner) together into one clinical network so they can exchange data. Without this step, the software on each PC is merely installed — the machines do not know about one another.

At a 5D site a CS engineer has two jobs, in a fixed order.

OrderWhatWhere
①Install the software on each PC (including RAYTeams)This product — site configuration on the Server tab → deploy from Clients
②Group the PCs/devices and apply settings & licensesThe 5DI Config screen

You cannot do ② before ①. The 5DI Config screen works by talking to the local service that RAYTeams provides on each PC, so a PC only appears in the list once RAYTeams is installed and running on it.

Why RAYTeams is required: the component that actually applies the 5D configuration and licenses is the local service built into RAYTeams. The CS Console is only the screen that instructs it. The CS Console (browser) calls those local services directly — localhost:8008 for the local PC, http://{ip}:8008 for remote ones.

Step by step

5DI configuration
5DI configuration

Step 1 — Review the PC list

Opening the screen auto-lists the PCs on the network that are running RAYTeams. Each PC card also shows the devices (serial numbers) attached to that PC.

Step 2 — Assign roles (CT server / RAYFace server)

Select the PCs to group, then assign a role on each PC card.

RoleRule
CT serverIf the site has a CT device, assign exactly one
RAYFace serverIf the site has a RAYFace device, assign exactly one

The two roles are independent axes, so depending on the site one PC may hold both roles, or they may be different PCs. If an assignment is missing or more than one PC is assigned, the reason is shown at the top of the screen and you cannot continue.

Step 3 — Group the network

With the target PCs checked, run Group network. On a site that is already configured, the button reads Re-group.

Step 4 — Apply settings & licenses

Pressing Apply settings/license raises a second prompt, "Confirm apply?" (two-step confirmation against mis-clicks). Confirm, and the settings and licenses are applied to each PC.

Step 5 — Reboot

Once applied, each PC must be rebooted for the settings to take effect. The screen shows a reboot notice; skipping this step makes it look as though nothing was applied.

If a PC shows as unreachable — resolve that PC's connectivity/firewall problem first, then Retry. If only some PCs fail, the rest are still applied normally.

The "5DI Config" menu is not showing

The menu is conditional. It appears only when RAYTeams is installed AND its local service is running (i.e. the Console can reach localhost:8008). If RAYTeams is installed but has never been launched, that local service is not up yet, so the menu stays hidden — this is normal, not a bug.

To make it appear:

  1. Launch RAYTeams once on that PC (this starts its local service on port 8008).
  2. Refresh the CS Console in the browser. The "5DI Config" menu now appears.

If it still does not appear after launching RAYTeams and refreshing, the RAYTeams local service is not responding on port 8008 — check that RAYTeams is actually running and that no firewall/other software is blocking the local port.

For existing 5D Installer users

The legacy 5D Installer is no longer used — support has ended (it can still be run).

The legacy 5D Installer separated ① SW installation from ② 5D configuration / license application. From now on:

Step ② works exactly as it did in the legacy 5D Installer. All features are the same; only manual Client addition is not supported (use the automatic load of PCs on the network).

In short: in a 5D environment, install SW with Ray Unified Installer and apply 5D configuration/licensing in 5DI Config.

FAQ & Field Guide

Written for use on site, no technical background needed. Check this tab first when something looks wrong.

Pre-deployment checklist

Server (the designated PC)

Client (treatment PCs)

Network & security (both sides)

Recommended order on deployment day

  1. Pilot on a few PCs — deploy to 1–2 PCs first and confirm Add/Remove registration and launch
  2. If clean, roll out to all PCs
  3. Confirm completion for every PC on the Jobs screen
  4. Actually launch one or two key SW titles (install complete ≠ verified working)
  5. Re-deploy only to the PCs that failed
  6. Reboot each target PC once — some titles only work correctly after a reboot, even when no reboot prompt appeared

FAQ — installing and deploying

Q. How long does a deployment take?
It varies widely by SW. Small titles take tens of seconds, large ones several minutes. A 4 GB package adds download and unpack time on top. Deploying several titles at once takes the sum of them.

Q. Are SW titles installed in parallel?
No. They install one at a time, in order. The next title starts only after the previous one finishes — this prevents vendor installers from colliding.

Q. Can I deploy during clinic hours?
Not recommended. Target SW that is running will be closed, and some titles may require a reboot. Deploy outside clinic hours.

Q. Does a user have to be logged on to the PC?
Recommended. Installs run on the logged-on user's desktop with administrator rights. With nobody logged on, the install is attempted in the background and results can vary by SW. Deploy with a user logged on for predictable results.

Q. Can I deploy while connected over Remote Desktop (RDP)?
Yes. A remote session is recognised as the target session, so remote administration works as-is.

Q. Does a black command window appear during install?
No. Installs run without showing a window. If a particular SW's own installer is built to show a screen, that SW's screen may appear.

Q. Completion is not shown immediately — did it fail?
No. Completion is reported only after the installer program has fully finished. Files may appear early while the install is still running. For large SW, several minutes of "installing" is normal.

Q. The PC was shut down or rebooted mid-install.
That title may be left half-installed. Deploy to that PC again — re-installing the same title is safe.

Q. Can I re-deploy SW that is already installed?
Yes. Deployment always fetches the full package and re-installs, so re-deploying is also the repair procedure.

Q. Can I install to a single PC only?
Yes. Select just that PC on the Clients screen and deploy.

Q. What happens if a download is interrupted?
The partially downloaded temporary file is kept so the transfer can resume. Only a verified file is renamed to its final name, so an incomplete file is never used for installation. The clinical PC↔Server leg retries every 10 seconds, up to 6 times, resuming from what is already on disk (v1.2.0). If the limit is exceeded that PC's deployment is marked failed — just redeploy to that PC, and it will resume. The Server↔cloud leg retries automatically, up to 3 times.

Q. Is resume (continuing from where it stopped) supported?
Yes, from v1.2.0. It works on the in-clinic leg (clinical PC ↔ Server): after an interruption, the next transfer continues from where it stopped. Short outages are recovered by automatic retry, so in most cases no one has to intervene. However, the leg where the Server downloads from the cloud (internet) cannot resume — the distribution CDN does not support range requests. On sites with unstable internet links we still recommend staging large installers in the packages folder in advance (see the Server tab).

Q. A download has been running for hours — has it failed?
There is no cap on total elapsed time, so a multi-GB download over a slow link is normal. If no data arrives at all, the connection is dropped (20 seconds on the in-clinic leg, 3 minutes on the internet leg). The in-clinic leg then resumes via automatic retry, so a brief "retrying" followed by continued progress is normal.

Q. Can I roll back to a lower version (downgrade)?
The Installer does not compare version order; it runs the installer for exactly the version you specify. However, many vendor installers refuse a downgrade (the installer window appears but the version stays the same). Uninstall the existing version first, then install the target version. Also note the deployment job may still show success in this case, so always verify the actually installed version afterwards.

Q. Is a reboot required after installation?
The Installer never reboots a PC automatically. If an installer reports "reboot required", the Jobs view shows "Success — reboot required" — but many titles never send that signal. The absence of that message does not mean a reboot is unnecessary, so reboot each target PC once after a batch deployment.

Q. Will installation work if the clinical PC account is not an administrator?
Yes. The Agent runs with administrator rights, so installation proceeds even when the logged-on account is a standard user (it falls back to a background install). Some vendor installers need a visible desktop, though, so we recommend having an administrator logged on at least during the deployment window.

FAQ — status and display

Q. A Client shows as offline (stale).
Check that PC's power, network and Agent. If power and network are fine but it stays offline, restart the Agent service on that PC and wait about a minute.

Q. It says complete, but nothing appears in Add/Remove Programs or on the desktop.
Some titles never create a desktop icon and register only in the Start menu (RAYTeams, for example). If it is missing from the Start menu too and will not launch, contact HQ with that PC's Agent log.

Q. The version does not go up.
Check which version is actually installed on that PC first. If it stays the same after re-deploying the latest version, contact HQ with that PC's Agent log.

Q. A job stays "installing" for a long time.
Normal for large SW. If it stays that way for more than 30 minutes, contact HQ with that PC's Agent log.

Q. SW is still listed after deployment.
Refresh the screen first. If it remains, that title's install may not have finished.

Q. I uninstalled the SW, but the Clients list still shows it as installed (green).
Installed-state detection does not read Windows Add/Remove Programs. It reads a designated file belonging to that SW and takes its version. So the entry stays green when:

  1. the uninstaller left that file behind,
  2. another copy is installed elsewhere (for example a manual installation predating the Installer), or
  3. a hotfix build carries the same version number as the official build.

The display refreshes every 30 seconds, so if it persists past that, it is one of the three above. Check whether files remain in that SW's install folder; if the cause is unclear, send HQ that PC's Agent log, the file listing of the install folder, and whether an Add/Remove Programs entry exists.

Q. Can I tell a hotfix build apart from the official build after installation?
Not when both carry the same version number. Installed-version detection reads the executable's version information, so a hotfix built with the same version looks identical on screen. If you apply a hotfix in the field, keep a separate record of it. (We are working with each SW team on giving hotfixes distinct version numbers, and considering a deployment-history display in the Installer.)

FAQ — environment and settings

Q. The Server PC's IP changed.
Every Client needs the new address. Re-point the server address on each Client PC. If the IP changes often, use a static IP for the Server PC.

Q. I forgot the console password.
It can be reset on that PC using the reset procedure (HQ-provided script). It cannot be reset remotely.

Q. The link is slow, or I want to bring large installers with me.
Copy the installer files into the top level of C:\Ray\RAYSWInstaller\packages\ on the representative PC beforehand. After a refresh they appear in the version picker as Local · vVERSION and are not downloaded again. See "Staging installers in advance" on the Server tab for the rules.

Q. The clinic has no internet at all.
The approach above only removes the installer download. Listing the SW and resolving latest versions still requires internet on the representative PC, so contact HQ for a fully offline site. An offline bundle containing the software itself is not currently provided.

Q. I want to install SW that is not in the list.
It cannot be added on site. The managed SW list is decided by HQ — raise the request with HQ.

Q. I set the wrong country.
Change it on the settings screen, then confirm the SW list and versions switched to the new baseline.

Q. Can Server and Client be installed on the same PC?
No. They cannot coexist on one PC. To install SW on the Server PC itself, use its own entry on the Clients screen.

Q. Does the Agent update itself?
Yes. Both Server and Client update automatically. Allow up to about an hour for it to take effect.

Q. What do I need to open on the firewall?
On the Server (designated PC): inbound TCP 8096 and outbound HTTPS 443. Clinical PCs need no inbound rule for the Agent — only outbound 8096 to the Server. This covers the Unified Installer's own traffic; firewall exceptions required by the managed SW are separate — check that SW's configuration guidance. The 8096 rule is added automatically when the Server is installed, but hospital security policy can override it, so verify. The list of cloud addresses to allow is on the Overview tab under "Network, firewall & antivirus pre-checks".

Q. Do I need to add antivirus exclusions?
Official release Agents are code-signed, so usually not. On sites handling large SW, however, we recommend excluding C:\Ray\RAYSWInstaller\ (especially packages\) from real-time scanning — a scanner holding an installer file open can make installs slow or fail.

Q. Where are downloaded installer files stored?
On the Server, in C:\Ray\RAYSWInstaller\packages\ under their original file names; on clinical PCs, in C:\Ray\RAYSWInstaller\data\client-cache\binaries\<SW>\<version>\. You may delete these to free disk space — they will be downloaded again on the next deployment.

Send this when contacting HQ

Accurate material makes diagnosis dramatically faster.

  1. Symptom and time (e.g. "Aug 7 around 14:20, deployed RAYFace to PC A, shown complete but will not launch")
  2. Target PC, SW and version (a Clients screen capture is enough)
  3. Agent log file — from C:\Ray\RAYSWInstaller\logs\ on that PC, the file for that date
  4. CS Console captures — the Jobs and Clients screens
  5. What you already tried (re-deploy, reboot, …)
  6. When the displayed status disagrees with reality — the file listing left in that SW's install folder, whether an Add/Remove Programs entry exists (and the version it shows), and the Server's C:\Ray\RAYSWInstaller\packages\index.json

The log file matters most. It records when each install started, when it ended and what the result was, so the cause can be narrowed down without guesswork.