Getting Started
Evo Prerequisites & Supported Operating Systems
This knowledge base article outlines the minimum system requirements, supported operating systems, and network prerequisites required to successfully deploy and operate Evo across Windows, macOS, and on-premises Active Directory environments. It is intended to help administrators validate compatibility before installation, reduce deployment issues, and ensure Evo functions as designed. Windows:
- Windows Server 2016 or above
- Windows Desktop 10 or above
- Intel 64-bit Chipset architecture
- ARM 64-bit Chipset architecture
Not compatible with Azure Virtual Desktop machines using MFA
Microsoft Azure Virtual Desktops will create a login loop when Evo is installed and you may also experience black screens. This has been tested with our Evo Agent to the same effect. This is also unsupported by other vendors such as Duo. This is a limitation from Microsoft in their support of Azure Virtual Desktops.
Mac:
- macOS 26.x - Tahoe
- macOS 14.x - Sonoma
- macOS 13.x - Ventura
Other Windows requirements
- Windows 10 or above is required.
- Access to Windows Login Prompt (UAC) on the machine.
- .NET Desktop v9.0.17 Runtime - Download Link
- NOTE: For Azure or Domain joined environments, the device MUST be joined to the domain.
Domain Controller (for On-Prem Only)
- The Evo LDAP agent should be installed on the primary Domain Controller
- Server must be 2016 or above
- Requires .NET framework 4.7.2 or higher
- All users have been created under the Active Directory.
- All users have a unique email address, specific to their user and configured on the General tab.
- All users are a member of a group to be synced.
Evo supports only operating systems that are actively supported by the original manufacturer and receiving current security updates. Any operating system that has reached end of support and is no longer maintained by the vendor is considered unsupported by Evo and is not eligible for troubleshooting, remediation, or ongoing support.
When installing an Evo LDAP Agent or the Evo Agent, the following considerations should be made. (Evo Agents only require outbound connectivity via the listed ports)
Whitelist URLs for Firewall
URL | Port |
ifconfig.me | 443 (LDAP and Credential Provider) |
api.evosecurity.com | 443 (LDAP and Credential Provider) |
sync-api.evosecurity.com | 443 (LDAP Only) |
a3k8pqjo2tpsr9-ats.iot.us-east-1.amazonaws.com | 8883 (LDAP Only) |
beacon-api.evosecurity.com | 443 (LDAP and Credential Provider) |
time.google.com | 123 (LDAP and Credential Provider) |
Whitelist IP Addresses for Firewall
3.17.228.65
3.20.248.76
3.129.178.76
Whitelist Domain for Network and Email
URL | Description |
*.evosecurity.com | Secured with TLS 1.2/1.3 (HTTPS); if you are on a network with SSL inspection or decryption, you might need to bypass decryption for the evosecurity.com CNAME of your instance. |
Whitelist folders and files for Endpoint Protection
Exclusions for Anti Virus ( AV ) & or Endpoint Detection and Response ( EDR )
Evo Credential Provider Whitelist
Evo Agent C:\Program Files\EvoSecurity\EvoAgent\AgentRequestViewer.exe C:\Program Files\EvoSecurity\EvoAgent\CredProAgentNotifier.exe C:\Program Files\EvoSecurity\EvoAgent\EvoAgentTray.exe C:\Program Files\EvoSecurity\EvoAgent\EvoConsentUI.exe C:\Program Files\EvoSecurity\EvoAgent\EvoSecureLoginAgent.exe C:\Program Files\EvoSecurity\EvoAgent\EvoSettingsEditor.exe C:\Program Files\EvoSecurity\EvoAgent\EvoUpdater.exe C:\Program Files\EvoSecurity\EvoAgent\MSIExecProxy.exe C:\Program Files\EvoSecurity\EvoAgent\UACExtenderUI.exe
C:\Program Files\EvoSecurity\EvoAgent\EvoCredProvider.dll C:\Program Files\EvoSecurity\EvoAgent\CredProAgentHelper.dll C:\Program Files\EvoSecurity\EvoAgent\sqlite3.dll
Evo Agent x64 C:\Program Files\EvoSecurity\EvoAgent\EvoConsentBridge-x64.exe C:\Program Files\EvoSecurity\EvoAgent\x64\devcon.exe C:\Program Files\EvoSecurity\EvoAgent\x64\EvoFilter-x64.sys C:\Program Files\EvoSecurity\EvoAgent\x64\EvoFilter-x64.inf C:\Program Files\EvoSecurity\EvoAgent\x64\evofilter-x64.cat C:\Windows\System32\drivers\EvoFilter-x64.sys
Evo Agent ARM64 C:\Program Files\EvoSecurity\EvoAgent\EvoConsentBridge-arm64.exe C:\Program Files\EvoSecurity\EvoAgent\arm64\devcon.exe C:\Program Files\EvoSecurity\EvoAgent\arm64\EvoFilter-arm64.sys C:\Program Files\EvoSecurity\EvoAgent\arm64\EvoFilter-arm64.inf C:\Program Files\EvoSecurity\EvoAgent\arm64\evofilter-arm64.cat C:\Windows\System32\drivers\EvoFilter-arm64.sys
Evo LDAP Agent Whitelist
C:\Program Files\EvoSecurity\EvoLDAPSAgent\EvoLDAPSAgent.exe C:\Program Files\EvoSecurity\EvoLDAPSAgent\EvoUpdater.exe C:\Program Files\EvoSecurity\EvoLDAPSAgent\LDAPAgentSettings.exe