--- title: "MFA Client .MSI Installation" slug: "mfa-client-msi-installation" updated: 2025-10-29T19:49:19Z published: 2025-10-29T19:49:19Z canonical: "mfa.rapididentity.com/mfa-client-msi-installation" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://mfa.rapididentity.com/llms.txt > Use this file to discover all available pages before exploring further. # MFA Client .MSI Installation The RapidIdentity MFA Client can be deployed silently to multiple workstations at once using the Microsoft™ Installer (MSI) package file format. The MFA client MSI is a generic installer that is not customized to any specific MFA environment. This generic format **does not** write to the client's registry path, `HKLM\Software\Foray`, which is required for clients to synchronize with the MFA server. There are two recommended methods to add the SyncService URL to the MFA clients' registry to complete an MSI deployment, without editing the MSI file directly. 🔍 Looking For A Particular Version? Visit our [Release Notes & Downloads section](/v1/docs/releasenotes-and-downloads) to find the client version you need. If the version you are looking for is not available, then it is no longer supported. ## Method 1 - Group Policy You can push the ServiceURL registry value through Group Policy to quickly update your MFA clients. Make sure that your GPO pushes to `HKLM\Software\Foray`: - String value named: ServiceURL - Value matches the service sync URL format: ``` http[s]://serverName/oneService/SyncService.asmx ``` **Be sure to properly set your URL to HTTP or HTTPS without the [brackets]* --- ## Method 2 - Manually 1. Open the Registry Editor. 2. Navigate to `HKLM\Software\Foray`. 3. Under Foray, *right-click > New > String Value*. ![serviceURL-create.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/serviceURL-create.png) 4. Name the new registry value "ServiceURL". 5. Update ServiceURL's value to match the service sync URL format: ``` http[s]://serverName/oneService/SyncService.asmx ``` **Be sure to properly set your URL to HTTP or HTTPS without the [brackets]* ![serviceURL.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/serviceURL.png) 6. Perform a server sync by right-clicking the Identity Automation logo in the app tray. ![msi-manual-sync.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/msi-manual-sync.png) Alternatively, you can use the following command in the command prompt: ``` cd C:\Program Files\2FA\ONE\Client & RIClient.exe /sync ```