---
title: "Installing the Infoblox Universal DDI Agent"
canonical: "https://docs.infoblox.com/space/UniversalAssetInsights/1710195646/Installing%20the%20Infoblox%20Universal%20DDI%20Agent"
format: markdown
---
Universal DDI Agent is a lightweight software application that securely integrates Microsoft DNS, DHCP, and Active Directory services with the Infoblox Cloud Platform. The Universal DDI Agent facilitates centralized visibility and management of DDI infrastructure, the discovery of Active Directory objects, and the logging of security events. Before discovering the Active Directory objects using network discovery, it is necessary install the Universal DDI Agent.   

> ⚠️ Do not install the Universal DDI Agent on a domain controller.

## Install RSAT Modules

RSAT (Remote Server Administration Tools) modules are a collection of Windows feature-based tools that allow administrators to remotely manage Windows Server roles, features, and services from a Windows client machine. Instead of signing into a server directly, RSAT enables central and remote administration through MMC consoles, PowerShell cmdlets, and GUI-based management interfaces.

Before downloading and installing the Universal DDI Agent, install the required RSAT Modules. In Windows Server run the following commands on a PowerShell console with elevated permissions:

`Install-WindowsFeature -Name RSAT-AD-PowerShell `  
`Install-WindowsFeature -Name RSAT-DNS-Server `  
`Install-WindowsFeature -Name RSAT-DHCP `

For more information on Remote Server Administration Tools, see Microsoft online documentation at *[Remote Server Administration Tools](https://learn.microsoft.com/en-us/troubleshoot/windows-server/system-management-components/remote-server-administration-tools)*.

## Download the Universal Agent

To download the Universal DDI Agent, do the following:

1. Go to **System > Downloads**.
2. Click **Agents**.
3. Click **Download Agent**.

The Universal DDI Agent is downloaded to your default download folder. 

## Install the Universal Agent

To instal the Infoblox Universal Agent, do the following:

1. Double-click the Infoblox Universal Agent installer. Click **Next**.
2. In the RSAT Installation screen, click **Check Installation**. The installer will check if the required RSAT modules are installed. Click **OK**. Click **Next**.
3. In the **Credentials** screen, specify a **Join Token**. You can create or copy a Join Token from the Infoblox Portal. Go to **System > Administration > Join Tokens** to create a new token or copy an existing token.
4. Click **Activate**. This action establishes communication between the Infoblox Portal and the Infoblox Universal Agent. A message Join Token is valid is shown. Click OK. Click Next.
5. In the **Destination Folder** screen, the path where the Infoblox Universal Agent is installed is shown. Click **Change** to change the location or keep the default path. Click **Next**.
6. The Infoblox Universal Agent is installed. Click **Finish**.

> ℹ️ Use the newer join-token format for the Universal DDI Agent. The agent does not support the older join-token format. The newer join-token format includes a prefix that identifies the endpoint. The agent uses this prefix to determine the appropriate registration URL and successfully register the host with the connect environment. The older token format does not include a prefix or suffix, preventing the agent from identifying the required registration endpoints. As a result, host registration fails when using the older format.
> ℹ️ 
> ℹ️ - **New join-token format:**  
> ℹ️ `ZXhhbXBsZS10b2tlbg.ABCDEFGHIJKLMNOPQRSTUVWXYZ123456.example`

> ✅ Install the RSAT modules and install the Universal DDI Agent on any additional member servers are required.

> ❌ The current Universal DDI Agent supports only one Discovery Job per instance. For example, an agent cannot perform Discovery Jobs for both DNS and DHCP; you must deploy two separate agent instances on different Windows Member servers.