Install ACC for DEX on Windows

task brazil Updated Oct 22, 2026 4 min read install-acc-for-dex-windows.md
Raw file servicenow.com

Install Agent Client Collector (ACC) on a Windows device so that Digital End-User Experience (DEX) can collect performance data and identify issues.

Before you begin

The ITOM Cloud Services plugin must be installed.

An agent registration key must be created. For instructions, see Create an ACC registration key.

Confirm the following device and network settings before you install the agent:

  • Authentication: Digital End-User Experience uses mutual Transport Layer Security (mTLS) to authenticate devices.
  • Ports and protocols: communication with the ServiceNow cloud occurs over port 443 using mTLS, with specific certificates and proxy settings.
  • Firewalls: outbound HTTPS traffic on TCP port 443 is permitted from every device running an ACC agent to the designated ServiceNow cloud FQDNs or IP ranges.
  • Proxy: if device connectivity to the internet is routed through a proxy network, the proxy must be configured. For details, see Configure ACC to use a proxy for all traffic.
  • User data: the User [sys_user] table is populated so that the CI record in production is assigned with the first and last name of the logged-in user of the device.

For enterprise-wide deployments, contact your Microsoft Intune or Microsoft Configuration Manager application administrator.

Role required: agent_client_collector_admin

Procedure

  1. Retrieve the agent registration key:

    1. Navigate to All > Agent Client Collector > Deployment > Agent Registration Key.
    2. Select the relevant agent registration key.
    3. Copy the registration key value and store it in a place where you can easily retrieve it, when needed.
  2. Retrieve the publicly accessible gateway URL, based on your location:

    • AMER (Americas): itomcnc-prod-gateway-amer.sncapps.service-now.com:443
    • EMEA (Europe): itomcnc-prod-gateway-emea.sncapps.service-now.com:443
    • APAC (Asia Pacific): itomcnc-prod-gateway-apac.sncapps.service-now.com:443
  3. On the Windows server where the agent is installed, enter the following command:

    Shell
    msiexec /i <msi_file_path> /quiet /qn /norestart CONNECT_WITHOUT_MID="true" ACC_CNC="<gateway_endpoint>" REGISTRATION_KEY="<registration_key>" INSTANCE_URL="https://<instance_url>"

    The following table shows the parameter values in the command.

Parameter

Description

CONNECT_WITHOUT_MID

Specify true to enable MID-less Agent Client Collector installation. If you don't specify a value, the regular MID Server WebSocket installation is invoked.

ACC_CNC

Specify a public gateway endpoint for Agent Client Collector.

REGISTRATION_KEY

Active and valid registration key for the agent to communicate with.

INSTANCE_URL

ServiceNow instance that the agent is registered with.

ACC_ALLOW_LIST

Optional string. To disable the allow list, set ACC_ALLOW_LIST=0. By default, the allow list is enabled.Note: Disabling the allow list compromises your system's security and is intended as a temporary measure while you’re updating the allow list. After completing the update, enable the allow list by setting ACC_ALLOW_LIST=1.

ACC_VALIDATE_SIG

Optional string. To disable verification of the installer certification validation, set ACC_VALIDATE_SIG=0. By default, validation is enabled.Note: Disable the certification validation only when using nonstandard signature validation tools.

LOCALUSERNAME

Optional string. Specify SYSTEM to run ACC as a local system account user.Note: If you specify this parameter, you don't need to complete the procedure Run ACC as a local system account user.

4. Start the Agent Client Collector service using the default ServiceNow user role created during this installation.
The default ServiceNow user role has the following privileges:

-   Performance Monitor: Viewing all performance counters in the system.
-   Log on as a service: Starting network services and services that run continuously, even when no one is logged in to the console.
-   Debug program: Monitoring the installed applications and collecting in-depth metrics and remedial actions, such as restart and stop.
  1. To collect DEX metrics, restart the ACC service using one of the following methods:

  2. Restart the Agent Client Collector service.

  3. Verify that the agent registered with your instance and is collecting host data.

    For details, see Verify that an Agent Client Collector agent is registered.

Related topics

Create an ACC registration key

Verify that an Agent Client Collector agent is registered

Uninstall the Agent Client Collector agent from a device

Keywords install acc windowsagent client collector windowsacc for dexinstall agent client collectorcollect dex metrics
Search documentation
Search document titles and file paths on the brazil branch