Skip to content

AFW-132 — Windows client install refused (elevated or SSH session) ​

Area: Install & collector boot · All support codes · Reference table

Why this happened ​

The installer was run from an elevated (Administrator) PowerShell or over SSH. The client is per-user: a scheduled task registered that way gets admin-only ACLs or the wrong session, and every later unelevated repair fails.

Fix ​

Run the install command in a normal, unelevated PowerShell window in the local session of the user who will use this device. MDM pushing the CA separately can pass -NoTrustCa.


If the fix doesn't resolve it, file a support ticket from the console — your workspace's diagnostics snapshot is attached automatically, so this code reaches support with its context.

Kilasec — guardrails and spend control for AI agents.