WitnessAI Documentation
List
Start Here
Start Here
Analytics
Analytics
Conversations
Conversations
Users
Users
Alerts
Alerts
Policy
Policy
Administration
Administration
Apps & Resources
Apps & Resources
Release Notes
Release Notes
Administrator Guide
Administrator Guide
Proxy Configuration
Use Proxy to generate proxy auto-configuration (PAC) tokens and download device registration scripts for Witness Anywhere.
Prerequisites
- The Admin role or higher. Your role needs Proxy create permission to see the token form, and Proxy delete permission to see the Actions column.
Concepts
- Witness Anywhere: protects managed devices outside your network. You generate a PAC token here and deploy it with your endpoint management platform.
Generate a PAC token
- Go to Administration → Configuration → Proxy.
- Under Witness Anywhere, enter a Key Name.
- Choose an Expiration Date. The earliest date you can pick is tomorrow.
- Select Generate PAC Token. The button stays disabled until both Key Name and Expiration Date are set.
A successful create shows Token created successfully.
View and manage tokens
The token table has these columns:
Column | What it shows |
Name | Token name. |
Expiration | Expiration date. |
Script | Download a device registration script. |
Actions | Copy the token to the clipboard, or delete it. The column appears when you have Proxy delete permission. |
Delete a token
- In Actions, select Delete.
- Confirm when asked Are you sure you want to delete this token?
A successful delete shows Token deleted successfully.
Download a device registration script
- In the Script column, open the download control.
- In Download Device Registration Script, choose a Platform.
- Crowdstrike (Windows)
- Windows GPO (Windows)
- Intune (Windows)
- Intune (macOS)
- Jamf (macOS)
- JumpCloud (Windows)
- JumpCloud (macOS)
- JumpCloud (Linux)
- Kace (macOS)
- PAC Merge (Windows)
- SentinelOne (Windows)
- Tanium (Windows)
- Unmanaged (Windows/macOS)
- Workspace One (macOS)
- Workspace One (Windows)
- For platforms other than Tanium (Windows) and Unmanaged (Windows/macOS), optionally set Static Domain (Optional); every platform except Tanium (Windows) also offers the STunnel (Optional) toggle.
- Select Download. A successful download shows Script downloaded successfully.
Verify
After generating a PAC token, Token created successfully appears and the token is listed in the table with the name and expiration date you entered.
After deleting a token, Token deleted successfully appears and the token row is removed from the table.
After downloading a device registration script, Script downloaded successfully appears and the script file downloads to your browser.