Before you install MOVEit Automation, ensure that the system meets the hardware and software requirements. For more information, see the current Release Notes.

MySQL database

Remove any local non-MOVEit MySQL versions before you install MOVEit Automation on the server. The MOVEit Automation installation program installs and manages the MySQL database and related MySQL components.

If vulnerability scanners report vulnerabilities in MySQL components or MySQL Connector libraries installed with MOVEit Automation, do not upgrade those components independently of MOVEit Automation. MOVEit Automation is validated with specific component versions, and independently updating MySQL components or drivers can cause compatibility issues. In most cases, remediation requires upgrading MOVEit Automation to a version that includes updated MySQL components. Review the MOVEit Automation Release Notes to determine whether a newer release or service pack addresses the reported vulnerability. If the issue persists on a supported version, contact Progress Technical Support for guidance.

Account requirements

Select the type of account to use for your Windows services to run under. Each account type has specific requirements:
  • Virtual Service Account
    • Created during the MOVEit Automation installation process.
    • Runs the MOVEit services without a dedicated user.
    • The operating system automatically manages the account.
    • The virtual service account is limited to the local machine and cannot be used across multiple machines.
    • To grant a Virtual user access to a remote resource, the MOVEIt server must be granted access. For example, ComputerName$.
    • No password management is required.
    • Windows authentication is not available on SQL Server.
  • Group Managed Service Account (gMSA)
    • Must be set up before installing MOVEit Automation.
    • The gMSA can be used across multiple machines within the domain.
    • Active Directory manages the account.
    • Configuration in Active Directory is required. For example, the MOVEit Automation server must be included in the PrincipalsAllowedToRetrieveManagedPassword list when the user is created.
    • Password management is automatic.
    • After a reboot, when using gMSA accounts, the MOVEit Services are set for a delayed start so that the Microsoft Key Distribution Service is stable before MOVEit attempts to start.
  • Standard Windows Account
    • Must be set up before installing MOVEit Automation.
    • The Windows account can be used locally or across a domain, depending on the account type (local or domain account).
    • System Administrators manage the Windows account.
    • Manual setup and configuration are required, including assigning permissions and roles.
    • Security policies define password complexity and expiration.

Database authentication and installer access (SQL Server)

When installing MOVEit Automation using Microsoft SQL Server with Windows Authentication, the installer creates a dedicated Windows user account named moveit_installer. This account is created only when Windows Authentication is selected as the database authentication type for the MOVEit Automation service.

The moveit_installer account is used to run future in‑place upgrades when Windows Authentication is configured. Windows Authentication does not use a stored database password. Instead, MOVEit Automation connects to the SQL Server using the Windows identity under which the service is running. During upgrade, the installer must run under a Windows account that has sufficient permissions to access and update the MOVEit Automation database.

The moveit_installer account is used only for installation and upgrade operations. It is not used to run MOVEit Automation services and is created only when SQL Server uses Windows Authentication.

PowerShell execution policy requirements

Important: If the Windows PowerShell execution policy on the target system is configured as AllSigned, the MOVEit Automation installer may require the Progress Software code-signing certificate to be explicitly trusted before installation or upgrade can proceed.

During installation and upgrade, MOVEit Automation runs signed PowerShell scripts to configure permissions and complete setup tasks. Systems configured with the AllSigned execution policy may reject these scripts unless the Progress Software code-signing certificate is present in the Windows Trusted Publishers certificate store.

This requirement may apply even when the certificate chain is otherwise trusted through a trusted certification authority (CA).

For more information, see Trust the Progress Software code-signing certificate.