Download ORelay

Add the computer to your account

Once it’s installed, the computer shows a code. Scan it with your phone’s camera and sign in as an owner or admin of the account, or open the ORelay app and choose Add a computer, then Scan. You pick the account it goes into, and the computer asks someone at it to confirm before it joins.

• Windows: open ORelay from the Start menu. Once your phone has approved it, click Join.
• Mac: click the ORelay icon in the menu bar and choose Open ORelay. Once your phone has approved it, click Join. To let someone see the screen, allow orelay-session-helper in System Settings, Privacy & Security, Screen & System Audio Recording; macOS asks someone at the Mac for this once.
• Linux: run sudo orelay-agent join, which shows the code in the terminal and asks there before it joins.

No phone to hand? Choose Add a computer in the web viewer for a one-time code. Then open ORelay on the computer (from the Start menu, or the menu bar on a Mac) and type it under “Have a code instead?”. On Linux, or a computer with no screen, run the join command instead: sudo orelay-agent join on Linux, sudo /usr/local/bin/orelay-agent join on a Mac, and on Windows, in PowerShell run as administrator:

& "C:\Program Files\ORelay\orelay-agent.exe" join

Check what you downloaded

Each file’s SHA-256 checksum, to compare with your own copy’s (Get-FileHash in PowerShell, shasum -a 256 on a Mac, sha256sum on Linux):

ORelay-Agent-0.1.129-x64.msi

9c7fa031216c72c85c0fda7e5f1408e7f4cbeda517f6d227c9f49791aec0e681

ORelay-Agent-0.1.129-universal.pkg

c3bdb6aad964b58687dd6249f09b3c5f05e8197a555029fc2b61930fec4e2810

orelay-agent_0.1.129-1_amd64.deb

1db4953b73d8fc7914aeca0fa7c78a42e9414ea42ca28cda3a60899a99369e54

orelay-agent-0.1.129-1.x86_64.rpm

fdceac4bad0e901d4456b0e8ed5901bfb035f7c167c8e53f680a8ca5262d37fd

Windows

In the file’s Properties, Digital Signatures shows ORelay Studios LLC. Or in PowerShell, where Status must be Valid and the signer ORelay Studios LLC:

Get-AuthenticodeSignature .\ORelay-Agent-0.1.129-x64.msi | Format-List Status, SignerCertificate

Mac

The first must name Developer ID Installer: ORelay Studios LLC (TG7B72KJQD); the second must say accepted, source=Notarized Developer ID:

pkgutil --check-signature ORelay-Agent-0.1.129-universal.pkg
spctl --assess -vv --type install ORelay-Agent-0.1.129-universal.pkg

Linux

Our package signing key is orelay-packages.asc, fingerprint A86F D8DF 6BF6 01B8 E65C 7627 2781 1DE2 BE7A 3757. For the .rpm, import it and check the package:

sudo rpm --import https://orelay.io/keys/orelay-packages.asc
rpm -K orelay-agent-0.1.129-1.x86_64.rpm

apt and dpkg don’t check a signature inside a .deb, so check it before installing. gpg must say Good signature from “ORelay Studios LLC Package Signing”:

curl -fsSL https://orelay.io/keys/orelay-packages.asc | gpg --import
gpg --verify <(ar p orelay-agent_0.1.129-1_amd64.deb _gpgorigin) <(ar p orelay-agent_0.1.129-1_amd64.deb debian-binary control.tar.gz data.tar.xz)

Then install it with sudo apt install ./orelay-agent_0.1.129-1_amd64.deb, or the .rpm with sudo dnf install ./orelay-agent-0.1.129-1.x86_64.rpm. Updates are checked too: the agent installs one only if our release key signed it, as the security page explains.

Links that stay the same

These always lead to the newest installer, for scripts and instructions you don’t want to update with each release:

• https://orelay.io/download/windows
• https://orelay.io/download/mac
• https://orelay.io/download/linux-deb
• https://orelay.io/download/linux-rpm

Setting up many computers at once? The Windows installer runs silently and the Mac and Linux packages install unattended; Deploy ORelay to many computers shows how, with an enrolment key, in Intune, Configuration Manager, Group Policy, Jamf Pro, Kandji and Linux tools.