WAPT documentation

Welcome to WAPT’s official documentation by Tranquil IT, last compiled on 2026-10-02.

WAPT Quickstart :

Starting with WAPT.

Quickstart - Guides

Setuphelpers :

All commands to create WAPT packages.

WAPT Setuphelpers apidoc

Changelog :

Changelog for all WAPT releases.

Changelog

Contact us :

LinkedIn, Discord, Forum, Official website…

Contacting Tranquil IT

FAQ :

Frequently asked questions about using WAPT.

FAQ - Guides

Archives :

All WAPT releases archived since version 1.8.

WAPT Documentation Archives

ANSSI-CSPN Certification

WAPT Enterprise (version 2.6.0.16859 ) has been officially validated by ANSSI under the CSPN-2026/12 certification.

This certification is associated with the ANSSI-CSPN-2026/12 certification report and is valid for three years, starting from July 17, 2026.

Key Details of the Certification:

• Developer & Mandatory: Tranquil IT

• Evaluation Center: ALMOND

• Product Category: Administration et supervision de la sécurité

• Certificate Reference: ANSSI-CSPN-2026/12

• Signature Date: July 17, 2026, 18:18 CEST

• Validity: 3 years from the signature date

This First-Level Security Certification (CSPN) by the French National Agency for Information Systems Security (ANSSI) attests to WAPT’s compliance with stringent security standards.

It underscores WAPT’s commitment to providing a secure, reliable, and high-performance solution for software deployment and management.

Main benefits

WAPT is a software and configuration deployment tool that may be compared to Microsoft SCCM (now called MECM), Ivanti UIM, IBM Bigfix, Tanium, OPSI, PDQDeploy, or Matrix42. WAPT exists in two flavors, WAPT Discovery and WAPT Enterprise.

For System Administrators:

• Install software and configurations silently.

• Maintain up to date an installed base of software and configurations.

• Configure software at the system and user level to reduce the load on support teams.

• Remove unwanted or out of cycle software and configurations silently.

• Reduce your need for support by your IT teams, whose reaction times are often long because of their workloads.

• Reduce as much as possible the consumption of bandwidth on remote sites to preserve it for productive uses.

For IT Security Officers

• Pilot the software installed base to converge to a security standard acceptable to the organization.

• Prepare your enterprise for the coming GDPR and help your DPO keep his register of data processing, because you two will become close colleagues.

• No longer tolerate hosts operating in Administrator mode.

• No longer tolerate users downloading and running software binaries from their home directory.

• Start applying SRPs, also known as Applocker or WDAC to improve application level IT security.

• Reduce the level of exposure to software vulnerabilities and lateral movement attacks.

• Bring up audit indicators for a better knowledge of the state of installed IT devices and their global security level.

• Be prompt to deploy updates to react to cyber attacks like Wannacry or notPetya.

For End-Users

• Have installed software configured to work well in the context of your Organization and trust that they will work correctly.

• Give Users more autonomy to install software safely and reliably.

• Have better working and more predictable professional systems because of standard software configurations.

Table Of Contents Tree

PRESENTING WAPT

Fundamental principles of WAPT

• Fundamental principles of WAPT
  • Introduction to WAPT
  • Fundamental principles
  • WAPT mode of operation
  • Database architecture on the agent
  • WAPT Server architecture
  • WAPT language and development environment

WAPT Editions and Versions history

• WAPT Editions and versions history
  • Currently supported versions
  • Out of support versions
  • Summary of operating principles in WAPT
  • Current feature list as of 2026-10-02
  • Features coming soon
  • Main functional benefits of the Enterprise version of WAPT
  • Targeted use cases of WAPT Enterprise
  • Description of services available with a WAPT Enterprise contract

WAPT QUICKSTART

Quickstart - Guides

• 1. Quickstart - Guides

Quickstart - Installing The WAPT Server

• 2. Quickstart - Installing the WAPT Server (WINDOWS for test only)
  • 2.1. To read beforehand
  • 2.2. Installing WAPT server

Quickstart - Installing The WAPT Console

• 3. Quickstart - Installing the WAPT Console
  • 3.1. Installing the WAPT Setup on the Administrator’s computer
  • 3.2. Generating the Administrator’s certificate for signing WAPT packages
  • 3.3. Packet prefix definition
  • 3.4. Activating a WAPT licence
  • 3.5. Creating the WAPT Agent

Quickstart - Installing The WAPT Agent

• 4. Quickstart - Installing the WAPT Agent

Quickstart - Import and Deploy a WAPT Package

• 5. Quickstart - Import and Deploy a WAPT Package
  • 5.1. Downloading a package from the WAPT store
  • 5.2. Adding a package dependency to a machine
  • 5.3. Updating and installing the package on that machine
  • 5.4. Verify the Installation

Quickstart - Uninstall a WAPT Package

• 6. Quickstart - Uninstall a WAPT Package
  • 6.1. Remove a package dependency from a host
  • 6.2. Uninstall the package from a host

Quickstart - Create a first WAPT Package

• 7. Quickstart - Create your first WAPT Package
  • 7.1. Prerequisites: Setting Up Your Development Environment
  • 7.2. Create the WAPT Package

Quickstart - WAPTWUA Setup

• 8. Quickstart - WAPTWUA Setup
  • 8.1. Overview of WAPTWUA
  • 8.2. How to enable it ?
  • 8.3. How to set it up on your fleet (concrete example)
  • 8.4. Going further

Quickstart - Reporting Setup

• 9. Quickstart - Reporting Setup
  • 9.1. Overview
  • 9.2. How to import and create queries
  • 9.3. Using the results
  • 9.4. Going further

Quickstart - Self-service Setup

Quickstart - WADS for Windows

• 11. Quickstart - WADS for Windows
  • 11.1. Deploying a Windows machine in the domain, with offline connection

Quickstart - WADS for Linux

• 12. Quickstart - WADS for Linux
  • 12.1. Deploying a Linux machine in the domain, with offline connection
  • 12.2. How it works

WAPT SERVER

Checking requirements

• 1. Checking WAPT Installation requirements
  • 1.1. Installation requirements
  • 1.2. Tips before installing

Installing WAPT Server

• 2. Installing WAPT Server
  • 2.1. Installing on Debian and derivatives
  • 2.2. Installing on RedHat and derivatives
  • 2.3. Installing on Windows

Upgrade WAPT Server

• 3. Upgrade WAPT Server
  • 3.1. Switching of WAPT Edition (Community, Discovery, Enterprise)
  • 3.2. Upgrading from version 2.7 to latest 2.7
  • 3.3. Upgrading from version 2.4, 2.5 or 2.6 to 2.7
  • 3.4. Migrating the WAPT server from Debian 12 to Debian 13: Procedure for updating the PostgreSQL database

Backup WAPT Server

• 4. Backing up the WAPT Server
  • 4.1. Linux
  • 4.2. Windows

Restore WAPT Server

• 5. Restoring the WAPT Server
  • 5.1. Linux
  • 5.2. Windows

WAPT Server APIs

• 6. Using the WAPT Server APIs
  • 6.1. API Overview
  • 6.2. Using the APIs
  • 6.3. Some examples of api requests

WAPT Server Advanced Configuration

• 7. WAPT Server Advanced Configuration
  • 7.1. Default configurations of waptserver file and nginx
  • 7.2. Configuring WAPT Server for large infrastructures
  • 7.3. Using the command-lines for repository management

Enhancing WAPT Server Security - Server side

• 8. Enhancing the security of your WAPT setup - Server side
  • 8.1. Configuring the firewall on the WAPT Server
  • 8.2. Configuring kerberos authentication
  • 8.3. Activating the verification of the SSL / TLS certificate
  • 8.4. Configuring user authentication against Active Directory
  • 8.5. Configuring Client-Side Certificate Authentication

WAPT CONSOLE

How to install the management WAPT console

• 1. How to install the management WAPT console
  • 1.1. Installing and starting WAPT Console
  • 1.2. Activating a WAPT licence
  • 1.3. Certificate affectation
  • 1.4. Generating the Administrator’s certificate for signing WAPT packages
  • 1.5. Packet prefix definition
  • 1.6. WAPT Agent check
  • 1.7. Initial Configuration

How to use the WAPT Console

• 2. Using the WAPT Console
  • 2.1. Overview of the wapt console inventory tab
  • 2.2. Showing the inventory
  • 2.3. Dark mode on the WAPT Console
  • 2.4. Performing actions on the hosts
  • 2.5. Sending messages to selected hosts
  • 2.6. Importing WAPT packages from external repositories
  • 2.7. Updating WAPT packages in the repository
  • 2.8. Managing WAPT packages hosted in the repository
  • 2.9. Adding a WAPT package to a host
  • 2.10. Uninstalling a package using the conflict feature (do a prohibited package)
  • 2.11. Forgetting a WAPT package
  • 2.12. Adding or removing a WAPT package to several hosts
  • 2.13. Checking available updates for a host
  • 2.14. Applying updates on a host
  • 2.15. Performing a global search on all hosts
  • 2.16. Creating a configuration package
  • 2.17. Removing the WAPT agent from the WAPT Console

WAPT Console advanced mode

• 3. Using the WAPT Console advanced features
  • 3.1. Using Organizational Unit packages in WAPT
  • 3.2. Customizing the columns
  • 3.3. Forcing WAPT package installation
  • 3.4. Multi-Factor Authentication by WAPT Console
  • 3.5. Adding plugins in the WAPT Console
  • 3.6. Using the WAPT System Tray utility
  • 3.7. Using the WAPT Exit utility
  • 3.8. Using the WAPT File Hash Calculator
  • 3.9. Customizing WAPT for better user acceptance
  • 3.10. Customizing the WAPT Console with its configuration file

WAPT Secondary Repo [DEPRECATED]

• 4. [DEPRECATED] Configuring WAPT repositories [DEPRECATED]
  • 4.1. Repository location on the WAPT Server
  • 4.2. Replicating a repository
  • 4.3. Multiple repositories

WAPT Proxycache

• 5. Proxycache by WAPT
  • 5.1. Introduction
  • 5.2. ProxyCache on the WAPT Server
  • 5.3. Agent ProxyCache (Secondary Repositories)

WAPT Peercache

• 6. PEERCACHE by WAPT
  • 6.1. Introduction
  • 6.2. How Peercache Works
  • 6.3. Setting Up Peercache
  • 6.4. Verifying Peercache Operation
  • 6.5. Auditing PeerCache Usage in Your Environment

WAPT Self-Service

• 7. Using WAPT Self-Service
  • 7.1. Presentation
  • 7.2. Working principle
  • 7.3. Using the self-service feature
  • 7.4. Using WAPT Self-Service
  • 7.5. WAPT Agent settings for WAPT Self-Service
  • 7.6. Video demonstration

WAPTWUA

• 8. Using WAPT Windows Update Agent (WAPTWUA)
  • 8.1. Working principle
  • 8.2. Differences between WAPTWUA and WSUS
  • 8.3. Handling Special Windows Updates in WAPT
  • 8.4. Different Governance models in WAPTWUA:
  • 8.5. Configuring WAPTWUA on the WAPT Agent
  • 8.6. Using WAPTWUA from the WAPT Console
  • 8.7. WAPT does not force Windows to uninstall a Windows Update
  • 8.8. WUA offline

WADS OS deployement

• 9. Simplifying the deployment of your workstations
  • 9.1. Recommendations
  • 9.2. Deploying your workstations via WADS
  • 9.3. Installing and configuring TFTP and DHCP for WADS
  • 9.4. How to add computers to the wads list
  • 9.5. Deploying a Windows OS via WADS

WAPT Reporting

• 10. Using the reporting functions in WAPT
  • 10.1. Working principle
  • 10.2. WAPT Query Designer
  • 10.3. Using queries as a filter in the inventory tab
  • 10.4. Query examples
  • 10.5. Normalizing software names
  • 10.6. Connecting to the WAPT database using a PostgreSQL client

WAPT Audit Data

• 11. Using audit data into plugins for WAPT package compliance and for external services
  • 11.1. Displaying host audit data in the WAPT Console
  • 11.2. Synchronizing WAPT inventories to GLPI
  • 11.3. Synchronizing WAPT inventories to Cyberwatch for security breaches
  • 11.4. Customizing audit reports with Mustache templates

Enhancing WAPT Server Security - Console side

• 12. Enhancing the security of your WAPT setup - Console side
  • 12.1. Generating the Certificate Authority (CA)
  • 12.2. Displaying the Certificates trusted by the hosts in the WAPT Console
  • 12.3. Configuring Access Control Lists
  • 12.4. Re-signing packages on the WAPT Server using the WAPT console
  • 12.5. Available Authentication Methods to the WAPT Console

WAPT AGENT

Deploying the WAPT Agent

• 1. Deploying the WAPT Agent
  • 1.1. Deploying the WAPT Agent on Windows
  • 1.2. Deploying the WAPT Agent on Linux and macOS

Updating the WAPT Agent

• 2. Updating the WAPT Agent
  • 2.1. Updating on Windows
  • 2.2. Updating on Linux and macOS

Removing the WAPT Agent

• 3. Uninstalling the WAPT Agent from clients
  • 3.1. Windows
  • 3.2. Linux
  • 3.3. macOS

WAPT Command Line Interface

• 4. Using WAPT with the Command Line
  • 4.1. Global Options for commands WAPT-GET
  • 4.2. Using the more common functions in WAPT with the command line
  • 4.3. Using special Command Lines with WAPT
  • 4.4. Using the Command Line for user session setup
  • 4.5. Using the Command Line to create WAPT packages
  • 4.6. Using the command-lines for WaptWUA management
  • 4.7. Using the command-line for interacting with users
  • 4.8. Using the command-lines for initial setup
  • 4.9. Using the command-lines with options

Advanced WAPT configuration

• 5. Configuring the WAPT Agent with advanced options
  • 5.1. Description of available sections
  • 5.2. Description of available options by section
  • 5.3. Settings for using multiple repositories

CREATING WAPT PACKAGES

WAPT package creation

• 1. Getting start creating WAPT packages
  • 1.1. Setting up your WAPT development and test environment
  • 1.2. Principles of creating package template from the WAPT Console
  • 1.3. Creating your first WAPT Packages

WAPT package creation overview

• 2. WAPT Packages Overview
  • 2.1. Package template
  • 2.2. Group Package
  • 2.3. AD Profile
  • 2.4. WUA rules
  • 2.5. Self-Service Rules Package
  • 2.6. Host Agent Dynamic Configuration

WAPT package creation IDE

• 3. Using different IDEs for developing WAPT packages
  • 3.1. Configuring WAPT to use supported IDEs
  • 3.2. Configuring WAPT to use a custom editor

WAPT package creation code

• 4. How to code WAPT packages
  • 4.1. Simple examples of commonly used setuphelper functions
  • 4.2. Improving my package

WAPT Package Structure

• 5. Package structure detailed
  • 5.1. The control file
  • 5.2. The setup.py file
  • 5.3. The wapt.psproj file
  • 5.4. The icon.png file
  • 5.5. The manifest.sha256 file
  • 5.6. The signature file
  • 5.7. The certificate.crt file
  • 5.8. Other files

WAPT Setuphelpers apidoc

• 6. WAPT Setuphelpers apidoc
  • 6.1. Setuphelpers for Windows
  • 6.2. Setuphelpers for Linux
  • 6.3. Setuphelpers for macOS

FREQUENT PROBLEMS AND QUESTIONS

FAQ - Guides

• 1. FAQ - Guides

FAQ - Server Issues

• 2. FAQ - Server Issues
  • 2.1. How to change correctly my CA (SSL/TLS) certificate
  • 2.2. What procedure should I follow if my WAPT server is inoperative (fire, flood, physical destruction)?
  • 2.3. WAPT Server behind a reverse proxy
  • 2.4. Resetting the WAPT Linux Server password
  • 2.5. Problems when enabling enable-check-certificate
  • 2.6. What can go wrong during the upgrades of WAPTserver ?

FAQ - Console Issues

• 3. FAQ - Console Issues
  • 3.1. My certificate don’t work on the machine
  • 3.2. Error message about package on the WAPT Console
  • 3.3. Error message when opening the WAPT Console
  • 3.4. Managing the location of machines in WAPT: Updating the Organisation Unit (OU)
  • 3.5. Duplicate or Legacy Windows Update KBs Displayed in WAPT

FAQ - Agent Issues

• 4. FAQ - Agent Issues
  • 4.1. I lost my WAPT private key
  • 4.2. My private key has been stolen
  • 4.3. Problems with registering a host with WAPT
  • 4.4. Windows does not wait for the network to be running on startup
  • 4.5. The WAPT Exit utility will not launch
  • 4.6. The WAPT Exit utility halts after 15 minutes and does not finish installing the WAPT packages

FAQ - Packages Issues

• 5. FAQ - Packages Issues
  • 5.1. How to Uninstall Software Not Installed with WAPT
  • 5.2. Conflict between Wapt configuration and GPO
  • 5.3. I have deployed a software package on an organisation unit (OU), but I would like to exclude certain workstations
  • 5.4. Installation that needs a system reboot
  • 5.5. Updating WAPT packages from Python 2 to Python 3
  • 5.6. Wapt service crashes during install or remove
  • 5.7. Problems when creating a WAPT package

FAQ - Licences Issues

• 6. FAQ - Licence Issues
  • 6.1. Removing a WAPT licence
  • 6.2. License location
  • 6.3. License error

FAQ - System Environnement Issues

• 7. FAQ - System Environnement Issues
  • 7.1. My BIOS UUID bugs
  • 7.2. I have an issue with my proxy - THttpClientSocket.SockRecv(1) read = 0
  • 7.3. Frequent problems caused by Anti-Virus software
  • 7.4. The WAPT Deploy utility does not work

FAQ - Other Issues

• 8. FAQ - Other Issues
  • 8.1. Known Issue: Diskpart failed (“hard drive not found”) on DELL computers
  • 8.2. How to move my repository to another partition
  • 8.3. Using a network drive to store and deliver WAPT packages
  • 8.4. Using the register() function in your audit scripts
  • 8.5. EWaptBadControl: ‘utf8’ codec can not decode byte
  • 8.6. I have a lot more hosts in the WAPT Console than I have host packages on my Server?
  • 8.7. I have removed the dependency but the package is still installed on my computer

APPENDIX

Contacting Tranquil IT

• Contacting Tranquil IT

Glossary

• Glossary

Presentation of the security principles in WAPT

• Presentation of the security principles in WAPT
  • Preamble and definitions
  • Technical environment for product operation
  • Sensitive assets to be protected
  • Environmental measures
  • Threat description
  • Functions implemented by the product
  • Cover matrices

Presentation of cryptographic processes

• Presentation of cryptographic processes
  • WAPT solution components and cryptographic mechanism specification
  • Nginx service
  • WAPT Server service
  • WAPT Agent
  • Local client applications: waptexit, waptself, wapttray
  • Initial WAPT Agent registration
  • Agent websocket connection
  • Agent login for inventory feedback
  • Connecting Agents to download packages
  • Server authentication by Agents
  • Authentication of deposit(s) by Agents
  • Remote actions on Agents
  • Administrator authentication on the WAPT Console
  • Signature of control file attributes
  • Signing WAPT packages
  • Microsoft Authenticode” signature for binaries and installers.
  • Checking the installer hash with waptdeploy
  • Signing requests sent to WAPT Agents

Best pratices for packaging software (Software editors)

• (For software editors) Applying best practices to packaging software
  • Environment variables
  • Program directories
  • Logs
  • Error codes
  • Printing
  • Distribution
  • Update
  • Version numbers
  • GPO
  • License dongles
  • Networking
  • PDFs

WAPT release strategy

• WAPT release Strategy
  • Release delay between the Enterprise and the Discovery versions

Security bulletin

• Security bulletin
  • WAPT-2026-08 : CVE-2026-75132
  • WAPT-2026-06 : CVE-2026-33591
  • WAPT-2021-01 : CVE-2021-38608

Changelog

• Changelog
  • WAPT-2.7 Serie
  • WAPT-2.6 Serie

WAPT End Users Licence Agreement

• WAPT End user License Agreement
  • Definitions
  • Grant of rights
  • No derivative works
  • Ownership
  • Confidentiality
  • Disclaimer of warranties
  • Limitation of liability
  • Indemnification
  • Termination
  • Updates and support

External component licences used in WAPT

• External component licenses used in WAPT