Knowledge Base

Back to support overview

TeamViewer Agentless Access enables secure access to devices within segmented networks and complex infrastructures, acting as a gateway to access endpoint devices. These access endpoints behave like any other managed device, each with its own TeamViewer ID, manager assignments, and support for Conditional Access rules.

This guide walks you through the one-time setup required to configure an access gateway in your environment.

This article applies to all TeamViewer Tensor license holders who purchased the Agentless Access add-on.

Prerequisites

Before setting up your access gateway, ensure the following prerequisites are met:

1. Identify the location of the access gateway within your network segment and security layer.

2. Decide whether to use a physical or virtual machine.

  • Solution is targeted for AMD64 CPU architectures
  • 8 - 16 GB of RAM 
  • 128 GB of hard disk

3.  Install Ubuntu 24.04 Server LTS version

How to set up a new access gateway

If you have an access gateway available, skip this section and proceed to How to update an access gateway

1. Install Agentless Access

  • Go to the Agentless Access page in TeamViewer Remote
  • Click “Add”
  • Click “Gateway”
  • Select a rollout config for the gateway assignment
  • Select a device name for your gateway; the default is the machine's hostname.

2. Set up Conditional Access (optional)

  • Stop the TeamViewer Embedded agent: 
sudo teamviewer-iot-agent stop
  • Edit the global configuration file:
sudo nano /var/lib/teamviewer-iot-agent/global.conf
  • Add the following lines at the end of the file:
[strng] ConditionalAccessServers = <Server1> <Server2>
  • Save and close the file.
  • Restart the TeamViewer Embedded agent:
sudo teamviewer-iot-agent start

3. Set company permissions

To allow administration of access gateway devices:

  • Open TeamViewer and navigate to Admin Settings.
  • Under User Management, select Roles.
  • Edit the Company Administrator role and head to the Permissions tab.
  • Look for the permission Organization management and enable Edit and View.

Your access gateway is now set up and ready to manage access endpoint devices. To confirm the setup, open the TeamViewer client and navigate to the Agentless access management view. You should see the newly configured access gateway listed among the enrolled devices.

How to update an access gateway

Agent version 3.7 or later

Starting with version 3.7, the access gateway can be kept up to date using the standard system package update mechanism.

Run the following command on the gateway machine:

sudo apt update && sudo apt upgrade

Agent version 3.6 only

If you are running agent version 3.6, you must install Agentless Access and migrate your existing environment.

Step 1. Install Agentless Access

  1. Open TeamViewer Remote and navigate to the Agentless Access page.
  2. Click Add.
  3. Select Gateway.
  4. Choose a rollout configuration for the gateway assignment.
  5. Select a device name for the gateway. By default, the system hostname is used.

After installation, all existing endpoints will temporarily switch to the Error state and become inaccessible. This is expected. Continue with the migration step to restore access.

Step 2. Migrate the current environment

In the latest version, endpoint orchestration is centralized and managed through a TeamViewer service user.

To migrate existing endpoints, run the following command on the gateway machine:

sudo teamviewer-agentless-access migrate

The gateway will restart briefly. Once the process is complete, all endpoints will return to the Ready state and become accessible again.