1. The Api Service affect the existing Configuration? The Mi-Token API Service is required for the Mi-Token credential provider because CP makes a call to the API (via HTTPS) to authenticate the OTP code entered. The API Service should be installed on the existing Mi-Token server(s) - install on the primary first then any replica servers. It does not affect the existing configuration.
2. You can install CP on workstations but for use with RDP you need only install it on the RDP Gateway or RDP Session hosts. If only installed on the RDP hosts, workstation login is unaffected but logging into the RDP servers will require an OTP code to be entered. You will need to be running the latest version of Mi-Token to make best use of CP. The latest version of Mi-Token is 4.3.9.4.