Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.8

• NOTE:If your organization requires the use of third-party credential providers, the Encryption Management Agent must be installed or upgraded with the FEATURE=BLM or FEATURE=BASIC parameter.
• Review BitLocker Manager Client Requirements if your organization is using a certificate signed by a root authority, such as EnTrust or Verisign. A registry setting change is needed on the client computer to enable SSL/TLS trust validation.

• The BitLocker Manager client installers can be located at:

  • From Your Dell FTP Account - Locate the installation bundle at Endpoint-Security-Suite-Ent-2.x.x.xxx.zip and then Extract the Child Installers from the Master Installer. After extraction, locate the file at C:\extracted\Encryption Management Agent.

Command Line Installation

• The following table details the parameters available for the installation.

  Parameters
  CM_EDITION=1 <remote management>
  INSTALLDIR=<change the installation destination>
  SERVERHOST=<securityserver.organization.com>
  SERVERPORT=8888
  SECURITYSERVERHOST=<securityserver.organization.com>
  SECURITYSERVERPORT=8443
  FEATURE=BLM <install BitLocker Manager only>
  FEATURE=BLM,SED <install BitLocker Manager with SED>
  ARPSYSTEMCOMPONENT=1 <no entry in the Control Panel Programs list>

  For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child Installers.

  Example Command Line

• The following example installs BitLocker Manager only (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program Files\Dell\Dell Data Protection)

  EMAgent_XXbit_setup.exe /s /v"CM_EDITION=1 SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 FEATURE=BLM /norestart /qn"

• The following example installs BitLocker Manager with SED (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program Files\Dell\Dell Data Protection)

  EMAgent_XXbit_setup.exe /s /v"CM_EDITION=1 SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 FEATURE=BLM,SED /norestart /qn"

• Example Command Line to Install BitLocker Manager and Dell Encryption

  The following example installs BitLocker Manager only (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program Files\Dell\Dell Data Protection)

  EMAgent_XXbit_setup.exe /s /v"CM_EDITION=1 SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 FEATURE=BLM /norestart /qn"

  Then:

  The following example installs the client with default parameters (Encryption client, Encrypt for Sharing, no dialogue, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection).

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ /qn"