Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.8

• Review Full Disk Encryption Requirements if your organization is using a certificate signed by a root authority, such as EnTrust or Verisign. A registry setting change is needed on the client computer to enable SSL/TLS trust validation.

• Users log in to the PBA using their Windows credentials.

Command Line Installation

• The following table details the parameters available for the installation.

  Parameters
  CM_EDITION=1 (remote management)
  INSTALLDIR=(change the installation destination)
  SERVERHOST=(securityserver.organization.com)
  SERVERPORT=8888
  SECURITYSERVERHOST=(securityserver.organization.com)
  SECURITYSERVERPORT=8443
  FEATURE=FDE
  ENABLE_FDE_LM=1 (Allows installation of Full Disk Encryption on a computer with active Dell Encryption)

  For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child Installers.

  Example Command Line

  Encryption Management Agent

• The following example installs remotely managed Full Disk Encryption (silent installation, no reboot, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 FEATURE=FDE SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 /norestart /qn"

• Encryption Management Agent

• The following example installs remotely managed Full Disk Encryption and allows installation on a Dell Encryption protected computer (silent installation, no reboot, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 ENABLE_FDE_LM=1 FEATURE=FDE SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 /norestart /qn"

• Example Command Line to Install Full Disk Encryption and Encryption External Media.

  Encryption

  The following example installs Encryption External Media with Silent installation, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption.

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ EME=1 /qn"

  Then:

  Encryption Management Agent

  The following example installs remotely managed Full Disk Encryption and allows installation on a Dell Encryption protected computer (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 ENABLE_FDE_LM=1 FEATURE=FDE SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 /norestart /qn"