Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell Security Management Server Installation and Migration Guide v11.9

Disconnected Mode Installation

Disconnected mode isolates Security Management Server from the Internet and an unsecured LAN or other network. After Security Management Server is installed in Disconnected mode, it remains in Disconnected mode and cannot be changed back to Connected mode.

Security Management Server is installed in Disconnected mode at the command line.

The following table lists the available switches.

Switch

Meaning

/v

Pass variables to the .msi inside the *.exe

/s

Silent mode

The following table lists available display options.

Option

Meaning

/q

No Progress dialog, restarts itself after process completion

/qb

Progress dialog with Cancel button

/qn

No user interface

The following table details the parameters available for the installation. These parameters can be specified at the command line or called from a file by using the property:

INSTALL_VALUES_FILE=\"<file_path>\" "

Parameters

AGREE_TO_LICENSE=Yes - This value must be "Yes."

PRODUCT_SN=xxxxx - Optional if you have the license information in the standard location; otherwise, enter it here.

INSTALLDIR=<path> - Optional.

BACKUPDIR=<path> - This is where the recovery files are stored.

NOTE:The folder structure created by the installer during this installation step (example shown below) must remain unchanged.

AIRGAP=1 - This value must be "1" to install Security Management Server in Disconnected mode.

SSL_TYPE=n - Where n is 1 to import an existing certificate that was purchased from a CA authority and 2 to create a self-signed certificate. The SSL_TYPE value determines which SSL properties are required.

The following are required with SSL_TYPE=1:

SSL_CERT_PASSWORD=xxxxx

SSL_CERT_PATH=xxxxx

The following are required with SSL_TYPE=2:

SSL_CITYNAME

SSL_DOMAINNAME

SSL_ORGNAME

SSL_UNITNAME

SSL_COUNTRY - Optional, default = "US"

SSL_STATENAME

SSOS_TYPE=n - Where n is 1 to import an existing certificate that was purchased from a CA authority and 2 to create a self-signed certificate. The SSOS_TYPE value determines which SSOS properties are required.

The following are required with SSOS_TYPE=1:

SSOS_CERT_PASSWORD=xxxxx

SSOS_CERT_PATH=xxxxx

The following are required with SSOS_TYPE=2:

SSOS_CITYNAME

SSOS_DOMAINNAME

SSOS_ORGNAME

SSOS_UNITNAME

SSOS_COUNTRY - Optional, default = "US"

SSOS_STATENAME

DISPLAY_SQLSERVER - This value is parsed to get SQL Server instance and port information.

Example:

DISPLAY_SQLSERVER=SQL_server\Server_instance, port

IS_AUTO_CREATE_SQLSERVER=FALSE - Optional. The default value is FALSE, which means that the database is not created. The database must already exist on server.

To create a new database, set this value to TRUE.

IS_SQLSERVER_AUTHENTICATION=0 - Optional. The default value is 0, which specifies that Windows authentication credentials of the current logged on user are used to authenticate to the SQL Server. To use SQL authentication, set this value to 1.

NOTE:The installer must authenticate to the SQL server with these permissions: create database, add user, assign permissions. The credentials are install-time credentials, not run-time credentials.

If SQL authentication is used, the following are required:

IS_SQLSERVER_USERNAME

IS_SQLSERVER_PASSWORD

EE_SQLSERVER_AUTHENTICATION - Required. Specify the authentication method for the product to use. This step connects an account to the product. These credentials are also used by Dell services as they engage with the Security Management Server. To use Windows authentication, set this value to 0. To use SQL authentication, set the value to 1.

NOTE:Ensure that the account has system administrator rights and the ability to manage the SQL server. The user account must have the SQL server permissions Default Schema: dbo and Database Role Membership: dbo_owner, public.

SQL_EE_USERNAME - Required. With Windows authentication, use this format: DOMAIN\Username. With SQL authentication, specify the user name.

SQL_EE_PASSWORD - Required. Specify the password associated with the Windows or SQL user name.

If SQL authentication is used (EE_SQLSERVER_AUTHENTICATION=1) the following are valid:

RUNAS_KEYSERVER_USER - Set the Key Server "run as" Windows user name in this format: Domain\User. This must be a Windows user account.

RUNAS_KEYSERVER_PSWD - Set Key Server "run as" Windows password associated with the Windows user account.

SQL_ADD_LOGIN=T - Optional. The default is null (this login is not added). When the value is set to T, if the SQL_EE_USERNAME is not a login or user for the database, the installer attempts to add the user's SQL authentication credentials and set privileges to allow the credentials to be used by the product.

Following are hostname parameters. Edit hostnames only if necessary. Dell recommends using the defaults. Format must be server.domain.com.

NOTE:A hostname cannot contain an underscore character ("_").

CORESERVERHOST - Optional. Core Server hostname.

RMIHOST - Optional. Compatibility Server hostname.

REPORTERHOST - Optional.

DEVICEHOST - Optional. Device Server hostname.

KEYSERVERHOST - Optional. Key Server hostname.

TIGAHOST - Optional. Security Server hostname.

SMTP_HOST - Optional. SMTP hostname.

ACTIVEMQHOST - Optional. Message Broker hostname.

Following are port parameters. Edit ports only if necessary. Dell recommends using the defaults

SERVERPORT_CLIENTAUTH - Optional.

REPORTERPORT - Optional.

DEVICEPORT - Optional.

KEYSERVERPORT - Optional.

GKPORT - Optional.

TIGAPORT - Optional.

SMTP_PORT - Optional.

ACTIVEMQ_TCP - Optional.

ACTIVEMQ_STOMP - Optional.

Install Security Management Server in Disconnected Mode

The following example installs Security Management Server in silent mode with a progress dialog, using installation parameters listed in the file, C:\mysetups\eeoptions.txt\" "

Setup.exe /s /v"/qb INSTALL_VALUES_FILE=\"C:\mysetups\eeoptions.txt\" "

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\