Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.8

• Review Encryption Requirements if your organization is using a certificate signed by a root authority, such as EnTrust or Verisign. A registry setting change is needed on the client computer to enable certificate validation.
• Users should update their policies by right-clicking the Dell Encryption icon in the notification area and selecting Check for Policy Updates after installation completes.

• The Encryption installer can be located at:

  • From Your Dell FTP Account - Locate the installation bundle at Endpoint-Security-SuiteEnt-1.x.x.xxx.zip and then Extract the Child Installers from the Master Installer. After extraction, locate the file at C:\extracted\Encryption.
  • NOTE:Dell Encryption logs do not specify if insufficient disk storage caused installation failure.

Command Line Installation

• The following table details the parameters available for the installation.

  Parameters
  SERVERHOSTNAME=<ServerName> (FQDN of the Dell Server for re-activation)
  POLICYPROXYHOSTNAME=<RGKName> (FQDN of the default Policy Proxy)
  MANAGEDDOMAIN=<MyDomain> (Domain to be used for the device)
  DEVICESERVERURL=<DeviceServerName/SecurityServerName> (URL used for activation; usually includes server name, port, and xapi)
  GKPORT=<NewGKPort> (Gatekeeper port)
  MACHINEID=<MachineName> (Computer name)
  RECOVERYID=<RecoveryID> (Recovery ID)
  REBOOT=ReallySuppress (Null allows for automatic reboots, ReallySuppress disables reboot)
  HIDEOVERLAYICONS=1 (0 enables overlay icons, 1 disables overlay icons)
  HIDESYSTRAYICON=1 (0 enables the icon in the notification area, 1 disables the icon in the notification area)
  ENABLE_FDE_LM=1 (Allows installation of Dell Encryption on a computer with active Full Disk Encryption)
  EME=1 (Install Encryption External Media mode)
  OPTIN=1 (Install in Deferred Activation mode)

  For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child Installers.

• The following table details additional optional parameters related with activation.

  Parameters
  SLOTTEDACTIVATON=1 (0 disables delayed/scheduled activations, 1 enables delayed/scheduled activations)
  SLOTINTERVAL=45,120 (Schedules activations through x,x notation where the first value is the lower limit of the schedule and the second value is the upper limit - in seconds)
  CALREPEAT=600 (MUST match or exceed the upper limit set in SLOTINTERVAL. Number of seconds Encryption waits before generating an activation attempt based on SLOTINTERVAL.)

  Example Command Line

  NOTE:Replace DEVICESERVERURL=https://server.organization.com:8081/xapi (without the trailing forward slash) if your Security Management Server is pre-v7.7.

• The following example installs Dell Encryption with default parameters (Encryption, Encrypt for Sharing, no dialogue, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ /qn"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" MANAGEDDOMAIN="ORGANIZATION" DEVICESERVERURL="https://server.organization.com:8443/xapi/"

• The following example installs Encryption and Encrypt for Sharing, hides the Dell Encryption notification area icon, hides the overlay icons, no dialogue, no progress bar, suppresses restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption.

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ HIDESYSTRAYICON=1 HIDEOVERLAYICONS=1 REBOOT=ReallySuppress /qn"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" MANAGEDDOMAIN="ORGANIZATION" DEVICESERVERURL="https://server.organization.com:8443/xapi/" HIDESYSTRAYICON="1" HIDEOVERLAYICONS="1"

  Example Command Line to Install Encryption External Media Only

• Silent installation, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption.

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ EME=1 /qn"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" MANAGEDDOMAIN="ORGANIZATION" DEVICESERVERURL="https://server.organization.com:8443/xapi/"

• Silent installation, no reboot, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  DDPE_XXbit_setup.exe /s /v"EME=1 SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com DEVICESERVERURL=https://server.organization.com:8443/xapi/ MANAGEDDOMAIN=ORGANIZATION /norestart /qn"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress" EME="1" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" DEVICESERVERURL="https://server.organization.com:8443/xapi/" MANAGEDDOMAIN="ORGANIZATION"
• NOTE:

  Although the About box in the client displays software version number information, it does not display whether Encryption (full install) or Encryption External Media only. To locate this information, go to C:\ProgramData\Dell\Dell Data Protection\Encryption\CMGShield.log and find the following entry:

  [<date/timestamp>      DeviceInfo: <   >] Shield Information - SM=External Media Only, SB=DELL, UNF=FQUN, last sweep={0, 0}

  Example Command Line to Convert Encryption External Media to Encryption (full install)

  NOTE:Converting Encryption External Media to Encryption (full install) is not supported with upgrades.

• Decryption is not needed when converting Encryption External Media to Encryption (full install).

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ REINSTALL=ALL EME=0 REINSTALLMODE=vamus /qn"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" MANAGEDDOMAIN="ORGANIZATION" DEVICESERVERURL="https://server.organization.com:8443/xapi/" REINSTALL="ALL" EME="0" REINSTALLMODE="vamus"

• Example Command Line to Install in Deferred Activation Mode

• The following example installs Dell Encryption in deferred activation mode in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  DDPE_XXbit_setup.exe /s /v"OPTIN=1 SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com DEVICESERVERURL=https://server.organization.com:8443/xapi/ MANAGEDDOMAIN=ORGANIZATION"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" OPTIN="1" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" DEVICESERVERURL="https://server.organization.com:8443/xapi/" MANAGEDDOMAIN="ORGANIZATION"

• The following example installs Dell Encryption in deferred activation mode and with default parameters (Encryption, Encrypt for Sharing, no dialogue, no progress bar, no restart, hides overlay icons, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ OPTIN=1 HIDEOVERLAYICONS=1 REBOOT=ReallySuppress /qn"

  MSI Command:

  msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress" OPTIN="1" SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com" MANAGEDDOMAIN="ORGANIZATION" DEVICESERVERURL="https://server.organization.com:8443/xapi/" HIDEOVERLAYICONS="1"

• Example Command Line to Install Dell Encryption with Full Disk Encryption

  \Encryption

• The following example installs Dell Encryption with default parameters (Encryption, Encrypt for Sharing, no dialogue, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ /qn"

  Then:

  \Encryption Management Agent

  The following example installs remotely managed Full Disk Encryption and allows installation on a Dell Encryption protected computer (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption).

  EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 ENABLE_FDE_LM=1 FEATURE=FDE SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 ARPSYSTEMCOMPONENT=1 /norestart /qn"

• Example Command Line to Install Encryption External Media and Full Disk Encryption.

  \Encryption

  The following example installs Encryption External Media with Silent installation, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption.

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ EME=1 /qn"

  Then:

  \Encryption Management Agent

  The following example installs remotely managed Full Disk Encryption and allows installation on a Dell Encryption protected computer (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program Files\Dell\Dell Data Protection).

  EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 ENABLE_FDE_LM=1 FEATURE=FDE SERVERHOST=server.organization.com SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 ARPSYSTEMCOMPONENT=1 /norestart /qn"

• Example Command Line to Install Encryption External Media over an existing Full Disk Encryption installation.

  The following example enables installation of Encryption External Media over an existing Full Disk Encryption installation with Silent installation, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection.

  DDPE_XXbit_setup.exe /s /v"EME=1 SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ ENABLE_FDE_LM=1 /norestart /qn"

• Example Command Line to Install Remotely Managed Encryption client over an existing Full Disk Encryption installation.

  The following example enables installation of Dell Encryption over an existing Full Disk Encryption installation with default parameters (Encryption client, Encrypt for Sharing, no dialogue, no progress bar, automatic restart, installed in the default location of C:\Program Files\Dell\Dell Data Protection\Encryption) and installation logs in C:\Dell. Note: For successful log generation, the directory C:\Dell must exist prior to installation.

  DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION DEVICESERVERURL=https://server.organization.com:8443/xapi/ ENABLE_FDE_LM=1 /norestart /qn /l*v C:\Dell\DellEncryptionInstall.log"

NOTE: Some older versions may require escape characters of \" around the values of parameters. For example: