Administration Manual

Admin Utilities 7
2
Administrative Launch Utility
This command line utility enables Administrators to unlock User or Common encrypted files on a computer while a
process is running.
This utility is used to launch jobs from
a management console. The utility must be copied to the client computer and any
job that requires access to User or Common encrypted files is changed to run this utility, by passing the command line for
the management job, to the utility. Once the process exits, the utility terminates.
This utility uses one of the following methods
to unlock files, depending on the command line parameter passed to the
application:
• Admin Mode - No switch required.
•
Forensic Mode - Used if -f is passed on the command line.
•
Backup File Mode - Used if -b is passed on the command line.
Log files can be located at:
Windows XP - C:\Documents and Settings\All Users\Application Data\CmgAdmin.log
Windows 7, Windows 8, and Windows 8.1 - C:\ProgramData\CmgAdmin.log
Use the Administrative Launch Utility in Admin Mode
Syntax for Admin Mode
CmgAlu -k -vX -aServerPrincipal -pPort [-r] [-XServer [-dMCID] [-sSCID]] "command"
Admin Mode Parameters Description
-k Indicates that Kerberos (Admin Mode) is to be used. CmgAlu
r
equires the -k flag to work in Admin Mode.
X Log level. Log levels are 0-5 (0 is no logs/5 is debug level).
ServerPrincipal AD Account (Domain Account) the Key Server is running under.
Port TCP Port to connect to the Key Server on.
Server Key Server Name/IP Address.
-r Instructs the utility to load the Key Server Name and MCID (or
SCID) of the computer from the registry.
If –r is not specified, the Key Server Name and MCID (or SCID)
must be supplied.
MCID Device ID for the device to unlock.
MCID is also known as the Device Unique ID or hostname.
SCID Shield ID for the device to unlock.
SCID is also known as DCID or Recovery ID.
-? Command line help.