Administrator Guide

Forensic Mode Parameters Description
SCID is also known as DCID or Recovery ID.
-? Command line help.
Use Admin Mode
Admin Mode Syntax
CmgAlu -k -vX -aServerPrincipal -pPort [-r] [-XServer [-dMCID] [-sSCID]] "command"
Admin Mode Parameters Description
-k Indicates that Kerberos (Admin mode) is to be used. CmgAlu requires the -k ag to operate
in Admin mode.
-vX X indicates the log level. Log levels are 0-5 (0 is no logs/5 is debug level).
ServerPrincipal AD Account (Domain Account) the Key Server is running under.
Port TCP Port to connect to the Key Server on.
Server Key Server Name/IP Address.
-r Instructs the utility to load the Key Server Name and MCID (or SCID) of the computer from
the registry.
If –r is not specied, the Key Server Name and MCID (or SCID) must be supplied.
MCID Device ID for the device to unlock.
MCID is also known as the Device Unique ID or hostname.
SCID Shield ID for the device to unlock.
SCID is also known as DCID or Recovery ID.
-? Command line help.
Use Backup File Mode
Backup File Mode Syntax
CmgAlu -vX -b"FilePath" -ABackupPwd "command"
Backup File Mode Parameters
Description
-vX X indicates the log level. Log levels are 0-5 (0 is no logs/5 is debug level).
-b"FilePath" The le system path to the backup le, typically either an LSA recovery le or an output le
downloaded from CMGAd.
-BackupPwd The password used to create the backup le.
10 Admin Utilities
Administrative Launch Utility (CMGAlu)