Administrator Guide

Client Tool
The Client Tool is a shell command that runs on a Mac endpoint. It is used to activate the client from a remote location or to run
a script through a remote management utility. As administrator, you can activate a client and do the following:
● Activate as administrator
● Activate temporarily
● Retrieve information from the Mac client
To use the Client Tool manually, open a ssh session and enter the desired command on the command line.
Example:
/Library/PreferencePanes/Dell\ Encryption\Enterprise.prefPane/Contents/Helpers/client -at domainAccount
domainPassword
Enter client alone to display the usage instructions.
/Library/PreferencePanes/Dell\ Encryption\Enterprise.prefPane/Contents/Helpers/client
Table 1. Client Tool Commands
Command Purpose Syntax Results
Activate Activates a Mac
client with the Dell
Server but without
going through the
user interface. To
activate, a valid
domain user name
and password must
be entered.
With the client tool
you can activate a
different local user
than the one logged
in and associate the
domain credentials
with that user.
-a domainAccount domainPassword
-a localAccount* domainAccount
domainPassword
domainAccount is the account used to
activate via the client tool.
localAccount is optional and is the current
user if none is specified.
The activation command has this format:
client -a <user to activate*> <domainUser>
<domainPassword>
If you use the No Auth User List policy to
create classes of users that do not get
activated to the Dell Server, optionally, you
can use the client tool to specify a different
local account than the one logged in. See No
Auth User List policy in step 3.
0 = Success
2 = Activation failed, and
reason for failure
6 = User not found
Activate
temporarily
Activates a Mac
client without
leaving a footprint.
-at domainAccount domainPassword
-at localAccount* domainAccount
domainPassword
Disk Request the status
of the disk
-d Disk status displays,
including the disk's ID,
encryption status, and
policies
If empty braces are
returned, it means no disks
are encrypted.
FileVault Change
Recovery
Cycle recovery keys
for FileVault
volumes
-fc deviceId recoveryPassphrase
-fc deviceId personalRecoveryKey
0 = Success
7= LVUUID not found
6
32 Client Tool