Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
○ From Your Dell FTP Account - Locate the installation bundle at Endpoint-Security-Suite-Ent-2.x.x.xxx.zip and then
Extract the Child Installers from the Master Installer. After extraction, locate the file in C:\extracted\Advanced
Threat Prevention\WinXXR\ and C:\extracted\Advanced Threat Prevention\WinNtAll\.
● The Encryption Management Agent installer can be located at:
○ From Your Dell FTP Account - Locate the installation bundle at Endpoint-Security-Suite-Ent-2.x.x.xxx.zip and then
Extract the Child Installers from the Master Installer. After extraction, locate the file in C:\extracted\Encryption
Management Agent.
Command Line Installation
● Basic .msi commands are available for the installation.
● The following table details the parameters available for the installation.
Parameters
CM_EDITION=1 <remote management>
INSTALLDIR=<change the installation destination>
SERVERHOST=<securityserver.organization.com>
SERVERPORT=8888
SECURITYSERVERHOST=<securityserver.organization.com>
SECURITYSERVERPORT=8443
ARPSYSTEMCOMPONENT=1 <no entry in the Control Panel Programs list>
REBOOT=ReallySuppress <suppresses the reboot>
FEATURE=BASIC <
required
on a server operating system; may also be used (optionally) on a workstation operating
system; prevents SED management and BitLocker Manager installation>
For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child
Installers.
Example Command Lines
● The following example installs the basic Encryption Management Agent, without SED management or BitLocker Manager
(silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program
Files\Dell\Dell Data Protection).
EMAgent_XXbit_setup.exe /s /v"FEATURE=BASIC
CM_EDITION=1 SERVERHOST=server.organization.com SERVERPORT=8888
SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 ARPSYSTEMCOMPONENT=1 /
norestart /qn"
● The following example installs Advanced Threat Prevention (silent installation, no reboot, installation log file and installation
folder in the specified locations)
MSIEXEC.EXE /I "ATP_CSF_Plugins_x64.msi" /qn REBOOT="ReallySuppress" APPFOLDER="C:
\Program Files\Dell\Dell Data Protection\Advanced Threat Prevention\Plugins"
ARPSYSTEMCOMPONENT="1" /l*v "C:\ProgramData\Dell\Dell Data Protection\Installer
Logs\ATP_Plugins_x64.msi.log"
and
"\Advanced Threat Prevention\WinNtAll\ATP_AgentSetup.exe" /s EXTRACT_INSTALLERS /v"/qb!"
NOTE: These components must be installed by command line only. Double-clicking to install this component installs a non-Dell,
non-managed version of the product, which is not supported. If this is accidentally done, simply go to Add/Remove Programs
and uninstall that version.
Example Script
Install Using the Child Installers
57