Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
Parameter Selection
CMG_DECRYPT Property for selecting the type of Encryption Removal
Agent installation:
3 - Use LSARecovery bundle
2 - Use previously downloaded forensics key material
1 - Download keys from the Dell Server
0 - Do not install Encryption Removal Agent
CMGSILENTMODE Property for silent uninstallation:
1 - Silent - required when running with msiexec variables
containing /q or /qn
0 - Not Silent - only possible when msiexec variables
containing /q are not present in the command line syntax
Required Properties
DA_SERVER FQHN for the Security Management Server hosting the
negotiate session.
DA_PORT Port on the Security Management Server for request
(default is 8050).
SVCPN User name in UPN format that the Key Server service is
logged on as on the Security Management Server.
DA_RUNAS User name in SAM compatible format under whose context
the key fetch request is made. This user must be in the Key
Server list in the Security Management Server.
DA_RUNASPWD Password for the runas user.
FORENSIC_ADMIN The forensic administrator account on the Dell Server,
which can be used for forensic requests for uninstalls or
keys.
FORENSIC_ADMIN_PWD The password for the forensic administrator account.
Optional Properties
SVCLOGONUN User name in UPN format for Encryption Removal Agent
service log on as parameter.
SVCLOGONPWD Password for log on as user.
● The following example silently uninstalls Encryption and downloads the encryption keys from the Security Management
Server.
DDPE_XXbit_setup.exe /s /x /v"CMG_DECRYPT=1 CMGSILENTMODE=1
DA_SERVER=server.organization.com DA_PORT=8050 SVCPN=administrator@organization.com
DA_RUNAS=domain\username DA_RUNASPWD=password /qn"
MSI Command:
msiexec.exe /s /x "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress"
CMG_DECRYPT="1" CMGSILENTMODE="1" DA_SERVER="server.organization.com" DA_PORT="8050"
SVCPN="administrator@domain.com" DA_RUNAS="domain\username" DA_RUNASPWD="password" /qn
Reboot the computer when finished.
● The following example silently uninstalls Encryption and downloads the encryptions keys using a forensic administrator
account.
66
Uninstall Using the Child Installers