Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.1
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
Parameters Description
nocontentupdate Tells the installer not to update content files automatically as part of the
installation process. Dell recommends scheduling an update as soon as installation
has completed.
nopreservesettings Do not save settings.
● The following table details the parameters available for the DellThreatProtection.msi file.
Parameters Description
Reboot=ReallySuppress Suppresses the reboot.
ARP 0=No entry in Add/Remove Programs
1=Entry in Add/Remove Programs
To install or upgrade, use the following workflow:
● Example Command Line
\Threat Protection\EndPointSecurity
The following example installs the Web Protection and Client Firewall with default parameters (silent mode, install Client
Firewall, and Web Protection, override the Host Intrusion Prevention, no content update, no settings saved with logs in
C:\ProgramData\Dell\Dell Data Protection).
".\Threat Protection\EndPointSecurity\EPsetup.exe" ADDLOCAL="fw,wc" /override"hips" /
nocontentupdate /qb! /L*v"C:\ProgramData\Dell\Dell Data Protection\Installer Logs\"
Then:
\Threat Protection\ThreatProtection\WinXXR
● The following example installs the client with default parameters (suppress the reboot, no dialogue, no progress bar, no entry
in the Control Panel Programs list).
"Threat Protection\ThreatProtection\WinXXR\DellThreatProtection.msi" /qn
REBOOT=ReallySuppress ARPSYSTEMCOMPONENT=1
Then:
\Threat Protection\SDK
● The following command line loads the certificate default parameters.
"Threat Protection\SDK\EnsMgmtSdkInstaller.exe" -LoadCert >"C:\ProgramData\Dell\Dell Data
Protection\Installer Logs\McAfeeSDKInstallerBeforeEndPoint.log"
Then:
\Threat Protection\SDK
● The following example installs the SDK.
"Threat Protection\SDK\EnsMgmtSDKInstaller.exe" -InstallSDK -RemoveRightClick
-RemoveMcTray >> "<OUTPUTDIRECTORY>\McAfeeSDKInstallerAfterEndPoint.log"
Install SED Manager and PBA Advanced
Authentication
● Review SED Requirements if your organization is using a certificate signed by a root authority, such as EnTrust or Verisign. A
registry setting change is needed on the client computer to enable SSL/TLS trust validation.
● Users log in to the PBA using their Windows credentials.
● The SED Manager and PBA Advanced Authentication installers can be located at:
Install Using the Child Installers
59