user guide
5 Create packages using the command line interface
Use the command line interface for repeated deployment. You can create an installation package for the following features:
■ Endpoint protection package with anti-virus, remote management, Firewall, and patch management.
5.1 Create a protection package using the CLI
Before using this section, read Create a protection package using the GUI
(page 6).
To run the Deployment Packager in command line mode, use the following format as a minimum:
DeploymentPackager.exe -cli -mng yes -cidpath <CIDpath> -sfxpath
<SFXpath> -crt R where <CIDpath> is the path to the relevant central installation directory and <SFXpath> is the path of the output package. -crt R automatically removes third-party protection software.
The packager returns a value of zero when run successfully and non-zero for an error condition, together with a message to standard error method (stderr).
Command-line options
You can also use other command line qualifiers, as listed below.
-mng yes
Enable Remote Management.
-mngcfg
Specify path to custom Remote Management configuration files.
-scf
Install Sophos Client Firewall.
-ntp
Install Sophos Network Threat Protection.
-hmpa
Install Sophos Exploit Prevention.
-patch <Management Server URL>
Install Sophos Patch Agent with the Management Server address. The address should be a fullyqualified domain name. Example: http://<server name>.
9
Sophos Deployment Packager
-sauonly
Include Sophos AutoUpdate only (chosen remote management, firewall, NTP and SSP components are downloaded from the update source). If this option is not selected, chosen components are included in the package.
-arch <32bit, 64bit>
Specify the architecture of the package you want to create, either 32-bit or 64-bit.
Note: This option is only applicable if Patch is being installed from packaged CID. If you choose
32-bit or 64-bit the package can be installed only on specific 32-bit or 64-bit operating systems.
If you do not specify any architecture, a single package is created which can be installed on both
32 and 64-bit operating systems, but the package size will be large.
-updp <update_path>
Updating path.
-user <username>
-pwd <password>
Username and password. The packager obfuscates these in the package. However, if you are saving a Deployment Packager command line with clear username and password in a text or batch file, ensure that it is secure.
-opwd <obfuscated_password>
Obfuscated password. For information on how to obfuscate passwords, see Knowledge Base article Obfuscating the username and password at www.sophos.com/en-us/support/knowledgebase/13094.aspx
.
-s
Silent installation.
-ni
Non-interactive installation.
Other options
Any other options are packaged to be run with the installer setup file.
10
