Managed Service Provider guide for a single server
17 Appendix: Create a protection package using the CLI
Before using this section, read About the Deployment Packager tool
(page 22).
To run the Deployment Packager in command line mode, use the following format as a minimum:
DeploymentPackager.exe -cli -mng yes -cidpath <CIDpath> -sfxpath
<SFXpath> -crt R
where
<CIDpath>
is the path to the relevant central installation directory and
<SFXpath>
is the path of the output package. -crt R automatically removes third-party protection software.
The packager returns a value of zero when run successfully and non-zero for an error condition, together with a message to standard error method (stderr).
Command-line options
You can also use other command line qualifiers, as listed below.
-mng yes
Enable Remote Management.
-mngcfg
Specify path to custom Remote Management configuration files.
-scf
Install Sophos Client Firewall.
-patch <Management Server URL>
This installs Sophos Patch Agent. For the Management server URL enter the reverse proxy address through which the endpoints can communicate with the SEC Server. The address must be a fully qualified domain name or IP address. Example: http://<SEC-Server.msp.com>.
You must configure the reverse proxy so it redirects the traffic that matches the address http://<SEC-Server.msp.com>/Sophos/Management/Patch/EndpointCommunicator/ to the SEC
Server.
-sauonly
Include Sophos AutoUpdate only (chosen remote management and firewall components are downloaded from the update source). If this option is not selected, chosen components are included in the package.
-arch <32bit, 64bit>
Specify the architecture of the package you want to create, either 32-bit or 64-bit.
Note: This option is only applicable if Patch is being installed from packaged CID. If you choose
32-bit or 64-bit the package can be installed only on specific 32-bit or 64-bit operating systems.
33
Sophos Endpoint Security and Control
If you do not specify architecture, a single package is created which can be installed on both 32 and 64-bit operating systems, but the package size will be large.
-updp <update_path>
Updating path.
-user <username>
-pwd <password>
Username and password. The packager obfuscates these in the package. However, if you are saving a Deployment Packager command line with clear username and password in a text or batch file, ensure that it is secure.
-opwd <obfuscated_password>
Obfuscated password. For information on how to obfuscate passwords, see knowledgebase article 13094 .
-nocheck
The paths to the central installation directory and to the output packages are not checked for correctness.
-s
Silent installation.
-ni
Non-interactive installation. This option is not available when packaging encryption.
Other options
Any other options are packaged to be run with the installer setup file.
34
