Silently Installing the Agent by Command Line for Windows

Complete a silent install of the agent using a command line. When configured using command line parameters, the installation of the agent can be run unattended.

Prerequisites:

  • Ivanti Endpoint Security is installed and initial replication has been completed. For details regarding installing Ivanti Endpoint Security, refer to the Ivanti Endpoint Security: Server Installation Guide.
  • Ensure that your endpoint meets the minimum requirements for agent installation. For additional information, refer to Agent Requirements.
  • Ensure any antivirus software installed on the computer is disabled.
  • Ensure you are logged on with an administrative user account.
  • Download the Windows agent installer. Refer to Downloading the Installer

After downloading the agent installer for Windows, you can begin a silent install from the Windows Command Prompt. In addition to setting the Ivanti Endpoint Security URL (or IP), you can define a proxy for agent-to-server communication and auto-assign groups during silent installation..

  1. Using the Start Menu or Start Screen, open a Command Prompt.
    The Command Prompt opens.
  2. Change directories to the root directory.
    Type cd\ and press ENTER.
    The directory is changed to the root directory.
  3. Change directories to the location where you downloaded the installer.
    Type cd <Your\Download\Directory> and press ENTER.
    The directory changes to the directory where you downloaded the installer.
  4. Install the agent by typing the install command followed by parameters.

    If you downloaded the 64-bit installer, replace lmsetup.exe with lmsetupx64.exe when typing install commands.

    5. Example parameters:

    lmsetup.exe install SERVERIPADDRESS="<xxx.xxx.xxx.xxx>"

    (required parameters)

    lmsetup.exe install SERVERIPADDRESS="<xxx.xxx.xxx.xxx>" PROXYADDRESS="<xxx.xxx.xxx.xxx>" PROXYPORT="<xx>" PROXYUSERNAME="<ProxyUser>"

    PROXYPASSWORD="<ProxyUserPassword>" MODULELIST="<Module>|<Module2>" GROUPLIST="<Group>|<Group2>"

    (all parameters)

When installing the Ivanti Endpoint Security agent from a command line, you can add a number of parameters to modify how the agent is installed on the endpoint. Read the following table for detailed instructions about how to use each parameter. Remember the following information when using these parameters:

  • Parameters do not have to be entered in a specific order.
  • The only required parameter is SERVERIPADDRESS.
  • The parameter name may be capitalized or lowercase, or mixed.
  • Surround variables with double quotes. Words wrapped in carrots are variables relative to your environment. For example when defining the SERVERIPADDRESS parameter, you might type SERVERIPADDRESS="10.19.0.133"
  • With the exception of password variables, variables are not case sensitive.

Description of Installation Parameters:

Parameter

Description

SERVERIPADDRESS

The IP address of your Ivanti Endpoint Security server.
Example: SERVERIPADDRESS="<xxx.xxx.xxx.xxx>"

This can also be a local name or fully qualified domain name of your Ivanti Endpoint Security server. A fully qualified domain name is recommended over local.

PROXYADDRESS

The IP address for your proxy server.

Example: PROXYADDRESS="<xxx.xxx.xxx.xxx>"

This can also be a local name or fully qualified domain name of your Ivanti Endpoint Security server. A fully qualified domain name is recommended over local.

A Squid proxy server will only properly resolve using a fully qualified domain name.
Refer to Ivanti Community article An Endpoint Shows Offline When Using a Squid Proxy Server for additional information on a Squid proxy server configuration.

PROXYPORT

The port your proxy server is using for communication. Example: PROXYPORT="<xx>"

PROXYUSERNAME

Login user for an authenticated proxy.

Example: PROXYUSERNAME="<ProxyUserName>"

PROXYPASSWORD

Login password for an authenticated proxy. Example: PROXYPASSWORD="<ProxyUserPassword>"

Tip: The password will be encrypted and saved on the endpoint.

GROUPLIST

This parameter adds the target endpoint to existing Ivanti Endpoint Security groups during agent installation. The following list includes information about using this parameter.

  • You can only use this parameter to add endpoints to existing groups. This parameter cannot create new groups.
  • When using this parameter, you can add the endpoint to two or more groups. To add the endpoint to multiple groups, type a pipe symbol | between two group names. Do not type spaces between the group names and the pipe(s).
    Example (single group): GROUPLIST="<Group>"
    Example (multiple groups): GROUPLIST="<Group>|<Group2>|<Group3>"
  • When using this parameter, you can use either the group name or the distinguished name.
    • If two or more groups exist that share the same name, using the group name will add the endpoint to all groups using the name.
    • If two or more groups exist that share the same name, using the distinguished name will add the endpoint to a specific group.
      Example (distinguished name use): GROUPLIST="OU=<Group>,OU=Custom Groups,OU=My Groups"
  • To view your group names and distinguished names, view the Groups page Group Membership view in the Ivanti Endpoint Security Web console.

MODULELIST

This parameter installs Ivanti Endpoint Security endpoint modules along with the Ivanti Endpoint Security Agent during installation. The following list includes information about using this parameter.

  • You can use this parameter to add endpoint modules you are licensed for.
  • When using this parameter, you can add two or more modules. For multiple modules, type a pipe symbol | between two module names. Do not type spaces between the modules names and the pipe(s).
    Example: MODULELIST="<Module>|<Module2>|<Module3>"

The following list includes the MODULELIST parameter for each Ivanti Endpoint Security module:

  • VulnerabilityManagement (Patch and Remediation)
  • ApplicationControl (Application Control)
  • Antivirus (AntiVirus)
  • PowerMgmt (Power Management)
  • DeviceControl (Device Control)

INSTALLDIR

This parameter defines the directory where the Ivanti Endpoint Security agent will be installed.

Example: INSTALLDIR="C:\<Your>\<Install>\<Directory>"

Omitting this parameter installs the agent to the default directory of C:\Program Files\HEAT\EMSSAgent. Only ASCII characters are allowed in the folder name.