EXEC PRIVILEGED mode command details


Enables app analytics, which causes Ivanti EPMM to collect data about apps installed and available to devices. When app analytics is enabled, the Ivanti EPMM Admin Portal displays the apps dashboard at Dashboard > Apps.

When app analytics is enabled, Ivanti EPMM collects app data once each day at 5:00 A.M. UTC.

Important Enabling app analytics can impact Ivanti EPMM performance at the time when the app analytics data collection job runs.

Contact Technical Support if you want app analytics to run at a different time or more frequently than once each day.


#appanalytics on

clear arp-cache

Clears the ARP cache on Ivanti EPMM, listing each cleared ARP entry. The ARP cache stores a mapping of IP addresses with link layer addresses, which are also known as Ethernet addresses and MAC addresses. If the mapping in the cache is stale, use this command to clear the cache. A mapping can become stale, if, for example, an IP address has moved to a new host.


#clear arp-cache


Deleting Arp Entry for

Deleting Arp Entry for

configure terminal

Enters configuration mode. See CONFIG mode commands for the commands you can enter in configuration mode.


#configure terminal


Enter configuration commands, one per line.


dbcleanup purge_data

Deletes old data from the database. Requires portal service restart.

You can optionally provide an integer parameter that is a number of days. Data older than the specified number of days is deleted. If you do not specify a parameter, all old data is deleted.


#dbcleanup purge_data


Warning:Maintenance mode command.

Takes several minutes.

Portal service will be stopped during this operation. Proceed? (y/n)y

Stopping tomcat: [ OK ]


Stopping elasticsearch: [ OK ]

/mi/bin/purgedb: Deleting.....


Returns to EXEC mode.




diskcleanup retired_devices

Removes retired devices data from the disk.


#diskcleanup retired_devices


diskCleanup.pl - VSP disk cleanup script


[2] Finding device resources to delete...



Searching and removing device files...



Found 0 devices with devices data, removed 0 devices' data.

0 bytes freed up



Returns to EXEC mode.





Terminates the CLI session and closes the terminal window.


Commands to assist with managing Ivanti EPMM failover. Failover allows a secondary Ivanti EPMM to take over if the primary Ivanti EPMM fails when your installation requires high availability. For more information about implementing a high availability solution, contact Technical Support.

High availability is a non-standard Ivanti EPMM feature.


Updates the grub configuration. Requires a reload.

This command should not be used on VMs. It should be used only for the physical box.



install rpm

Installs VMware Tools. If your Ivanti EPMM runs in VMware, use this command to install the VMware Tools installation package. The installation package is an RPM file or a .tar.gz. The parameter specifies where to find the file.

Warning! Use this command only to install third-party RPM or tar files that Ivanti has approved, such as VMware Tools.

Table 11.  install rpm command parameters




Installs the RPM from a CDROM.




Installs the RPM from a URL.

Specify the URL as the final parameter.


Displays a list of installed third-party RPMs.

To uninstall a third-party RPM, use no install rpm. See no install rpm.


The following example shows the initial output when installing VMwareTools from CD ROM. Although not shown here, the installation continues with VMwareTools configuration.


#install rpm cdrom

mount: block device /dev/cdrom is write-protected, mounting read-only Select rpm/tar file to install 0. None - Do not install any thing 1


Enter your selection: 1

Installing /mnt/VMwareTools-4.0.0-171294.tar.gz

Creating a new VMware Tools installer database using the tar4 format.

Installing VMware Tools.

In which directory do you want to install the binary files? [/usr/bin]

What is the directory that contains the init directories (rc0.d/ to rc6.d/)? [/etc/rc.d]

What is the directory that contains the init scripts? [/etc/rc.d/init.d]

In which directory do you want to install the daemon files? [/usr/sbin]

In which directory do you want to install the library files? [/usr/lib/vmware-tools]


The path "/usr/lib/vmware-tools" does not exist currently. This program is going to create it, including needed parent directories. Is this what you want? [yes]

In which directory do you want to install the documentation files? [/usr/share/doc/vmware-tools]

The path "/usr/share/doc/vmware-tools" does not exist currently. This program is going to create it, including needed parent directories. Is this what you want? [yes]

The installation of VMware Tools 4.0.0 build-171294 for Linux completed successfully. You can decide to remove this software from your system at any time by invoking the following command: "/usr/bin/vmware-uninstall-tools.pl".

Before running VMware Tools for the first time, you need to configure it by invoking the following command: "/usr/bin/vmware-config-tools.pl". Do you want this program to invoke the command for you now? [yes]


no install rpm

Uninstalls an Ivanti EPMM-approved third-party RPM. See install rpm.

For the list of “no” commands possible in CONFIG mode, see no.


Turns off Ivanti EPMM. This command not only logs you out of the CLI, but shuts down the operating system and powers off Ivanti EPMM.




System configuration may have been modified. Save? [yes/no]: yes

Configuration saved.

Proceed with power-off? [yes/no]


Halts Ivanti EPMM and performs a cold restart.




System configuration mat have been modified. Save? [yes/no]: yes

Configuration saved.

Proceed with reload?


Performs operations on the Tomcat and iptables services. You can start and stop these services, and check their status.

Table 12.  Service command parameters



service name

The name of the Linux service. Possible values are:

  • tomcat
  • iptables


The operation to perform on the specified service. Possible values are:

  • start
  • stop
  • status


#service tomcat start

Starting tomcat: Using TOMCAT_ALLOCATION_MB=11235





#service iptables start

Applying iptables firewall rules: [OK]


#service iptables status

Table: filter

Chain INPUT (policy ACCEPT)




#service iptables stop

Flushing firewall rules: [OK]

Setting chains to policy ACCEPT: filter nat [OK]

Unloading iptables modules: [OK]


Runs the setup wizard to reconfigure an installation. This command takes you through the initial configuration of Ivanti EPMM.




VSP 4.5.2 Build 32 (Branch r4.5.2)

Welcome to the Mobile Iron Configuration Wizard

Use the ‘-’ character to move back to the previous field

Continue with configuration dialog? [yes/no]:

show kparams

Shows the kernel parameters used at runtime. This command executes the Linux command /sbin/sysctl -p internally.


#show kparams

show portalacl

Displays the configured portal Access Control Lists (ACLs), which restrict access to various portals of Ivanti EPMM. The access is restricted to certain servers or networks by specifying their IP addresses or network/mask pairs.

You configure the portal ACLs in the Ivanti EPMM System Manager, Security > Access Control List > Portal ACLs, described in “Access Control Lists” in the Ivanti EPMM System Manager Guide.


#show portalacl



Module + Access Allowed From



show running-config

Displays the configuration under which Ivanti EPMM is currently running.

The following table lists the configuration information that this command displays. It also shows where in the Ivanti EPMM System Manager to configure this information.

Table 13.  show running-config command information

Configuration Displayed

Ivanti EPMM System Manager User Interface

Network interfaces

Settings > Network > Interfaces

DB config

Not used.

Network routes

Settings > Network > Routes

ssh and ntp status

Settings > CLI

DNS servers

Settings > DNS and Hostname

Ivanti EPMM host name and domain name

Settings > DNS and Hostname

NTP servers

Settings > Date and Time (NTP)

CLI session timeout

Settings > CLI

Ivanti EPMM System Manager user names

Security > Identity Source > Local Users

Portal Access Control Lists

Security > Access Control Lists > Portal ACLs


#show running-config

show sshd_authorized_key

Displays the public key for SSH authorization if one has been added using the sshd_authorized_key command.


#show sshd_authorized_key

SSHD Authorized Key:

WtkePXX1k4lXR8e8lBI2MPhXOfiSIDGx admin

show statichost

Displays the configured static hosts. The static hosts are configured using the Ivanti EPMM System Manager, in Settings > Static Hosts, described in the Ivanti EPMM System Manager Guide. You can also configure static hosts using the CLI command statichost.


#show statichost


IP Address FQDN

+------------------+------------------------------------- mysentry.mycompany.com

show system

Displays system information as specified by the parameter. Most parameters result in displaying output from Linux commands. For more information about Linux command output, see the Linux man page description available on the Web.

Specify one of the following parameters:

Table 14.  show system command parameters




Displays whether the PCIe Active State Power Management subsystem is disabled on physical Ivanti EPMM appliances.


Displays disk usage information for each mounted file system.

Linux command: df -h


Displays the memory usage by each program and the total memory usage.


Displays a snapshot of the running tasks and threads, including their command-line parameters.

Enter h for help on navigating the output.

Enter q to quit.

Linux command: top -bcHss -n 1


Displays the running tasks, memory usage, and the uptime status, updating the display in real-time.

Enter h for help.

Enter q to quit.

Linux command: top


Displays the following information:

  • the current time
  • the system status (up)
  • how long the system has been running
  • how many users are currently logged on
  • the system load averages for the last 1, 5, and 15 minutes

Linux command: uptime


Displays the list of Ivanti EPMM System Manager users.


#show system disk


Filesystem Size Used Avail Use% Mounted on

/dev/sda3 80G 3.0G 73G 4% /

/dev/sda1 99M 12M 82M 13% /boot

tmpfs 7.9G 8.0K 7.9G 1% /dev/shm


#show system user


#show system uptime


18:23:11 up 23:15, 2 users, load average: 0.00 0.00 0.00


#show system toprt


top - 18:25:57 up 23:15, 2 users, load average: 0.00 0.00 0.00

Mem: 1643612k total, 3412864k used, 13023136k free, 148648k buffers

Swap:1849804k total, 0k used, 18490804k free, 14869890k cached


19186 root 20 0 67088 2732 1292 S 0.0 0.0 0:00.62 -bash




show tech

Gets Ivanti EPMM logs and database dumps for diagnostics. This command transfers the diagnostic files to a server that you specify, using either HTTP(S) or SFTP.

Table 15.  show tech command parameters



http sftp

Select the transport method for the files.


When using HTTP, enter the URL for the destination server. For example:



When using SFTP, enter the host name or IP address of the destination server. For example:



Enter No. Enter Yes only if Ivanti EPMM had restarted since the issue occurred.


Enter the user name for logging in to the server that you specified. The command will prompt you for the corresponding password.


Enter the support ticket number, if you have one. This parameter is optional.

You can use the Ivanti EPMM System Manager to manipulate logs. See “Working with logs”, in the Ivanti EPMM System Manager Guide.



#show tech http https://support.ivanti.com/uploads No mysupportusername

Enter Password for user mysupportusername:

software checkupdate

Checks the configured software repository for available updates to Ivanti EPMM. The repository information is configured using the Ivanti EPMM System Manager, in Maintenance > Software Updates.


#software checkupdate

software update

Installs the updates located using software checkupdate. Use the reload command after using the software update command.


#software update




Opens an ssh connection.

Specify the following parameters:

Table 16.  ssh command parameters




The ID of the user making the connection.


The IP address or hostname of the target server.


#ssh miadmin


[email protected]’s password:


You can initiate a background system monitor run from the Ivanti EPMM CLI. The system monitor information helps with capturing crucial diagnostic information when a system is malfunctioning.

Following the command, enter the number of iterations and intervals:

Table 17.  system-monitor command parameters



<iterations> Range: Any positive integer. Default: 30 iterations
<interval> Optional. Range: Any positive integer. Default: 5 seconds

For example, entering system-monitor 30 5 results in 30 iterations of 5 seconds each. You can also specify just the iterations. For example, #system-manager 65 would result in 65 iterations of 5 seconds each.


#system-manager 45 10

#system-manager 60


Opens a telnet connection.

Specify the following parameter:

Table 18.  telnet command parameters




The IP address or hostname of the target server.




Saves configuration changes.

The changes you make in your CLI session are not saved across reboots of Ivanti EPMM, although they are remembered between CLI sessions. Therefore, to ensure your changes are not lost, use the write command to save your changes.

If you do not save your changes, a reboot will return Ivanti EPMM to its previously-saved configuration.