Loading...

Knowledge Center


How to install/upgrade to Drive Encryption 7.x from the command line
Technical Articles ID:   KB79786
Last Modified:  8/22/2017
Rated:


Environment

McAfee Drive Encryption (DE) 7.2.x, 7.1.x

For details of DE supported environments, see KB79422.

Summary

Use the following command-line instructions to manually install or upgrade DE 7.1 either locally or in conjunction with a third-party deployment tool: IMPORTANT:
  • You must install a supported version of McAfee Agent (MA) before using the command line method. For more information, refer to KB79422, which is linked in the Environment field of this article.
  • Do not rename the MSI files; this will prevent upgrading through ePolicy Orchestrator (ePO) at a later date.
  • The DEAgent package must always be installed before the DE package.

Prerequisites for using DE in FIPS mode:

  • You must install ePO in FIPS mode. For DE 7.x supported environments, refer to KB79422, which is linked in the Environment field of this article.
  • DE client packages must be checked in to ePO.
  • If you do not install both ePO and DE in FIPS mode, the configuration does not operate in the FIPS-certified manner.
    DE must be operating in FIPS mode at the time of client activation to ensure that keys are generated in a FIPS-approved manner. If you upgrade an active EEPC client in non-FIPS mode to a FIPS-mode version of DE 7.x, it does not imply that the client is running in FIPS mode. You must decrypt, deactivate, and then reactivate an active client using a FIPS mode client install for it to be FIPS-compliant. 
  • You must install the DEAgent before the DE 7.x package.
  • DE 7.1.x requires an additional switch: FIPS_MODE=0 or FIPS_MODE=1
  • If you do not want to install in FIPS mode, use FIPS_MODE=0
  • For additional information about FIPS Mode, see PD24867.
Installation type (FIPS Mode) Operating
system
Command line 
New Installation
(no previous version of DE/EEPC)
64-bit msiexec.exe /i MfeEEPC64.msi FIPS_MODE=1 /norestart
32-bit msiexec.exe /i MfeEEPC32.msi FIPS_MODE=1 /norestart
Upgrade existing DE/EEPC client 64-bit msiexec.exe /i MfeEEPC64.msi REINSTALL=ALL REINSTALLMODE=vomus FIPS_MODE=1 /norestart
32-bit msiexec.exe /i MfeEEPC32.msi REINSTALL=ALL REINSTALLMODE=vomus FIPS_MODE=1 /norestart

NOTE: For all of the above, the following standard additional arguments are also supported:
 
/q quiet
/norestart no restart
/l * v path\logfile.txt Used for additional MSI logging. For example, /l* v c:\tmp\logfile.txt

Solution

Command line options for a new install of DE 7.x
 

Installation/Upgrade type DE
Agent/Client
Package
Operating
System
Command line
New install of DE 7.x DEAgent 64-bit msiexec.exe /i MfeEEAgent64.msi
32-bit msiexec.exe /i MfeEEAgent32.msi
DE Client 1 64-bit msiexec.exe /i MfeEEPc64.msi
32-bit msiexec.exe /i MfeEEPc32.msi
 
1 If you do not include the FIPS_MODE= option, the installer defaults to FIPS_MODE=0.

Solution

Command-line options for upgrading from EEPC 7.2.x
 

Installation/Upgrade type DE
Agent/Client
Package
Operating
System
Command line
Upgrade from EEPC 7.2.x to DE 7.x
DEAgent
64-bit msiexec.exe /i MfeEEAgent64.msi REINSTALL=ALL REINSTALLMODE=vomus
32-bit msiexec.exe /i MfeEEAgent32.msi REINSTALL=ALL REINSTALLMODE=vomus
DE Client 1
64-bit msiexec.exe /i MfeEEPc64.msi
32-bit msiexec.exe /i MfeEEPc32.msi
 
1 If you do not include the FIPS_MODE= option, the installer defaults to FIPS_MODE=0.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.