8.2 Using the Command Line to Install

This section guides you through the process of silently installing the Windows agent using the .msi file. By default, the .msi program uses the LocalSystem account for the Windows agent service. However, you can specify a different account to the Windows agent service to provide different permissions when you run the service. The .msi program also includes default values for the installation path and the ports for the agent and Core Services computers, so you do not need to include those parameters in the command line unless you want to specify different values.

To perform a silent installation:

  1. Log in to the computer where you want to install the agent.

  2. Copy the NetIQSecurityAgentForWindows.msi file to the local computer.

  3. Open a command prompt with the Run as administrator option enabled.

  4. (Conditional) If you are installing the Windows agent for the first time, run the following command from the directory containing the .msi file:

    msiexec /i NetIQSecurityAgentForWindows.msi /quiet /lv* Install.log INSTALLDIR=c:\MyDirectory\Agent CORE_HOST=CoreComputer

    For example:

    msiexec /i NetIQSecurityAgentForWindows.msi /quiet /lv* Install.log INSTALLDIR="c:\NetIQ\SCM Windows Agent" CORE_HOST=hou10mktg.product.com

    (Conditional) If you are updating an existing version of the Windows agent, run the following command:

    msiexec /i NetIQSecurityAgentForWindows.msi REINSTALL=ALL REINSTALLMODE=vomus /quiet /lv* Install.log INSTALLDIR=c:\MyDirectory\Agent CORE_HOST=CoreComputer

    For example:

    msiexec /i NetIQSecurityAgentForWindows.msi REINSTALL=ALL REINSTALLMODE=vomus /quiet /lv* Install.log INSTALLDIR="c:\NetIQ\SCM Windows Agent" CORE_HOST=hou10mktg.product.com

    Use the following parameters in the command line.

    INSTALLDIR

    Specifies the target directory for installation. For example, c:\NetIQ\SCM Windows Agent. If you do not include this command, the program uses the %ProgramFiles% environment variable, by default the C:\Program Files or C:\Program Files (x86) folder.

    CORE_HOST

    Specifies the DNS name, NetBIOS name, or IP address of the Secure Configuration Manager Core Services computer. For example, hou10mktg.product.com. If you do not specify a Core Services computer, you must manually register the agent in the Windows console for Secure Configuration Manager.

    CORE_PORT

    Specifies the port that the Core Services computer uses to listen for communications from the agent. If you do not specify the port, Secure Configuration Manager uses the default port 1627. If you specify a value other than 1627, you must update the Network tab of the Core Services Configuration Utility to match the change.

    AGENT_PORT

    Specifies the port that the agent computer uses to listen for communications from Secure Configuration Manager Core Services. If you do not specify the port, Secure Configuration Manager uses the default port 1622. If you specify a value other than 1622, you must update the Network tab of the Core Services Configuration Utility to match the change.

    SERVICE_ACCOUNT

    Specifies the name of the account used to start and run the Windows agent service. For example, AdminJoeV. If you do not specify a service account name, Secure Configuration Manager uses the LocalSystem account.

    SERVICE_PASSWORD

    Specifies the password for the specified Service Account Name. For example, p@SSw0rd. If you specify the LocalSystem account, you do not need to specify a password.

  5. To enable complete functionality in the Windows agent after installation, on the computers where the agent is installed, start the following Windows services:

    • DHCP Client

    • Workstation