FortiEDR
FortiEDR automates the protection against advanced threats, pre and post-execution, with real time orchestrated incident response functionality.
kwernecke
Staff
Staff
Article Id 199116
Description This article describes Basic MSI Commands.
Scope FortiEDR.
Solution

Basic Commands

Action

Command

Notes

Install

msiexec /i installer.msi

 

Uninstall

msiexec /x installer.msi

 
 

msiexec /x GUID

GUID is the unique id of the product, can be used to uninstall if there is no installer available

Reduced UI Uninstall

msiexec /x installer.msi /qb

This is the same UI level as used by uninstall from control panel

Create log file

msiexec /i installer.msi /l*vx log.log

Change /i to /x to get uninstaller log

Silent install

msiexec /i installer.msi /qn

Example: cmd for custom installers: msiexec /i CollectorInstaller64_4.1.0.1168.msi /qn 

Silent uninstall

msiexec /x installer.msi /qn

To uninstall collector with no UI, must run cmd as admin. Must provide UPWD (PWD for version before 2.1).

Cache repair

msiexec /fv installer.msi

If windows installer cache is corrupted, this cmd will reinstall the product. Must be run as admin.

 

Installer parameters 

 

When a collector is downloaded it has all the configuration for

the environment. Please use the following ONLY if the msi needs to be configured.

To set a property, add PROPERTY=value to the command line. 

 

Name 

Description / Use 

Notes 

PWD 

registration password 

The password used to register with the aggregator. Required to stop and uninstall collector 

UPWD 

uninstall password 

Used during silent uninstall 

EPWD 

registration password 

Encrypted registration password. Used by silent installer generator. 

AGG 

aggregator address 

The aggregator address in format ip:port or hostname:port 

GWADDR 

gateway address 

The ip of the machine the core is running on. Only for core installer. 

DEFGROUP 

default group 

The default group for collector to be registered to. Optional. 

ORG 

organization 

The organization the collector or core belongs to 

RMCONFIG 

remove program data 

During uninstall, if this property is set will remove the program data directory 

ALT 

altitude 

Set the default altitude value 

VDI 

use vdi 

Set vdi to true 

NEEDREBOOT 

disable until reboot 

Set "SOFTWARE\\enSilo\\Options\\DisableUntilReboot" to 1 

FORCE=1 

corruption check 

Check msi in windows installer cache for corruption. 

o    Installer Files 

    • These can be requested and downloaded from the management console under Administration -> Licensing -> Request Collector Installers .

o    Note: Choose the DNS option when selecting the aggregator.

Contributors