[KB7970] ESET Endpoint Encryption Windows Installer (MSI) FAQ

Solution

ESET Endpoint Encryption windows installer FAQ | Command line parameters

ESET Endpoint Encryption windows installer FAQ

The installation for ESET Endpoint Encryption (EEE) is a Windows Installer (MSI) package. This enables deployment using a variety of methods. The EEE installation is provided as either a 32-bit (x86) or 64-bit (x64) package.

Localized versions are available in various languages. Aside from these differences, the same package is used for all editions (license types) of EEE and the same package is used for managed users.

1. How can I deploy EEE client software?
   There are three options to deploy EEE client software:
   
   
   • Manually download and run the installation package from a network location or any removable media such as a USB flash drive or CD-ROM.
   • Use the Push Install feature from the EEE Server.
   • Use the GPSI (Group Policy Software Installation). GPSI is available in any Active Directory Domain Services environment and is often used by third-party enterprise management software.
     
     
2. Can I use capture and replay action software with EEE?
   We do not support or recommend installation via the use of software that attempts to capture and replay actions performed by our install. This may result in all or some components of the software being installed incorrectly and will remove additional safety checks in place to protect users. The most important of these prevents end-users from removing the software when their workstation is Full Disk Encrypted. The Windows Installer package should come directly from our website, or downloaded from an EEE Server.
   
   
3. Should I use a Merged Installation package?
   When managing clients using the EEE Server a Merged Installation package must first be downloaded or pushed from an EEE Server. It is vital that a merged installation package is used as this pairs the client workstation with the EEE Server for secure communication. When EEE is installed, the Workstation Policy chosen when downloading or pushing the install package is applied for all users.
   
   
4. Can I use Managed Uninstall Mode with the Merged Installation package?
   Yes. When downloading or pushing the installation from an EEE Server you can also enable Managed Uninstall Mode which will block the removal of EEE by all users (including Administrators) unless a unique Uninstall Code or optional password is supplied.
   
   
5. What if I already downloaded a standalone client?
   If you already downloaded and installed a standalone client on a workstation you can convert the standalone client to a managed client.
   
   
6. How can I activate a user?
   EEE provides a single-click activation option. All that is required, providing options are set correctly, is for the user to click a link in an email.
   
   
7. Can I activate a user during installation?
   No. Activation has to take place when the user being licensed is logged in to their Windows profile. EEE is licensed and managed on a per-user basis. During deployment, especially when using push install, installation is often performed in the context of an Administrative user meaning there is nothing to connect a license to a user during installation.
   
   
8. Do I need to use the Merged Installation package when upgrading EEE?
   EEE does not usually require the use of a Merged Installation package when upgrading. The exception to this is where the Workstation being upgraded was originally installed using a package with Managed Uninstall Mode enabled. In this case, users must upgrade by using an installation package that has also been generated from an EEE Server via Download Merged Installation with Managed Uninstall Mode enabled or through the use of the client updater.
   
   
9. How can I uninstall EEE?
   Uninstall EEE from a workstation.
   
   
10. How can I create a diagnostic log for installation troubleshooting?
    If a problem with the installation or uninstallation appears to be connected to the EEE Window Installer package users can enable logging to investigate further.

Command line parameters

The EEE installer is a standard Windows Installer (MSI) package. All standard msiexec.exe command line parameters can be used. 

Silent installation

Use the /q command line switch to install silently when calling the client package as a parameter of msiexec. An automatic reboot will occur after the installation is completed.

Command line: msiexec /i "EEE.msi" /q 

Silent installation without the automatic reboot

Use the /q command line switch and the REBOOT command to install silently and stop automatic rebooting of the system. You will not be able to use EEE until a full reboot has been performed.

Command-line: msiexec /i "EEE.msi" /q REBOOT=ReallySuppress 

Uninstall

All uninstall actions require a unique identifier (UID). This identifier changes for every version of EEE, and changes each time a merged installation package is downloaded from an EEE Server.

Use command line to find the UID for EEE

1. Open an elevated (Administrator) command prompt.
   
   
2. Type wmic product where "Name like 'EEE'" get Name, Version, IdentifyingNumber.
   
   
3. Wait until the result is displayed. Results similar to the following will be displayed:
   
   

   IdentifyingNumber	Name	Version
   {09EEF587-681B-4974-8C02-22ED3EC3127A}	ESET Endpoint Encryption	4.9.4

4. Take note of the UID, for example {09EEF587-681B-4974-8C02-22ED3EC3127A}.

Use regedit to Find the UID for EEE

1. Press the Windows key  + R, type regedit, and click OK.
   
   
2. Click regedit.exe.
   
   
3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products.
   
   
4. Search for ESET Endpoint Encryption.
   
   
5. The key selected is the Windows Installer entry for the EEE installation.
   
   
6. The UninstallString and ModifyPath values contain the UID.

Starting uninstallation from the command line

Command line: msiexec /x {UID} 

Additional parameters for a silent uninstall

The same parameters that are used during installation, can be used when uninstalling.

• Silent uninstall from the command line with an automatic reboot

Command line: msiexec /x {UID} /q

• Silent uninstall from the command line without an automatic reboot

Command line: msiexec /x {UID} /q REBOOT=ReallySuppress

Remove EEE with Managed Uninstall

To uninstall EEE the uninstall code and UID switch must be added to the command when managed uninstall was used in the original MSI. 

Command line: msiexec /x {UID} /q DLPMSICA_UNINSTALLCODE="UNINSTALL CODE HERE"