[KB7277] Use ESET CMD (ecmd.exe) to import/export ESET security application configuration

Issue

Details


Click to expand

ESET CMD (ecmd.exe) allows you to use advanced ecmd commands to import and export security application configurations, change the status of individual security features, or pause certain security features for a short time without the need to edit existing policies or create new ones.

Advanced ecmd commands are applied in real time, unlike policies, which may not take effect until after a device reboots.

You can also run commands—including ecmd commands—on managed client devices remotely from ESET PROTECT or ESET PROTECT On-Prem using the Run Command client task. For more information, see Run Command (ESET PROTECT) or Run Command (ESET PROTECT On-Prem).


Solution

Enable advanced ecmd commands in an ESET security application on a client device

Advanced setup password required for authorization

To use ESET CMD with an authorization method (recommended), set the Advanced setup password.

Using ESET CMD without an authorization method is not recommended, as it allows the import of any unsigned configuration, which can lead to unauthorized or potentially unsafe changes to the application configuration.

List of ecmd commands

To view the list of ecmd commands, see ESET CMD > List of ecmd commands.

  1. Open the main program window of your Windows ESET application.

  2. Press F5 to open Advanced Setup.

  3. Click User interface, expand ESET CMD, enable the toggle next to Enable advanced ecmd commands and click OK.


Import and export ESET security application configuration with ESET CMD

Location of ecmd.exe

ESET CMD (ecmd.exe) is located in the ESET installation directory, typically: C:\Program Files\ESET\ESET Security.

This directory is not automatically added to the system PATH. To use ESET CMD (ecmd.exe), either manually add the directory to the PATH environment variable or run the commands from the installation directory.

Export ESET security application configuration with ESET CMD
  1. Create the destination folder for the configuration, for example: C:\config.

  2. Open Command Prompt as administrator, and run:

    ecmd /getcfg C:\config\settings.xml

    Replace C:\config with the destination folder location and settings.xml with the desired configuration filename.

  3. If you use ESET CMD with authorization, sign the configuration file with the Advanced setup password. For step-by-step instructions, see ESET CMD > Signing an .xml configuration file.

    Which password to use when signing the configuration file

    To sign the configuration file, use the Advanced setup password configured on the device to which you want to import the configuration.

Import ESET security application configuration with ESET CMD
  1. Move the exported configuration file to the device to which you want to import the configuration.

  2. On the target device, open Command Prompt as administrator, and run:

    ecmd /setcfg C:\config\settings.xml

    Replace C:\config\settings.xml with the location of the configuration file to import.