Use the following command-line instructions to manually install or upgrade DE 7.1 either locally or with a third-party deployment tool:
IMPORTANT:
- You must install a supported version of McAfee Agent (MA) before you use the command-line method. For more information, see KB79422 - Supported platforms for Drive Encryption 7.x.
- Do not rename the MSI files. Doing so prevents future upgrades through ePolicy Orchestrator (ePO).
- The DEAgent package must always be installed before the DE package.
- Starting with DE 7.2.10, EpeFprTrainer.exe is not installed by default. To install the executable, use the command-line switch INSTALL_FPR=1. This new argument can only be used with the DE client MSI (MfeEEPC{32,64}.msi), and not the DE Agent MSI.
Prerequisites for using DE in FIPS mode:
- You must install ePO in FIPS mode. For DE 7.x supported environments, see KB79422 - Supported platforms for Drive Encryption 7.x.
- DE client packages must be checked in to ePO.
- If you do not install both ePO and DE in FIPS mode, the configuration does not operate in the FIPS-certified manner.
DE must be operating in FIPS mode at the time of client activation. It is the only way to make sure that keys are generated in a FIPS-approved manner. If you upgrade an active DE client in non-FIPS mode to a FIPS-mode version of DE 7.x, it does not imply that the client is running in FIPS mode. You must decrypt, deactivate, and then reactivate an active client using a FIPS-mode client install for it to be FIPS-compliant.
- You must install the DEAgent before the DE 7.x package.
- DE 7.1.x requires another switch: FIPS_MODE=0 or FIPS_MODE=1
- If you do not want to install in FIPS mode, use FIPS_MODE=0
| Installation type (FIPS Mode) |
Operating
System |
Command line |
New Installation
(no previous version of DE) |
64-bit |
msiexec.exe /i MfeEEPC64.msi FIPS_MODE=1 /norestart |
| 32-bit |
msiexec.exe /i MfeEEPC32.msi FIPS_MODE=1 /norestart |
| Upgrade existing DE client |
64-bit |
msiexec.exe /i MfeEEPC64.msi REINSTALL=ALL REINSTALLMODE=vomus FIPS_MODE=1 /norestart |
| 32-bit |
msiexec.exe /i MfeEEPC32.msi REINSTALL=ALL REINSTALLMODE=vomus FIPS_MODE=1 /norestart |
NOTE: For the above installation types, the following standard extra arguments are also supported:
| /q |
Quiet |
| /norestart |
No restart |
| /l*v path\logfile.txt |
Used for extra MSI logging. For example, /l*v c:\tmp\logfile.txt |
