Installer command-line options for Mac

The Sophos Central Endpoint installer for Mac supports the following command-line options.

Mac command line options

Warning On macOS 11 Big Sur you must move the SophosInstall folder to the user's Home folder.


Example usage


Trailing argument


--quiet --install

Runs the installer without displaying the user interface.


--devicegroup <Central group>

Specifies the Sophos Central device group to join the endpoint to.

A group to join. If it doesn't exist, it is created.

Message relays

--messagerelays <space-separated message relay list of IPs including the port>

Specifies a list of message relays to use.

The IP address of the message relay must be specified along with the port, 8190.

Example: --messagerelays IPADDRESS:8190 IPADDRESS:8190

Proxy address

--proxyaddress <custom proxy address>

Specifies a custom proxy to use.

URL without protocol (uses HTTPS).

Proxy port

--proxyport <proxy port>

Specifies a port that the proxy uses.

Port for the proxy.

Proxy username

--proxyusername <custom proxy user name>

If a custom proxy has been specified, set the username with this option.

The username for the proxy.

Proxy password

--proxypassword <custom proxy password>

If a custom proxy and username have been specified, set the password with this option.

The password for the proxy.

Computer name override

--computernameoverride <override for computer name>

Overrides the name of the computer to be used in Sophos Central.

Custom computer name.

Computer description override

--computerdescriptionoverride <override for description>

Overrides the description of the computer to be used in Sophos Central.

Custom computer description.

Domain name override

--domainnameoverride <override for domain>

Overrides the domain name of the computer to be used in Sophos Central.

Custom domain name.

Preferred domain name for usernames in Sophos Central


Sets the client to send usernames as domain\username instead of machine\username.

Registration server

--mgmtserver <registration server URL>

Specifies the MCS server to connect to.

MCS server URL.

Customer token

--customertoken <the customer token>

Specifies the token of the Sophos Central customer to associate the endpoint with.

A UUID which maps to a customer.

Products to install

--products <space separated list of products to install>

Specifies a list of products to install. If you specifiy a product that you don't have a license for, then it isn't installed.

A list of products to install, space-separated. Available options are:

antivirus, intercept, deviceEncryption or all.

Note The Mac installer is aware of all the message relays and update caches when the installation is downloaded. Changes to caches and relays mean that you need to download a new installation. You can specify relays using the command line as well.

Mac examples

Install Sophos Anti-Virus and Intercept X without user interaction:

sudo ./Sophos\\ Installer --products antivirus intercept --quiet

Install using a proxy:

sudo ./Sophos\\ Installer --proxyaddress <ProxyIP/FQDN> --proxyport <Port>

Install using a message relay:

sudo ./Sophos\\ Installer --messagerelays