Skip to content

Installer command-line options for Mac

The Sophos Central Endpoint installer for Mac supports the following command-line options.

Command-line options


On macOS 11 Big Sur you must move the SophosInstall folder to the user's Home folder.


Runs the installer without displaying the user interface.

`--quiet --install`


Specifies the Sophos Central device group to join the endpoint to.

`--devicegroup <Central group\>`

Trailing argument

A group to join. If it doesn't exist, it is created.

Message relays

Specifies a list of message relays to use.

`--messagerelays <space-separated message relay list of IPs including the port\>`

Trailing argument

The IP address of the message relay must be specified along with the port, 8190.


--messagerelays IPADDRESS:8190 IPADDRESS:8190

Proxy address

Specifies a custom proxy to use.

`--proxyaddress <custom proxy address\>`

Trailing argument

URL without protocol (will use HTTPS)

Proxy port

Specifies a port that the proxy uses.

`--proxyport <proxy port\>`

Trailing argument

Port for the proxy.

Proxy username

If a custom proxy has been specified, set the username with this option.

` --proxyusername <custom proxy user name\>`

Trailing argument

The username of the proxy.

Proxy password

If a custom proxy and username have been specified, set the password with this option.

`--proxypassword <custom proxy password\>`

Trailing argument

The password for the proxy.

Computer name override

Overrides the name of the computer to be used in Sophos Central. Don't use quotes around the computer name. You can only use this option for a new installation.

`--computernameoverride <override for computer name\>`

Trailing argument

Custom computer name.

Domain name override

Overrides the domain name of the computer to be used in Sophos Central. You can only use this option for a new installation.

`--domainnameoverride <override for domain\>`

Trailing argument

Custom domain name.

Preferred domain name for usernames in Sophos Central

Sets the client to send usernames as domain\\username instead of machine\\username. You can only use this option for a new installation.


Registration server

Specifies the MCS server to connect to.

--mgmtserver <registration server URL\>

Trailing argument

MCS server URL.

Customer token

Specifies the token of the Sophos Central customer to associate the endpoint with.

`--customertoken <the customer token\>`

Trailing argument

A UUID which maps to a customer.

Products to install

Specifies a list of products to install. If you specifiy a product that you don't have a license for, then it isn't installed.

--products <space separated list of products to install\>

Trailing argument

A list of products to install, comma-separated.

Available options are:

  • antivirus

  • intercept

  • mdr

  • deviceEncryption

  • all


The Mac installer is aware of all the message relays and update caches when the installation is downloaded. Changes to caches and relays mean that you need to download a new installation. You can specify relays using the command line as well.

For more help with the installer, see Installer precheck messages.

Mac examples

  • Install Sophos Anti-Virus and Intercept X without user interaction:

    sudo ./Sophos\\ Installer --products antivirus intercept --quiet

  • Install using a proxy:

    sudo ./Sophos\\ Installer --proxyaddress <ProxyIP/FQDN> --proxyport <Port>

  • Install using a message relay:

    sudo ./Sophos\\ Installer --messagerelays

Back to top