Create a protection package using the CLI

Before using this section, read Create a protection package using the GUI.

To run the Deployment Packager in command line mode, use the following format as a minimum:

DeploymentPackager.exe -cli -mng yes -cidpath <CIDpath> -sfxpath <SFXpath> -crt R

where <CIDpath> is the path to the relevant central installation directory and <SFXpath> is the path of the output package. -crt R automatically removes third-party protection software.

The packager returns a value of zero when run successfully and non-zero for an error condition, together with a message to standard error method (stderr).

Command-line options

You can also use other command line qualifiers, as listed below.

-mng yes

Enable Remote Management.

-mngcfg

Specify path to custom Remote Management configuration files.

-scf

Install Sophos Client Firewall.

-ntp

Install Sophos Network Threat Protection.

-hmpa

Install Sophos Exploit Prevention.

-patch <Management Server URL>

Install Sophos Patch Agent with the Management Server address. The address should be a fullyqualified domain name. Example: https://<server name>.

-sauonly

Include Sophos AutoUpdate only (chosen remote management, firewall, NTP and SSP components are downloaded from the update source). If this option is not selected, chosen components are included in the package.

-arch <32bit, 64bit>

Specify the architecture of the package you want to create, either 32-bit or 64-bit.

Note This option is only applicable if Patch is being installed from packaged CID. If you choose 32-bit or 64-bit the package can be installed only on specific 32-bit or 64-bit operating systems. If you do not specify any architecture, a single package is created which can be installed on both 32 and 64-bit operating systems, but the package size will be large.

-updp <update_path>

Updating path.

-user <username>

-pwd <password>

Username and password. The packager obfuscates these in the package. However, if you are saving a Deployment Packager command line with clear username and password in a text or batch file, ensure that it is secure.

-opwd <obfuscated_password>

Obfuscated password. For information on how to obfuscate passwords, see knowledge base article 13094.

-s

Silent installation.

-ni

Non-interactive installation.

Any other options are packaged to be run with the installer setup file.