Command line options

The Terminal application allows you to enter commands and command line options. The following command line options are available:

Command name Definition Additional parameters (optional)
sgdeadmin

Lists available commands including short help hints.

--help
sgdeadmin --version

Displays version and copyright information of the installed product.

 
sgdeadmin --status

Returns system status information such as version, server and certificate information.

 
sgdeadmin --list-user-details

Returns information on the user currently logged on.

--all displays information for all users (sudo required)

--xml returns output in xml format.

sgdeadmin --list-policies

Displays policy-specific information. Key GUIDs are resolved to key names if possible. Bold print indicates a personal key.

--all displays information for all users (sudo required)

--xml returns output in xml format

sgdeadmin --synchronize

Forces immediate contact with the server (needs working server connection).

sgdeadmin --import-recoverykey ["recoverykey"]

Imports the FileVault 2 recovery key, overwrites existing recovery key.

--force existing recovery key will be overwritten without any additional confirmation

"recoverykey" if it is not entered, the user will be asked for it

sgdeadmin --import-config "/path/to/target/file"
Imports the specified configuration zip file. The command needs administrative rights (sudo).
Note:

Use the drag and drop functionality to drag a complete path from, for example, the Finder into the Terminal application.

 
sgdeadmin --enable-server-verify

Turns on SSL server verification for communication with the SafeGuard Enterprise server. After installation, the SSL server verification is activated. The command needs administrative rights (sudo).

 
sgdeadmin --disable-server-verify Turns off SSL server verification for communication with the SafeGuard Enterprise server. The command needs administrative rights (sudo).
Note:

We do not recommend this option as it may create a security vulnerability.

 
sgdeadmin --update-machine-info [--domain "domain"]

Updates the currently stored machine information which is used to register this client on the SafeGuard Enterprise server. The command needs administrative rights (sudo).

Note:

Use this command only after changing the domain or workgroup the computer belongs to. If the computer is a member of multiple domains or workgroups and you execute this command, this might result in a change of the domain registration and removal of personal keys and/or FileVault 2 users.

--domain "domain"

The domain the client should use to register on the SafeGuard Enterprise server. This parameter is only required if the computer is a member of multiple domains. The computer must be joined to this domain, otherwise the command will fail.

sgdeadmin --enable-systemmenu Activates the system menu on the endpoint.  
sgdeadmin --disable-systemmenu Deactivates the system menu on the endpoint.  
sgdeadmin --synchronize Starts synchronizing database information from the SafeGuard Enterprise backend such as policies and keys.