Command line options

The Terminal application allows you to enter commands and command line options. The following command line options are available:

Command name Definition Additional parameters (optional)
sgdeadmin

Lists available commands including short help hints.

--help
sgdeadmin --version

Displays version and copyright information of the installed product.

sgdeadmin --status

Returns system status information such as version, server and certificate information.

sgdeadmin --list-user-details

Returns information on the user currently logged on.

--all displays information for all users (sudo required)

--xml returns output in xml format.

sgdeadmin --list-policies

Displays policy-specific information. Key GUIDs are resolved to key names if possible. Bold print indicates a personal key.

--all displays information for all users (sudo required)

--xml returns output in xml format

sgdeadmin --synchronize

Forces immediate contact with the server (needs working server connection).

sgdeadmin --import-recoverykey ["recoverykey"]

Imports the FileVault 2 recovery key, overwrites existing recovery key.

--force existing recovery key will be overwritten without any additional confirmation

"recoverykey" if it is not entered, the user will be asked for it

sgdeadmin --import-config "/path/to/target/file"
Imports the specified configuration zip file. The command needs administrative rights (sudo).
Note Use the drag and drop functionality to drag a complete path from, for example, the Finder into the Terminal application.
sgdeadmin --enable-server-verify

Turns on SSL server verification for communication with the SafeGuard Enterprise server. After installation, the SSL server verification is activated. The command needs administrative rights (sudo).

sgdeadmin --disable-server-verify Turns off SSL server verification for communication with the SafeGuard Enterprise server. The command needs administrative rights (sudo).
Note

We do not recommend this option as it may create a security vulnerability.

sgdeadmin --update-machine-info [--domain "domain"]

Updates the currently stored machine information which is used to register this client on the SafeGuard Enterprise Server. The command needs administrative rights (sudo).

Note

Use this command only after changing the domain or workgroup the computer belongs to. If the computer is a member of multiple domains or workgroups and you execute this command, this might result in a change of the domain registration and removal of personal keys and/or FileVault 2 users.

--domain "domain"

The domain the client should use to register on the SafeGuard Enterprise Server. This parameter is only required if the computer is a member of multiple domains. The computer must be joined to this domain, otherwise the command will fail.

sgdeadmin --enable-systemmenu Activates the system menu on the endpoint.
sgdeadmin --disable-systemmenu Deactivates the system menu on the endpoint.
sgdeadmin --synchronize Starts synchronizing database information from the SafeGuard Enterprise backend such as policies and keys.