Setup Command-Line Options

  • Article

2/9/2009

You can use command-line commands to install and uninstall System Center Mobile Device Manager system components. To use these commands, you must enter them at a command prompt in the directory for the relevant Setup file.

Msiexec.exe

You can use Msiexec.exe to perform all Microsoft Windows Installer functions at a command prompt. The following table shows the parameters for Msiexec.exe.

  • /i
    Msiexec parameter: This is a standard Msiexec command to install or configure a product.

  • /l*xv <logfile>
    Msiexec parameter: Turns on verbose logging with extra debugging information written to the log at the <logfile> location.

    Note

    You should always turn on verbose logging when you run .msi, especially at a command prompt.

  • /qb
    Msiexec parameter: Specifies the user interface (UI) level to Basic UI. User interaction is limited to only showing errors that occur. See the Setup log files and Event Viewer for warnings, errors, successes, failures, and other details.
  • /qn
    Msiexec parameter: Silent or quiet mode where there is no user interaction and no UI. See the Setup log files and Event Viewer for warnings, errors, successes, failures, and other details.

Other Parameters

DeviceManagement.msi

Parameter Required or Optional Description

SQL_SRVR

This is required for the first MDM Device Management Server or MDM Enrollment Server installation (whichever comes first).

The fully qualified domain name (FQDN\SQL Instance) of the computer that is running SQL Server where you will install MDM Databases. An example is SQLServer.contoso.com\<SQL Instance Name>. The installing administrator must have permissions to install databases, stored procedures and logins on the database.

SCMDM_INSTANCE

Required

The MDM instance that the MDM Device Management Server will belong to after setup. The installing administrator must be a member of the MDM Server Administrators group SCMDMServerAdmins.

SRVR_CA

Recommended

The server certification authority to use to request certificates for MDM Device Management Server during Setup. You can omit this only if SKIP_SRVR_CERT_REQ is set to TRUE.

URI

Required for the first MDM Device Management Server installation

MDM Device Management Server or MDM Device Management Server load balancer FQDN.

DMWEB_SSL_PORT

Optional

If unspecified, the default is 8443. The port that MDM Device Management Server Web site uses to listen.

ADMINWEB_SSL_PORT

Optional

If unspecified, the default is 8446. The port that MDM Device Management Server Administration Web site uses to listen.

DB_USER

Optional (not recommended)

We do not recommend that you use this optional value. Only specify this value if you do not use Windows Integrated Authentication to connect to an SQL database.

DB_PWD

Optional (not recommended)

We do not recommend that you use this optional value. Only specify this value if you do not use Windows Integrated Authentication to connect to an SQL database.

SKIP_SRVR_CERT_REQ

Optional (not recommended)

Optional. If set to TRUE setup will skip server certificates requests from the specified certification authority (in SRVR_CA) during Setup, and you must obtain and apply certificates manually. We do not recommend that you use this optional value.

For Enrollment.msi

Parameter Required or Optional Description

SQL_SRVR

Required for the first MDM Device Management Server or MDM Enrollment Server installation (whichever comes first)

The FQDN of the computer that is running SQL Server on which you will install MDM databases. The installing administrator must have permissions to install databases, stored procedures and logins on the database.

SCMDM_INSTANCE

Required

The MDM instance that the MDM Enrollment Server will belong to after setup. The installing administrator must be a member of the MDM Server Administrators group SCMDMServerAdmins.

DEVICE_CA

Required for the first MDM Enrollment Server installation

The device certification authority to request certificates for device enrollment on to the domain.

SRVR_CA

Recommended

The server certification authority to request certificates for MDM Enrollment Server during Setup. You can omit this value only if SKIP_SRVR_CERT_REQ is set to TRUE.

EXT_URI

Required for the first MDM Enrollment Server installation

The FQDN for the external (device facing) MDM Enrollment Server or the external (device facing) MDM Enrollment Server load balancer.

INT_URI

Required for the first MDM Enrollment Server installation

The FQDN for the internal (management tool facing) MDM Enrollment Server or the internal (management tool facing) MDM Enrollment Server load balancer. We recommend that you use a load balancer.

ADMINWEB_SSL_PORT

Optional

If unspecified, the default is 8445. The port that the MDM Enrollment Server Administration Web site uses to listen.

DB_USER

Optional (not recommended)

We do not recommend that you use this optional value. Only specify this value if you do not use Windows Integrated Authentication to connect to the SQL database.

DB_PWD

Optional (not recommended)

We do not recommend that you use this optional value. Only specify this value if you do not use Windows Integrated Authentication to connect to the SQL database.

SKIP_SRVR_CERT_REQ

Optional (not recommended)

We do not recommend that you use this optional value. If set to TRUE, this value skips requests for server certificates from the specified certification authority (in SRVR_CA) during Setup. You must obtain and apply certificates manually.

SKIP_URI_CHECK

Optional (not recommended)

We do not recommend that you use this optional value. If set to TRUE, this value skips FQDN validation on internal and external enrollment. This means that Setup will not try to validate and resolve these FQDNs. Use this option only if you have problems resolving FQDNs.

ENWEB_SVC_ACC

Optional

If you install MDM Enrollment Server in a language that differs from that of the Microsoft SQL Server installation, and you connect to the server that is running SQL Server remotely, you must specify the name of the Anonymous account on the server that is running SQL Server by using the ENWEB_SVC_ACC parameter. The following example shows you how to run Setup if you install the English version of MDM Enrollment Server but use a remote connection to a computer that is running the German version of SQL Server:

  • msiexec /i Enrollment.msi ENWEB_SVC_ACC="NT-AUTORITÄT\ANONYMOUS-ANMELDUNG"

For AdminTools.msi

Parameter Required or Optional Description

ADDLOCAL

Required

Lets the installing administrator specify which components to install. This can be a comma separated values (.csv) list that has the following values:

  • MDM_MANAGEMENT: MDM Management Console
  • SOFTWARE_DISTRIBUTION: MDM Software Distribution Console
  • GROUP_POLICY_EXT: MDM Group Policy Extensions
  • ALL: install all components

Examples:

The following will install MDM Console only silently, with basic UI:

  • Msiexec /i AdminTools.msi ADDLOCAL="MDM_MANAGEMENT" /qb /l*xv <path of log file>

The following will install all components silently, with basic UI:

  • msiexec.exe /i AdminTools.msi ADDLOCAL="ALL" /qb /l*xv <path of log file>

For Gateway.msi

Parameter Required or Optional Description

VPN_IP

Required

The IP address for MDM Gateway Server management. This should be the company network-facing address.

Note   This IP address is not validated. Make sure that you type the correct address.

VPN_PORT

Required

The port for MDM Gateway Server management. This should be the same port that you used for the Add MDM Gateway Wizard for MDM Gateway Server management.

VPN_CONFIG_FILE
  • Required if you use with /qn or /qb parameters on the command line
  • Optional for full UI mode

The path to the GatewayConfig.xml file that contains MDM Gateway Server configuration information. You generate this file using the Export-MDMGatewayConfig command from MDM Shell.

CERT_SSL_HASHCODE

Required

The gateway authentication certificate hash code. To find the hash code or thumbprint for a certificate, see the following Note.

CERT_CTL_HASHCODE

Required

The certification authority certificate hash code for the root certificate. To find the hash code or thumbprint for a certificate, see the following Note. The certification authority must be a root certification authority.

Note

When you install MDM Gateway Server at a command prompt, you must supply the certificate hash codes to determine which certificates that you want to configure with IIS. You can obtain certificate information by using the Certificate MMC snap-in. To find the hash code, double-click the certificate, choose the Details tab, and then locate the Thumbprint value. The thumbprint is a hexadecimal string that you can copy and paste on to the command line. Make sure that you omit any spaces in the hexadecimal string.

For SelfServicePortal.msi

Parameter Required or Optional Description

SCMDM_INSTANCE

Required

The MDM instance that the MDM Self Service Portal Server will belong to after you run MDM Setup. You must be a member of the MDM Server Administrators group SCMDMServerAdmins to install the portal server.

SRVR_CA

Recommended

The server certification authority to use to request certificates for MDM Self Service Portal Server during Setup. You can omit this only if SKIP_SRVR_CERT_REQ is set to TRUE.

SSP_URI

Required

The MDM Self Service Portal Server fully qualified domain name (FQDN).

SELFSERVE_SSL_PORT

Optional

If unspecified, the default is 443. The Secure Sockets Layer (SSL) port that MDM Self Service Portal Web site uses to listen.

SELFSERVE_TCP_PORT

Optional

If unspecified, the default is 8442. The TCP port that MDM Self Service Portal Web site uses to listen.

SKIP_SRVR_CERT_REQ

Optional (not recommended)

Optional. If set to TRUE, Setup will skip server certificates requests from the specified certification authority (in SRVR_CA) during Setup, and you must obtain and apply certificates manually. We do not recommend that you use this optional value.

MDM Enrollment Server

Install Command

msiexec.exe /i enrollment.msi SQL_SRVR=<SQL_SRVR_NAME> SCMDM_INSTANCE=<SCMDM_INSTANCE_NAME> DEVICE_CA=<CA_SRVR_NAME>\<CA_INSTANCE_NAME> SRVR_CA=<CA_SRVR_NAME>\<CA_INSTANCE_NAME> EXT_URI=<EXT_URI_NAME> INT_URI=<INT_URI_NAME> /l*xv d:\logs\enrollmentLog.txt /qb

Uninstall Command

msiexec.exe /x enrollment.msi /qb REMOVE_DB=<true|false> /l*xv <logfile>

You should only use the remove_db parameter when you want to remove the whole MDM system from your environment.

MDM Device Management Server

Install Command

msiexec.exe /i DeviceManagement.msi SQL_SRVR=<SQL_SRVR_NAME> SCMDM_INSTANCE=<SCMDM_INSTANCE_NAME> SRVR_CA=<CA_SRVR_NAME>\<CA_INSTANCE_NAME> URI=<DM_URI_NAME> DMWEB_SSL_PORT=<DM_SSL_PORT> ADMINWEB_SSL_PORT=<ADMIN_SSL_PORT> /l*xv d:\logs\DMLog.txt /qb

Uninstall Command

msiexec.exe /x DeviceManagement.msi /qb REMOVE_DB=<true|false> /l*xv <logfile>

You should only use the remove_db parameter when you want to remove the whole MDM system from your environment.

MDM Gateway Server

Install Command

msiexec.exe /i Gateway.msi /qb VPN_IP=<InternalIP> VPN_PORT=<SSL_PORT> CERT_SSL_HASHCODE=<Gateway Authentication certificate hash code> CERT_CTL_HASHCODE=<Certification Authority certificate hash code for the root certificate>

Note

When you install MDM Gateway Server at a command prompt, you must supply the certificate hash codes to determine which certificates that you want to configure with IIS. The hash value is listed in the Thumbprint field in the certificate properties (Details tab). You must not copy and paste this value from the screen because it contains spaces that may cause errors in the setup process. When entering a hash value there must be no spaces in the text.

MDM Administrator Tools

Install Command

msiexec.exe /i AdminTools.msi ADDLOCAL="MDM_MANAGEMENT,SOFTWARE_DISTRIBUTION,GROUP_POLICY_EXT" /l*xv d:\logs\AdminLog.txt /qb

Important

The ADDLOCAL property accepts only case-sensitive values. The input must be in uppercase letters. There must not be any spaces when using this property or an error will be generated. For example, ADDLOCAL="MDM_MANAGEMENT,GROUP_POLICY_EXT,SOFTWARE_DISTRIBUTION"

Uninstall Command

msiexec.exe /x AdminTools.msi /qb

Remove Features Command

msiexec /i AdminTools.msi /qb REMOVE="<Feature List>"