SetupEP command-line options (self-managed)

Use these options with the SetupEP utility to install the product from a command line.

Open a Command Prompt window, then run the SetupEP command using the appropriate command-line options.

Options are not case-sensitive.


setupEP.exe INSTALLDIR="D:\My Programs" /l"D:\My Log Files"

Installs the product files to a folder on drive D under My Programs and saves the installation log files to a folder under My Log Files.

Basic options

setupEP.exe ADDLOCAL="fw,tp,wc" [INSTALLDIR="install_path"][/qb][/qb!][/l*v"install_log_path"]

All options

setupEP.exe ADDLOCAL="fw,tp,wc" [INSTALLDIR="install_path"][/qb][/qb!][/l"install_log_path"][/l*v"install_log_path"] [/import <file_name>] [/module <TP|FW|WC|ESP>] [/nopreservesettings] [/override"program_name"] [/policyname <name>] [/unlock <password>]

Option Definition

Selects the product modules to install:

  • fwFirewall
  • tpThreat Prevention
  • wcWeb Control
  • fw,tp,wc — Install all three modules.



Installs Threat Prevention and Web Control.


Specifies where to install the product files on the computer.

The installation wizard creates an Endpoint folder at the specified location and installs the product to this folder.


INSTALLDIR="D:\Installed Programs"

Installs the product modules under D:\Installed Programs\EndPoint\.

By default, product files are installed in the folder C:\windows\Temp\McAfeeLogs.

/log"install_log_path" or /l"install_log_path"


  • Specifies where to save the installation log files for tracking installation events.

    The installation wizard creates an Endpoint folder at the specified location and saves the log files to this folder.


    /l"D:\Log Files"

    Installs the product log files under D:\Log Files\EndPoint\.

    By default, log files are saved in the User TEMP folder C:\users\username\AppData\Local\Temp\McAfeeLogs.

  • *v — Specifies verbose (more descriptive) logging entries.

/qn or /quiet

/qb! or /passive


Specifies how the users can interact with the installation wizard:

  • qn — Hide all installation notifications (silent mode). Users have no interaction.
  • qb! — Show only a progress bar without a Cancel button. Users cannot cancel the installation while it is in progress (passive mode).
  • qb — Show only a progress bar with a Cancel button. Users can cancel the installation while it is in progress, if needed.
/import <file_name>

Imports policy settings from the specified file.
/module <TP|FW|WC|ESP> Applies imported policy settings to the specified product modules.
  • TPThreat Prevention
  • FWFirewall
  • WCWeb Control
  • ESP — Resources shared by product modules.


/module TP FW

Imports settings to Threat Prevention and Firewall.

/nocontentupdate Do not update product content files automatically as part of the installation process.

Content files include the latest AMCore and Exploit Prevention content files required for Endpoint Security.

Tip: Best practice: Update content files to ensure that the system is fully protected. If you don't update them during installation, schedule an update as soon as possible.
/nopreservesettings Do not migrate your product settings to Endpoint Security.

By default, settings are preserved.

/override"program_name" Overrides and uninstalls conflicting products as specified:

  • hipsMcAfee Host Intrusion Prevention



Uninstalls McAfee Host Intrusion Prevention automatically during installation.

/policyname <name>

Assigns the specified policy to systems where the product is installed.
/unlock <password>

Sets the password for unlocking the client UI.