Windows Agent Installer Command Line Options

If you are installing an agent version 21.x or lower, please use the legacy command line options.

Example Usage:

CMD

text

SentinelOneInstaller.exe -q -b -t <site_token>

Powershell

text

./SentinelOneInstaller.exe -q -t <site_token>

-b, --reboot_on_need
Optional. Automatically reboot the endpoint when required to continue with the installation.
-t`` site_Token or group_Token is the site token or group token.
-q, --qn
Optional unless you use a deployment tool to install the Agent (then it is mandatory).
Quiet mode. The installer does not show the status of the upgrade as it progresses, and does not automatically show a return code when the upgrade completes.
-a`` installer_arguments
If there is a web proxy between the endpoints and the Console, you must use the installer arguments to configure the proxy for the Agent in the installation command. To configure a proxy after the Agent is installed, you must use sentinelctl.

Important
If you add the -q parameter you must use the -t parameter and enter the token.
If you do not use -q parameter, the -t parameter is optional in this step of the procedure. If you do not enter the token now, you must add it into the UI later.

Optional Arguments	Description
SERVER_PROXY=mode	Set a proxy server between the Agent and its Management Console. Mode valid values: `auto` = use the Windows LAN settings (PAC file) `system` = use Other proxy (not from OS) configured in the local Agent `user`,fallback[:port] = user mode on Windows `http://`{IP
AGENT_LOGGING={true \| false}	Disable Agent logging.
INSTALL_PATH_DATA="drive:\path"	Customize the path for Agent database, logs, and large data files. Requirements The path must be in English, 150 characters or less. The path must be a fixed drive (it cannot be a USB or other removable media), and it must be NTFS. If the path is not on the System drive, it must have at least 4 GB free space.
SERVER_PROXY_CREDENTIALS=user:pass	Set credentials to authenticate with the Management proxy.
IOC_PROXY=mode	Set a proxy server between the Agent and the Deep Visibility EDR data server. Mode valid values: `single` = use the same proxy for Management and for Deep Visibility `auto` = use the Windows LAN settings (PAC file) `system` = use Other proxy (not from OS) configured in the local Agent `user`,fallback[:port] = user mode on Windows `http://`{IP
FORCE_PROXY={true \| false}	Prevent fallback to direct communication if the proxy is not available. Important! If the Management proxy or the Deep Visibility proxy is configured with `user` mode, do not use Force Proxy.
WSC={true \| false}	Set the Agent installation to disable (true) or not disable (false) Windows Defender.
CUSTOMER_ID="Customer Identifier string"	Add a user-defined Identifier string to the endpoint.
VDI={true \| false}	Install on Virtual Desktop Infrastructure or VMs with a Golden (Master) Image. Important: This property is NOT recommended for all VM installation types. See Installing Windows Agents on VM or VDI for when this property is recommended.

Legacy Installer Options#

Notes: Options are case-sensitive.

Example Usage:

MSI

text

"C:\Users\usr\AppData\Local\Temp\SentinelInstaller.msi" /q /norestart UI=false SITE_TOKEN="51te70k3n"

EXE

text

"C:\Users\usr\AppData\Local\Temp\SentinelInstaller.exe" /q /norestart /NOUI /SITE_TOKEN=51te70k3n

Exit codes:

From the same CMD or shell session that the installer was launched, run: echo %ErrorLevel%

0 = Success
-1 (or other non-zero) = Failure

EXE Installer Options (agent version 21.x and older)#

Action and Description	Option
Silent installation (no UI, no user interaction, no reboot).	/q, /QUIET, /s, /SILENT
With a Silent installation switch, you can use an optional flag for endpoint reboot: Installs the agent without requiring a restart. Use for mass deployment, when you send a message to users, or to restart their computers that day. Always Reboot. Reboot if needed.	/NORESTART /FORCERESTART /REBOOT
Install the Agent with the UI disabled (no tray icon or notifications).	/NOUI
Disable Agent logging.	/NOLOGGING
Assign Agents to a Site or static Group.	/SITE_TOKEN=string
Customize the path for Agent database, logs, and large data files. Requirements The path must be in English, 150 characters or less. The path must be a fixed drive (it cannot be a USB or other removable media), and it must be NTFS. If the path is not on the System drive, it must have at least 4 GB free space. (Supported from Agent versions 3.6)	/INSTALL_PATH_DATA=drive:\path
Set a proxy server between the Agent and its Management. Mode valid values: `auto` = use the Windows LAN settings (PAC file) `system` = use Other proxy (not from OS) configured in the local Agent `user`,fallback[:port] = user mode on Windows `http://`{IP	FQDN}:[port]
Set credentials to authenticate with the Management proxy.	/SERVER_PROXY_CREDENTIALS=user:pass
Set a proxy server between the Agent and the Deep Visibility EDR data server. Mode valid values: `single` = use the same proxy for Management and for Deep Visibility `auto` = use the Windows LAN settings (PAC file) `system` = use Other proxy (not from OS) configured in the local Agent `user`,fallback[:port] = user mode on Windows `http://`{IP	FQDN}:[port]
Set the username and password to authenticate with the Deep Visibility proxy.	/IOC_PROXY_CREDENTIALS=”username:password”
Prevent fallback to direct communication if the proxy is not available. Important! If the Management proxy or the Deep Visibility proxy is configured with `user` mode, do not use Force Proxy	/FORCE_PROXY
Set the Agent installation to disable or not disable Windows Defender. `true` = disable Windows Defender `false` = do not disable Windows Defender With EXE, if `/WSCOFF` is given, Windows Defender is not disabled	/WSCOFF
Add a user-defined Identifier string to the endpoint.	/CUSTOMER_ID="Customer Identifier string"
Install on Virtual Desktop Infrastructure or VMs with a Golden (Master) Image. Important: This property is NOT recommended for all VM installation types. See Installing Windows Agents on VM or VDI for when this property is recommended.	/VDI

MSI Installer Options (agent version 21.x and older)#

Action and Description	Option
Silent installation (no UI, no user interaction, no reboot).	/q, /QUIET
With a Silent installation switch, you can use an optional flag for endpoint reboot: Installs the agent without requiring a restart. Use for mass deployment, when you send a message to users, or to restart their computers that day. Always reboot.	/NORESTART /FORCERESTART
Install the Agent with the UI disabled (no tray icon or notifications).	UI=false
Disable Agent logging.	AGENT_LOGGING=false
Assign Agents to a Site or static Group.	SITE_TOKEN="string"
Customize the path for Agent database, logs, and large data files. Requirements The path must be in English, 150 characters or less. The path must be a fixed drive (it cannot be a USB or other removable media), and it must be NTFS. If the path is not on the System drive, it must have at least 4 GB free space. (Supported from Agent versions 3.6)	INSTALL_PATH_DATA="drive:\path"
Set a proxy server between the Agent and its Management. Mode valid values: `auto` = use the Windows LAN settings (PAC file) `system` = use Other proxy (not from OS) configured in the local Agent `user`,fallback[:port] = user mode on Windows `http://`{IP	FQDN}:[port]
Set credentials to authenticate with the Management proxy.	SERVER_PROXY_CREDENTIALS=user:pass
Set a proxy server between the Agent and the Deep Visibility EDR data server. Mode valid values: `single` = use the same proxy for Management and for Deep Visibility `auto` = use the Windows LAN settings (PAC file) `system` = use Other proxy (not from OS) configured in the local Agent `user`,fallback[:port] = user mode on Windows `http://`{IP	FQDN}:[port]
Set the username and password to authenticate with the Deep Visibility proxy.	IOC_PROXY_CREDENTIALS=username:password
Prevent fallback to direct communication if the proxy is not available. Important! If the Management proxy or the Deep Visibility proxy is configured with `user` mode, do not use Force Proxy.	FORCE_PROXY={true \| false}
Set the Agent installation to disable (true) or not disable (false) Windows Defender.	WSC={true \| false}
Add a user-defined Identifier string to the endpoint.	CUSTOMER_ID="Customer Identifier string"
Install on Virtual Desktop Infrastructure or VMs with a Golden (Master) Image. Important: This property is NOT recommended for all VM installation types. See Installing Windows Agents on VM or VDI for when this property is recommended.	VDI={true \| false}