Install XProtect Update Manager with your own certificate using command-line arguments
After you have prepared your system and decided to use your own certificate for secure connection between the XProtect Update Manager components, you are ready to begin.
To learn more about encryption, see Encryption between the XProtect Update Manager components.
You can install one or more components in any order.
-
Run Windows Command Prompt as administrator and navigate to the XProtect Update Manager's executable file.
-
Depending on the components you want to install, type:
-
For the update server
"XProtectUpdateManagerInstaller.exe" --install Location="[LOCATION]" Index=1 CertificateMode=CertificateAuthority SerialNumber=[NUMBER]
Where LOCATION is an installation folder on your computer and NUMBER is the serial number of the certificate. The certificate must be installed in the Trusted Root Certification Authorities store on your local computer.
-
For the update agent:
"XProtectUpdateManagerInstaller.exe" --install Location="[LOCATION]" Index=2 ServerAddress=[ADDRESS] CertificateMode=CertificateAuthority SerialNumber=[NUMBER]
Where LOCATION is an installation folder on your computer, ADDRESS is the update server address (IP address, hostname or FQDN), and NUMBER is the serial number of the certificate. The certificate must be installed in the Trusted Root Certificatation Authorities store on your local computer.
-
For the client:
"XProtectUpdateManagerInstaller.exe" --install Location="[LOCATION]" Index=3
Where LOCATION is an installation folder on your computer.
-
You have installed all XProtect Update Manager components on your computer with your own certificate.