The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Command-line options for exporting custom settings

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

You can configure these options when using ESConfigTool to save custom Trellix ENS 26.x settings to a file.

Run ESConfigTool from the command line on an endpoint where Trellix ENS 26.x is installed.

The access protection rule Unauthorized execution of EsConfigTool blocks the execution of EsConfigTool. Administrators can disable the rule and run EsConfigtool when needed and re-enable the rule when complete.

Syntax: ESConfigTool command line interface

installation_path\ESConfigTool.exe /export file [ command_args ] /unlock password [/plaintext] ]

installation_path\ESConfigTool.exe /import file [ command_args ] /unlock password [/policyname name ] ]

  • installation_path - C:\Program Files (x86)\McAfee\Endpoint Security\Endpoint Security Platform by default

  • command_args- One of the commands in the ESConfigTool command-line options table

Options are not case sensitive.

ESConfigTool command-line options

Option

Parameters

Description

/export file

file

Saves settings to a file with the specified name and location.

Note

Save this file to a folder that is not protected by Trellix. The folder containing ESConfigTool is protected, so use a different, writable location for the export location.

/import file

Imports the settings from the specified file name.

The file must be encrypted.

/module <TP|FW|WC|ATP|ESP>

  • TP — Threat Prevention

  • FW — Firewall

  • WC — Web Control

  • ATP — Adaptive Threat Protection

  • ESP — Resources shared by product modules.

Specifies which product module settings to export or import.

/unlock password

password

Specifies the password to unlock the client interface.

Note

It is recommended that you lock the client interface with a password to avoid unauthorized access and configuration of policies.

/plaintext

Specifies descriptive comments in human-readable format when exporting settings.

/policyname

name

Specifies the name of the policy to import.



Examples: ESConfigTool command line interface

Open a command prompt and change to the installation location of the ESConfigTool command. By default, ESConfigTool is located in the C:\Program Files (x86)\McAfee\Endpoint Security\Endpoint Security Platform folder.

To...

Run this command

Export settings for Threat Prevention and Host Intrusion Prevention to the file C:\ENS\preconfigured.policy when the Trellix Endpoint Security (ENS) Client interface mode is set to Full access.

ESConfigTool.exe /export C:\ENS\preconfigured.policy /module TP FW

Export settings for all product modules to the file C:\ENS\preconfigured.policy when the Trellix Endpoint Security (ENS) Client interface mode is set to Full access.

ESConfigTool.exe /export C:\My Programs\Endpoint\preconfigured.policy/module TP FW WC ATP ESP

Unlock the Trellix Endpoint Security (ENS) Client and export settings for all product modules to the file C:\ENS\preconfigured.policy.

ESConfigTool.exe /export C:\My Programs\Endpoint\preconfigured.policy /module TP FW WC ATP ESP /unlock MyStrongPassword

Import settings for all product modules from the file C:\ENS\preconfigured.policy.

ESConfigTool.exe /import C:\My Programs\Endpoint\preconfigured.policy /module TP FW WC ATP ESP /unlock MyStrongPassword

Related articles