The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Install Threat Prevention module

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Use the command line to install the software on RPM-based and Ubuntu-based systems.

You must have installed the Trellix Agentsoftware on the system you intend to install the software. For information about installing the software, see the product guide of your version of Trellix Agent .

Uninstall competitor's software from the system. Trellix Endpoint Security (ENS) for Linux doesn't support the co-existence of competitor's software in the system.

  1. Download the package McAfeeTP-<version_number>-<build_number>-release-standalone.tar.gz from the Trellix Software Download site using your Trellix Grant Number to a temporary directory of your system.

  2. Log on to the system as a user with administrator rights.

  3. Download McAfeeTP-<version_number>-<build_number>-Release-standalone.tar.gz to a temporary directory on your system.

  4. Extract the package.

    tar -zxvf McAfeeTP-<version_number>-<build_number>-Release-standalone.tar.gz

  5. Execute the installation script from the directory where you extracted the software.

    sudo ./install-mfetp.sh

  6. Read the End User License Agreement, then type q to navigate to the prompt.

  7. Type accept, then press Enter.

    Important

    Trellix Endpoint Security (ENS) for Linux does not support using the nails.options file.

    When you install the software using the installation script install-mfetp.sh, the On-Access Scan option is enabled by default.

    To install the software with On-Access Scan disabled, execute the command.

    sudo ./install-mfetp.sh oasoff from the directory where you extracted the software.

    For information about enabling the On-Access Scan using the command line, see Enable or Disable On-Access Scanning or the manpage help.

    Note

    You can predefine the installation options for standalone installations. These options ( apoff, apon, gtioff, oasoff, usefanotify, nocontentupdate, and alttmppath=/ alternateTmpFolderPath) are supported only for fresh installations.

    For more information, see Trellix Knowledge Base article KB88299

Related articles