Press CTRL+K to open search

Trellix Agent command-line options

  • Published on Aug 26, 2026
  • 2 minute(s) read
Prev Next

Use the Command Agent tool to perform selected Trellix Agent tasks from the managed system.

Different Command Agent tools are available for Windows and non-Windows operating systems.

  • Windows — cmdagent.exe

  • Non-Windows — cmdagent

The Command Agent tool is installed on the managed system at the time of Trellix Agent installation. Perform this task locally on managed systems. It must be run from an Administrator command prompt.

The Command Agent tool file is located in the Trellix Agent installation folder. By default, this location is:

  • Windows — <Program Files>\McAfee\Agent

  • Linux — /opt/McAfee/agent/bin

  • Macintosh —/Library/McAfee/agent/bin

Using multiple switches per command can start multiple concurrent agent-server communications and can cause policy errors. For example, CmdAgent.exe /p. Make sure you use only one switch per command. These switches are case sensitive. Switches on non-Windows systems use a - instead of /.

Command-line options

Parameter

Description

/c

Checks for new policies. Trellix Agent contacts ePO - On-prem for new or updated policies, then enforces them immediately on receipt.

/e

Prompts Trellix Agent to enforce policies locally.

/p

Sends properties to ePO - On-prem.

/s

Displays the Trellix Agent monitor on Windows client systems.

/f

Forwards events from client systems to ePO - On-prem.

/i

Trellix Agent displays detailed information for point products such as the list of installed products and their versions, FIPS mode status (enabled/disabled), VDI mode status(enabled/disabled), TA msgbus certificate details, ePO certificates in use, and TA msgbus communication status.

Note

The point product information is accessible only to root users on non-Windows systems. On Windows systems, the about-box feature must be turned on in the general policy to access it.

VDI mode status is available only on Windows systems.

/h

Lists all switches with their description.

-l

Set location of the log file.

-m

Verifies the signatures of Trellix binaries for message bus communication with Trellix Agent.

Command:

  • Windows: cmdagent -m "Path/to/Binary"

  • Linux/Mac: cmdagent -m "Path\to\Binary"

You can use Trellix Agent Return Codes with installation and removal scripts to allow the script to continue to the next step or stop depending on the code returned. The two return codes are:

  • 0 — Success

  • -1 — Failure

For a code -1, the parameter is invalid or it failed to open one of the global events for the framework service. Make sure that the service is running, the user has administrator rights, and you are using a valid command line.

:
Related articles