The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Upgrade Automation command-line options for ePO - On-prem deployment tasks

  • Published on Sep 13, 2026
  • 2 minute(s) read
Prev Next

The Upgrade Automation client software included in the installation package for upgrades managed with Endpoint Upgrade Assistant supports these command-line options for deployment tasks that you create using ePO - On-prem.

Best practice: If you don't want to enter deployment task options manually, click Copy Command Line in Endpoint Upgrade Assistant to copy to the Windows clipboard the command-line options that match your selections on the Overview and Prepare tabs.

Option

Description

--keepma

Do not upgrade versions of Trellix Agent that are compatible with Trellix ENS.

--ma="[arguments]"

Install or upgrade Trellix Agent using the specified command-line arguments.

These arguments are not supported:

  • /REMOVE

  • /FORCEUNINSTALL

  • /RELAY

--maforceinstall

Force install Trellix Agent. If this command-line option is not used, Trellix Agent is upgraded or installed using the regular install command.

--excludefw

Do not deploy Trellix ENS Firewall. The module won't be downloaded and installed.

--excludewc

Do not deploy Web Control. The module won't be downloaded and installed.

--installdlp=[version]

Upgrade Trellix DLP to the specified version.

The deployment task fails if the software isn't checked in to the selected ePO - On-prem branch.

--installatp

Install Adaptive Threat Protection.

--installdxl

Install or upgrade Trellix Data Exchange Layer.

The deployment task fails if the software isn't checked in to the selected ePO - On-prem branch.

--installmacc

Install or upgrade Application Control and Trellix Change Control.

The deployment task fails if the software isn't checked in to the selected ePO - On-prem branch.

--installmar

Install or upgrade Active Response.

The deployment task fails if the software isn't checked in to the selected ePO - On-prem branch.

-update=[updatenumber]

Install the specified update during the Trellix ENS upgrade.

--tag[=1–4]

where:

1–4 specifies one of four Custom fields

Report endpoint events in a Custom field on the System Properties tab in the ePO - On-prem System Details page.

For example, --tag=3 reports endpoint events in the Custom 3 field, and --tag or --tag=1 reports in the Custom 1 field.

--exitondllinjector

Stop the Trellix ENS upgrade if SysPrep returns a failure message.

In this case, the software on the endpoint is not removed, to ensure that the endpoint is always protected.

--ignorebatterylevel

Ignore battery charge level if the endpoint is a mobile computer.

--ignoreensoscheck

Don't verify the version of Windows running on the endpoint before installing Trellix ENS.

By default, Upgrade Automation verifies that a compatible version of Windows is running on the endpoint you plan to upgrade. If it's incompatible, no upgrade occurs.

Use this option to proceed with the upgrade regardless of the Windows version.

Best practice: Allowing Upgrade Automation to verify the version of Windows helps to prevent upgrade failures caused by product incompatibility.

--log=[path]

Save the Upgrade Automation installation log file in the specified location.

For example, --log=C:\mcafeeEUALOGS creates the C:\mcafeeEUALOGS\ folder and saves the log file at that location.

--notelemetry

Do not collect and send anonymous telemetry data from Upgrade Automation.

--retryafterreboot

  • If Trellix ENS fails to install on the first attempt — Do not initiate a restart automatically. Wait until the endpoint restarts, then attempt to install Trellix ENS.

  • If Trellix ENS is manually installed before the endpoint restarts — Detect that the product is installed, then cancel the pending installation.

Compatibility of command-line options

Command-line options are case sensitive. If you enter an invalid or an unrecognized option, Endpoint Upgrade Assistant doesn't start the upgrade and closes without making any changes to endpoints.

Specifying multiple options can result in conflicting actions. Here's how Endpoint Upgrade Assistant resolves conflicting command-line options:

Options

Result

--tag=2 --keepma

  • Does not upgrade Trellix Agent if it is compatible with Trellix ENS.

  • Reports endpoint events in the Custom 2 field on the System Properties tab in the ePO - On-prem System Details page.

Related articles