Using the maconfig command-line tool ( ePO

The command-line tool, maconfig, is provided with Trellix Agent for Linux.

It is installed with Trellix Agent and its default location is /opt/McAfee/agent/bin.

With maconfig you can perform operations such as:

Provision agent to ePO - On-prem
Set custom properties
Set log level
Provision agent to ePO - SaaS (applicable only for MLOS based nDLP appliances)

Command-line switches

Use these command-line switches with the maconfig tool to perform operations.

Parameter	Description
`-provision`	Provisions the agent in managed or unmanaged mode.
`-enforce`	Enforces the agent policies or configurations locally.
`-managed`	Provisions the agent in managed mode.
`-unmanaged`	Provisions the agent in unmanaged mode.
`-auto`	Uses ePO - On-prem credentials.
`-dir`	Uses ePO - On-prem files from a specific directory.
`-epo`	Specifies ePO - On-prem IP address and port.
`-mvisionepoenv`	Provision to ePO - SaaS using the configuration provided in .ini file (for example: "`/temp/config.ini`").
`-user`	Specifies ePO - On-prem administrator's user name.
`-password`	Specifies ePO - On-prem password.
`-custom`	Sets custom properties. You can set more than one custom property.
`-prop1 "string value" -prop2 "string value" ... -propN "string value"`	Value of custom property. Specify the value for each of your custom property.
`-license`	Sets license key.
`-loglevel`	Sets log level number(0(Disable)\1(Info)\2(Debug)\3(Detail)).
`-noguid`	Deletes GUID entries.
`-start`	Starts the agent.
`-stop`	Stops the agent.
`-help`	Displays Help for `maconfig`.

Examples

Provision the agent to ePO - On-prem
This command provisions a specified ePO - On-prem to the local system that runs this command.
maconfig -provision -managed -auto -epo <ePO IP>:<ePO Console Port> -user <ePO admin username> -password <ePO admin password>
Set custom properties
This command allows you to set custom properties that are reported back to ePO - On-prem and are displayed in the system properties.
maconfig -custom -prop1 "string value1" -prop2 "string value2"
Set log level
This command allows you to configure the level of agent activity that is recorded.
maconfig -enforce -loglevel 3
Provision the agent to ePO - SaaS (applicable only for nDLP appliances)
This command provisions agent to ePO - SaaS. The tenant or an endpoint administrator logs into the endpoint device and runs maconfig. The maconfig uses the following parameters to obtain the agent configuration data. The maconfig initiates provisioning of agent after retrieving the configuration data.
Run the maconfig -provision -managed -auto - mvisionepoenv <config file path> command to provision agent.
For example, maconfig -provision -managed -auto -mvisionepoenv /tmp/config.ini
Where, config.ini contains the following parameters:
- -srt : <srt_token> You can obtain registration token from ePO - SaaS. For more information about obtaining registration token, see ePO - SaaS Product Guide.
- -iam_url:
- -epo_url:
- -proxy_url:
- -proxy_port:
- -proxy_user:
- -proxy_password:
- -connection_timeout: The default value is set to 30 seconds.
- -transfer_timeout: The default value is set to 300 seconds.
- -epo_endpoint: The default value is frameworkconfig.
Inputs to srt, iam_url, and epo_url are mandatory. The proxy_url, proxy_port, epo_endpoint, connection_timeout, and transfer_timeout are optional fields. If you provide proxy_url, then providing proxy_port is mandatory. Optionally, you can provide proxy_user and proxy_password for authentication. Otherwise, proxy details are optional parameters. If you provide epo_endpoint, it is appended at the end of epo_url.

Using the maconfig command-line tool ( ePO - On-prem )

Command-line switches