Installation parameters
The following command line parameters are supported during installation:
FortiAuthenticator Agent installer commands are case-sensitive and are required to be all uppercase. |
/SP-
Disables the “This will install... Do you wish to continue?” prompt at the beginning of Setup.
/SILENT
Instructs Setup to be silent. When setup is silent the wizard and the background window are hidden but the installation progress window is displayed.
/VERYSILENT
Instructs Setup to be very silent. As per /SILENT
but the install progress window is also hidden.
/SUPPRESSMSGBOXES
Instructs Setup to suppress message boxes. Only has an effect when combined with /SILENT
and /VERYSILENT
.
/DIR="x:\dirname"
Overrides the default directory name displayed on the Select Destination Location wizard page. A fully qualified pathname must be specified.
/GROUP="folder name"
Overrides the default folder name displayed on the Select Start Menu Folder wizard page.
/NOICONS
Instructs Setup to initially check the Don't create a Start Menu folder check box on the Select Start Menu Folder wizard page.
/OFFLINEENABLED
Turns offline mode on, will also disable "cached credential" support.
/OFFLINESHAREDSECRET=<secret>
Sets shared secret value to this (encrypted at the end of the install).
/OFFLINEREALMS=domain1:realm1,domain2:realm2
Sets domain-realm mappings, invalid entries cleared.
/TILEIMG="C:\path\to\file.bmp"
The login tile image.
/MOTD="Here is a custom MOTD"
Overrides the default MOTD which contains version information.
/DEFAULTDOMAINMODE=
Enter after the equals (=
) sign either 0
for none, 1
for most recent, or 2
for a specific domain.
/DEFAULTDOMAIN=DOMAIN
Enter the domain's down-level/NETBIOS name. For example, for sub.example.com
, enter SUB
.
Installing secondary FortiAuthenticator for HA
In order to configure a secondary FortiAuthenticator with the same installation commands as the primary, the following command must be entered:
/ALTFACENABLED
Now all relevant existing commands can be used to configure the secondary unit provided they are prefaced with "ALT" (meaning "alternate"), for example:
/ALTFACHOST...
/ALTFACRESTADMIN=...
/ALTFACRESTKEY=...
/ALTFACVERIFYSERVERCERT...
/ALTFACSERVERSUBJNAME...
/ALTFACCACERTFILE...