topic Re: Completely silent XDR install command line switches. in Cortex XDR Discussions

Completely silent XDR install command line switches.

PC-TomS — Wed, 09 Mar 2022 19:26:40 GMT

Looking for some insight on how to automatically accept the license during agent installation.

Re: Completely silent XDR install command line switches.

cstone — Wed, 09 Mar 2022 19:36:23 GMT

Something similar to the below command?

wget -O dockerimages.tar "https://download.demisto.com/download-params?token=xxxxxxx&email=user@paloaltonetworks.com&downloadName=dockerimages&eula=accept"

Re: Completely silent XDR install command line switches.

PC-TomS — Wed, 09 Mar 2022 20:27:42 GMT

Thanks, I suppose I should have mentioned it is the Windows 64bit package and I am using msiexec switches.

My bad for not clarifying.
Tom

Re: Completely silent XDR install command line switches.

PC-TomS — Wed, 09 Mar 2022 20:28:45 GMT

And I tried Accept_Eula=1 as well. I wonder if a transforms would do the trick.

Re: Completely silent XDR install command line switches.

cstone — Wed, 09 Mar 2022 20:31:26 GMT

@PC-TomS wrote:
And I tried Accept_Eula=1 as well. I wonder if a transforms would do the trick.

What about ACCEPTEULA=1?

Re: Completely silent XDR install command line switches.

PC-TomS — Wed, 09 Mar 2022 20:39:06 GMT

Nope, same error 1603. I dug in to the MSI and there is a LicenseAccepted property that must return a value of '1' for the install to continue.
I'm a bit rusty on my MSI so I was hoping someone else had the same issue.

Re: Completely silent XDR install command line switches.

cstone — Wed, 09 Mar 2022 20:43:03 GMT

So this is a wild solution someone tried for something similar:

Instead of creating a new transform and applying it through GPO i edited the msi directly then added it to the GPO. Using Orca, opened the downloaded .msi file and add an entry to the 'Property' table. Property = ACCEPT_EULA Value = 1

Re: Completely silent XDR install command line switches.

PC-TomS — Wed, 09 Mar 2022 21:13:34 GMT

Sadly, it is not in the property table but there are references in several other tables.

It is also not a EULA afaik. That is typically used for Microsoft products.

There are several references to the license dialog throughout the msi and I am not versed enough to figure out which ones to change.

I appreciate you trying to help and I have reached out to our support team and may open a case if that doesn't work out.

Thanks

Tom

Re: Completely silent XDR install command line switches.

PC-TomS — Wed, 09 Mar 2022 21:14:15 GMT

Oh yeah, I tried what you posted too.

Re: Completely silent XDR install command line switches.

bbarmanroy — Thu, 10 Mar 2022 06:26:01 GMT

Hi @PC-TomS have you tried with the '/qn' switch?
https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-6/cortex-xdr-agent-admin/cortex-xdr-agent-for-windows/install-the-cortex-xdr-agent-for-windows.html

Re: Completely silent XDR install command line switches.

PC-TomS — Thu, 10 Mar 2022 18:14:47 GMT

Yes, I tried all the switches in the documentation and many others.

Re: Completely silent XDR install command line switches.

AmmarBahasan — Fri, 11 Mar 2022 18:47:54 GMT

hey @PC-TomS ,

this has worked for me

msiexec.exe /i cortex.msi /qn

hopefully this helps.

Re: Completely silent XDR install command line switches.

bbarmanroy — Mon, 14 Mar 2022 00:54:47 GMT

Hi @PC-TomS can you please share some screenshots when you try to install with the '/qn' switch? The '/qn' switch is for silent installations.

Re: Completely silent XDR install command line switches.

PC-TomS — Mon, 14 Mar 2022 15:40:04 GMT

/qn did not work for me but /passive did.

When I used /qn I got a 1603 error and the log showed that the AcceptLicense did not = '1' and it failed.

Thanks for all the suggestions.