Installation parameters

The following command line parameters are supported during installation:

FortiAuthenticator Agent installer commands are case-sensitive and are required to be all uppercase.

/SP-

Disables the “This will install... Do you wish to continue?” prompt at the beginning of Setup.

/SILENT

Instructs Setup to be silent. When setup is silent the wizard and the background window are hidden but the installation progress window is displayed.

/VERYSILENT

Instructs Setup to be very silent. As per /SILENT but the install progress window is also hidden.

/SUPPRESSMSGBOXES

Instructs Setup to suppress message boxes. Only has an effect when combined with /SILENT and /VERYSILENT.

/DIR="x:\dirname"

Overrides the default directory name displayed on the Select Destination Location wizard page. A fully qualified pathname must be specified.

/GROUP="folder name"

Overrides the default folder name displayed on the Select Start Menu Folder wizard page.

/NOICONS

Instructs Setup to initially check the Don't create a Start Menu folder check box on the Select Start Menu Folder wizard page.

/OFFLINEENABLED

Turns offline mode on, will also disable "cached credential" support.

/OFFLINESHAREDSECRET=<secret>

Sets shared secret value to this (encrypted at the end of the install).

/OFFLINEREALMS=domain1:realm1,domain2:realm2

Sets domain-realm mappings, invalid entries cleared.

/TILEIMG="C:\path\to\file.bmp"

The login tile image.

/MOTD="Here is a custom MOTD"

Overrides the default MOTD which contains version information.

/DEFAULTDOMAINMODE=

Enter after the equals (=) sign either 0 for none, 1 for most recent, or 2 for a specific domain.

/DEFAULTDOMAIN=DOMAIN

Enter the domain's down-level/NETBIOS name. For example, for sub.example.com, enter SUB.

Installing secondary FortiAuthenticator for HA

In order to configure a secondary FortiAuthenticator with the same installation commands as the primary, the following command must be entered:

/ALTFACENABLED

Now all relevant existing commands can be used to configure the secondary unit provided they are prefaced with "ALT" (meaning "alternate"), for example:

/ALTFACHOST...

/ALTFACRESTADMIN=...

/ALTFACRESTKEY=...

/ALTFACVERIFYSERVERCERT...

/ALTFACSERVERSUBJNAME...

/ALTFACCACERTFILE...