Editing an MSI Package with CLI

For SmartConsole-managed clients, you can edit a client MSI with the Check Point MSI Packaging Tool utility. The tool is part of the client installation at:

C:\Program Files (x86)\CheckPoint\Endpoint Connect> cpmsi_tool.exe

Syntax

package-package-file-name>

[-replace_config <true|false>] [-sdl_enable <true|false>] [-fixed_mac <true|false>]

[-client_sub_type <SecuRemote|CheckPointMobile|EndpointSecurityVpn|UserDecide>]

Parameters

Parameter	Description
-in	Add a file `<filename>` to the package. The file can be a filename from the list below, or "all" for all of them. The file must exist in same directory as the MSI file. Possible files: `LangPack1.xml` `DisconnectedPolicy.xml` `trac.config`
-out	Remove a file `<filename>` from the package. The file can be a filename from the list below, or "all" for all of them. The file must exist in same directory as the MSI file. Possible files: `LangPack1.xml` `DisconnectedPolicy.xml` `trac.config`
-add	Add a file `<filename>` to the package. The file can be any file. It must exist in same directory as the MSI file.
-remove	Remove a file `<filename>`, that you added previously, from the MSI.
-overwrite	Overwrite a file `<filename>` with a new version of the file. It must be a file that was added.
-copyout	Save a file `<filename>` as a separate file.
-add_scv_plugin	Add a third party SCV plugin file to the package. `<filename>` is the name of the SCV plugin. The file must exist in same directory as the MSI file.
-remove_scv_plugin	Remove a third party SCV plugin file from the package. `<filename>` is the name of the SCV plugin.
-overwrite_scv_plugin	Overwrite a third party SCV plugin file that was added to the package previously.
-replace_config	Previously: `nk` Possible values: `true` or `false` `true` - When a user upgrades the client with this MSI, the user site list is replaced but his personal data is kept. This is done by merging the old `trac.config` and new `trac.config` files. `false` - When a user upgrades the client with this MSI, the old user `trac.config` file is kept and is not replaced by the new `trac.config` file from the installation.
-sdl_enable	Enable Secure Domain Logon (SDL) Possible values: `true` or `false` `true` - Secure Domain Logon (SDL) is enabled for the package. `false` - Secure Domain Logon (SDL) is disabled for the package.
-fixed_mac	Possible values: `true` or `false` `true` - The client will use fixed Office mode MAC addresses. `false` - The client will not use fixed Office mode MAC addresses.
-ClientSubType	Default client type. Possible values: `SecuRemote` `CheckPointMobile` `EndpointSecurityVpn` `UserDecide`
	Notes - DisconnectedPolicy.xml is on client computers in: Windows Vista and higher - `C:\Windows\System32\drivers` Windows XP - `C:\Windows\System32` LangPack1.xmlis on client computers in the installation directory: 32 bit - `C:\Program Files\CheckPoint\Endpoint Connect` 64 bit - `C:\Program Files (x86)\CheckPoint\Endpoint Connect`