Central management via command line - a SafeGuard Easy Server alternative

  • Article ID: 107929
  • Rating:
  • 2 customers rated this article 6.0 out of 6
  • Updated: 14 Apr 2014

SafeGuard Easy multi-platform 4.5x

Client OS

Windows XP SP2 Professional Edition

Server OS

Windows 2003


During the installation the local administration of SafeGuard Easy has not been installed.

Is there a way to manage one or even more SafeGuard Easy workstations using the command line or via network anyhow?


After the installation of SafeGuard Easy there are several local tools with the purpose of managing and maintaining a server on a client available.
These tools can be used to execute the most common functions of SafeGuard Easy such as creating a kernel backup, applying changes to a client or checking the current installation and encryption status.

Please find below a list of the above mentioned tools and a description how to use them.

How to create a kernel backup using sgeback.exe

Kernel backups are normally created using the SafeGuard Easy Kernel Backup Assistant. Anyway after the installation of SafeGuard Easy
this tool can also be started by using a command line. Using this tool via command line in combination with an additional switch you are even
able to store your kernel backups on a network path.

To perform such a centralised kernel backup you could use a command line like this:

cd [Networkshare]
mkdir %computername%
C:\Program Files\Utimaco\SafeGuard Easy\sgeback.exe /f:[Networkshare]\%computername\%date%.sfv

Please note this script can also be started as a batch using a cmd file.

How to apply changes to one ore more workstations using execcfg.exe

There are several different ways to apply changes within the encryption status, password rights or user settings (including creating a new user) to a SafeGuard Easy workstation. The most common way is to use the central administration of SafeGuard Easy. In case this part of SafeGuard Easy has not been installed or the SafeGuard Easy user in use has not sufficient right to perform changes to the system this can also be done using a command line tool.

After installation the tool execcfg. exe can be found within the local installation folder of SafeGuard Easy.The tool can be used to apply changes to a client using cfg files that have been created using the ConfigurationFile Wizard. These files didn't even have to be created or stored on the machine that should be changed initially. Using this command within a batch or cmd file allows an administrator to apply changes also via network.

Such a solution could be realized following these steps:

1. Create a change.cfg file using the ConfigurationFile Wizard (During this process you can either create changes depending on a base configuration or just from the scratch)
2. Simply run a batch or cmd script on the machine that should be changed that is build up like this:

C:\Program Files\Utimaco\SafeGuard Easy\execcfg.exe /f:[Pathname like c:\]SafeGuard Changes\change.cfg

Additional to this you can add the /reboot command to perform a system restart after the changes have been applied.

How to check the encryption and installation status of a SafeGuard Easy workstation using sgestate.exe

In most cases the local information about a SafeGuard Easy client such as installation configuration or encryption status are displayed using
the local administration or Utimaco ecview.exe which automatically shows the encryption status during a running encryption (in case it isn't disabled -> see SGI 107431, "How to disable ECView.exe at encryption/decryption process").

Nevertheless this information can also be monitored using the tool SGEState.exe which can be found within the local installation folder of SafeGuard Easy. This tool can be called from any command line batch or scheduler as well as the other programs.

Please check the help option of SGEState (SGEState.exe /?) for a detailed list of commands that are available.

The example below shows two main features of this program:

1. You can write a SafeGuard Easy status overview to a log file
2. You can add the current encryption status as an extra key to the registry that can be evaluated by any software deployment tool.

The above mentioned actions can be included within a logon script that could be like this for example:

C:\Program Files\Utimaco\SafeGuard Easy\SGEState.exe /r /l >[Pathname like c:\]\%computername%\%date%.log

Using the above mentioned solutions gives an administrator or a local user with administrative rights the possibility to manage one ore more SafeGuard Easy workstations without having to use any graphical interface.

Keywords: AUTOBACKUP sgeback sgeback.exe Kernelbackup sge SGE_DCOMWizard.exe

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent