ESET CMD

This is a feature that enables advanced ecmd commands. It allows you to export and import settings using the command line (ecmd.exe). Until now, it was possible to export and import settings using GUI only. ESET NOD32 Antivirus configuration can be exported to an .xml file.

When you have enabled ESET CMD, there are two authorization methods available:

Noneno authorization. We do not recommend you this method because it allows importation of any unsigned configuration, which is a potential risk.

Advanced setup passworda password is required to import a configuration from an .xml file, this file must be signed (see signing .xml configuration file further down). The password specified in Access Setup must be provided before a new configuration can be imported. If you do not have access setup enabled, your password does not match or the .xml configuration file is not signed, the configuration will not be imported.

Once ESET CMD is enabled, you can use the command line to import or export ESET NOD32 Antivirus configurations. You can do it manually or create a script for the purpose of automation.

important

Important

To use advanced ecmd commands, you need to run them with administrator privileges, or open a Windows Command Prompt (cmd) using Run as administrator. Otherwise, you will get Error executing command. message. Also, when exporting a configuration, the destination folder must exist. The export command still works when the ESET CMD setting is switched off.

example

Example

Export settings command:
ecmd /getcfg c:\config\settings.xml
 
Import settings command:
ecmd /setcfg c:\config\settings.xml

note

Note

Advanced ecmd commands can only be run locally.

Signing an .xml configuration file:

1.Download the XmlSignTool executable.

2.Open a Windows Command Prompt (cmd) using Run as administrator.

3.Navigate to the save location of xmlsigntool.exe

4.Execute a command to sign the .xml configuration file, usage: xmlsigntool /version 1|2 <xml_file_path>

important

Important

The value of the /version parameter depends on the version of your ESET NOD32 Antivirus. Use /version 1 for earlier versions of ESET NOD32 Antivirus than 11.1. Use /version 2 for the current version of ESET NOD32 Antivirus.

5.Enter and Re-enter your Advanced Setup Password when prompted by the XmlSignTool. Your .xml configuration file is now signed and can be used to import another instance of ESET NOD32 Antivirus with ESET CMD using the password authorization method.

example

Example

Sign exported configuration file command:
xmlsigntool /version 2 c:\config\settings.xml

ecmd_xmlsigntool

note

Note

If your Access Setup password changes and you want to import a configuration that was signed earlier with an old password, you need to sign the .xml configuration file again using your current password. This allows you to use an older configuration file without exporting it to another machine running ESET NOD32 Antivirus before the import.

warning

Warning

Enabling ESET CMD without an authorization is not recommended, since this will allow the import of any unsigned configuration. Set the password in Advanced setup > User interface > Access setup to prevent from unauthorized modification by users.

List of ecmd commands

Review the list of commands for each security feature below:

Security Feature

Temporary Pause command

Enable Command

Real-time file system protection

ecmd /setfeature onaccess pause

ecmd /setfeature onaccess enable

Document protection

ecmd /setfeature document pause

ecmd /setfeature document enable

Device control

ecmd /setfeature devcontrol pause

ecmd /setfeature devcontrol enable

Gamer mode

ecmd /setfeature gamer pause

ecmd /setfeature gamer enable

Anti-Stealth technology

ecmd /setfeature antistealth pause

ecmd /setfeature antistealth enable

Personal firewall

ecmd /setfeature firewall pause

ecmd /setfeature firewall enable

Network attack protection (IDS)

ecmd /setfeature ids pause

ecmd /setfeature ids enable

Botnet protection

ecmd /setfeature botnet pause

ecmd /setfeature botnet enable

Web Control

ecmd /setfeature webcontrol pause

ecmd /setfeature webcontrol enable

Web access protection

ecmd /setfeature webaccess pause

ecmd /setfeature webaccess enable

Email client protection

ecmd /setfeature email pause

ecmd /setfeature email enable

Antispam protection

ecmd /setfeature antispam pause

ecmd /setfeature antispam enable

Anti-Phishing protection

ecmd /setfeature antiphishing pause

ecmd /setfeature antiphishing enable