September 4, 2026

Non-Interactive mode deployment parameters

You can deploy Unified Access Gateway in non-interactive (headless) mode by supplying required configuration values as command-line parameters during PowerShell deployment. This method is useful for automated deployments and scripting scenarios where user prompts are not desirable.

The following parameters are available for non-interactive deployment.

Common parameters

These parameters apply across all platforms that support non-interactive deployment.

Parameter	Description
`rootPwd`	(Mandatory) Root account password for the UAG appliance.
`adminPwd`	(Mandatory) Admin account password for the UAG admin UI.

Additional Admin User parameter

Parameter	Description
`newAdminUserPwd`	(Optional) The password of one or more monitoring users defined in the INI section.

Example

-newAdminUserPwd "<MonitorUser1>:<password1>;<MonitorUser2>:<password2>"

-newAdminUserPwd "MonitorUser1:P@ssw0rd1;MonitorUser2:P@ssw0rd2"

Sample INI section for admin user

[AdminUser1]
adminMonitoringPasswordPreExpired=true
enabled=true
name=MonitorUser1
[AdminUser2]
adminMonitoringPasswordPreExpired=true
enabled=true
name=MonitorUser2

Edge Service / Workspace ONE parameters

Parameter	INI Section	Description
`awAPIServerPwd`	`[Airwatch]`	Single shared credential used when Tunnel Gateway and/or SEG are configured together.
`awTunnelGatewayAPIServerPwd`	`[Airwatch]`	Used when Tunnel Gateway is configured.
`awCGAPIServerPwd`	`[AirWatchContentGateway]`	Used when Content Gateway is configured.
`awSEGAPIServerPwd`	`[AirwatchSecureEmailGateway]`	Used when Secure Email Gateway is configured.

Platform-Specific password parameters

The following table lists the commands for non-interactive deployment on each platform.

<ini-filename> - name of the .ini file that contains the deployment configuration.
<ceip-yes-no> - specifies whether to participate in the Customer Experience Improvement Program (CEIP). Valid values are yes or no.

Platform	Command Syntax
vSphere	`.\uagdeploy.ps1 <ini-filename> -rootPwd "<root_password>" -adminPwd "<admin_password>"`
Hyper-V	`.\uagdeployhv.ps1 <ini-filename> -rootPwd "<root_password>" -adminPwd "<admin_password>"`
Microsoft Azure	`.\uagdeployaz.ps1 <ini-filename> <root-pwd> <admin-pwd> <ceip-yes-no>`
Google Cloud Platform (GCP)	`.\uagdeploygce.ps1 <ini-filename> <root-pwd> <admin-pwd> <ceip-yes-no>`
Amazon Web Services (AWS EC2)	`.\uagdeployec2.ps1 <file-name>.ini -rootPwd "<root_password>" -adminPwd "<admin_password>"`
VMware Cloud Director (vCloud Director)	`.\uagdeployoc.ps1 <ini-filename> -rootPwd "<root_password>" -adminPwd "<admin_password>" -ocPassword "<password>"`
Nutanix	`.\uagdeployntnx.ps1 <ini-filename> -rootPwd "<password>" -adminPwd "<password>" -ceipEnabled "yes" -prismCentralPassword "<password>"`

Other parameters

The following parameters are switches. Do not provide a value after the parameter name.

Parameter	Description
`-noSSLVerify`	Disables SSL/TLS certificate verification. Example: `.\uagdeploy.ps1 uag.ini -noSSLVerify`
`-disableVerification`	Applicable for vSphere deployments only. Disables certificate/manifest signature verification of the source OVA/OVF package during import — skips validating the digital signature and certificate chain embedded in the OVA.

Was this page helpful?