May the source be with you, but remember the KISS principle ;-)
Home Switchboard Unix Administration Red Hat TCP/IP Networks Neoliberalism Toxic Managers
(slightly skeptical) Educational society promoting "Back to basics" movement against IT overcomplexity and  bastardization of classic Unix


winstlcf (Tivoli Management Framework, Reference Manual)

Installs an endpoint on all operating systems except AS/400, and OS/2.


winstlcf [-a] [-C locale_name] [-D] [-d dir_name] [-e] [-f file_name] [-g machine[+port][:machine[+port]] [-i] [-j] [-L config_options] [-l endpoint_port] [-N endpoint] [-n endpoint_label] [-P] [-R] [-r policy_region] [-S share_name] [-s dir_name] [-T account] [-v] [-x TCPIP | IPX] [-Y] host [user_account password]...


The winstlcf command installs and starts the endpoint service (lcfd) on one or more workstations. This command can be used to install an endpoint on all operating systems except AS/400 and OS/2 operating systems. For AS/400 operating systems, use the command or Tivoli Software Installation Service. For OS/2 operating systems, use the provided InstallShield program or Tivoli Software Installation Service.



By default, the endpoint service starts after installation. You can install endpoints to multiple workstations by listing the machine names on the command line or using the -f option to specify a file that contains a list of machine names.

If you run the winstlcf command on a machine more than once, you have more than one instance of lcfd service running on that machine.

After you specify an installation password with the winstlcf command, that password becomes the default for all subsequent installations. To change the password, follow these steps:

  1. Explicitly specify another password.
  2. Attempt an installation on an unsupported operating system, which erases the global variable containing the password.
  3. Specify the -P option.


Specifies that endpoints be installed asynchronously. Without this option,the command waits for the endpoint to log in to its gateway before installing the next endpoint.
-C locale_name
For Linux and UNIX operating systems only, specifies the language locale for the target endpoint. If the -C option is not specified, the language is inherited from the lcfd environment.
-d dir_name
Specifies the target directory in which to install the endpoint software. The default location is the /opt/Tivoli/lcf directory for UNIX operating systems and the c:\Program Files\Tivoli\lcf directory for Windows operating systems. When installing a Windows endpoint from a Linux or UNIX Tivoli server, forward slashes in path names are also supported.
For Windows operating systems, indicates that the lcfep program is not installed. When installing in a Windows Terminal Server environment, this is the default behavior and cannot be overridden. In other words, the lcfep program cannot be installed in this environment.
For UNIX operating systems only, specifies to use trusted host access instead of exec.
-f file_name
Specifies the name of a file that contains a list of machine where an endpoint needs to be installed. The file must contain one machine name per line. Each line can contain the machine name, the user ID, the password, the policy region, and the label that is used to install the endpoint. The following is the format of a line:
host_name user_ID password policy_region endpoint_label


The host name of the machine where the endpoint is to be installed.
The user ID of the system administrator performing the installation.
The password associated with the user_ID.
Optional. The name of the policy region where the endpoint is moved.


If you specify endpoint_label and you do not want the endpoint moved to a policy region, you must specify policy_region as a null string ("").
Optional. The label of the endpoint.

For example, the following could be three lines in a file:

red root mstr_Key
orange chris d1n0mite "" orange-ep
yellow root mstr_Key NYC_PR yellow-ep
-g machine[+port][:machine[+port]]...
Specifies the Internet Protocol (IP) address or host name and, optionally, the port number of the gateway to which the endpoint logs in. Multiple gateway entries must be separated by colons (:). You must specify the port number if it is other than 9494, the default. If the -g option is omitted, the endpoint broadcasts to all gateways.


In a network address translation (NAT) environment, gateways must be specified as fully qualified domain names and not as IP addresses. Direct specification of gateway IP addresses fails in a NAT environment.
Turns off auto-start configuration for a Linux or UNIX endpoint after installation. By default, Windows endpoints always start automatically after installation.
Causes the command to use an encrypted secure shell (SSH) connection when connecting to the machine to install the endpoint.


  1. You cannot use SSH to perform installations on Windows targets.
  2. When you use this option to install an endpoint from a Windows system, you must use a trusted host access method. Because trusted host access methods do not use passwords, you cannot use the -j option with winstlcf options that require a password.
  3. To install an endpoint from a Windows system using the winstlcf command and -j option, you must launch a Cygwin command prompt and then run the winstlcf command from the version of Perl provided by Cygwin, as shown in the following example:
    /usr/bin/perl -S winstlcf -j options
    For more information, see the chapter about SSH in the Tivoli Enterprise Installation Guide.
-l endpoint_port
Specifies the port number for the endpoint. The default port number is 9495.
-L config_options
Passes configuration options to the lcfd command for starting the endpoint. If you specify multiple options or have spaces in a single option, you must enclose the text in double quotation marks ("). See the lcfd command for a list of valid options.
-n endpoint_label
Specifies an endpoint label provided by a user.


If you omit the -n option, the endpoint label is generated automatically. If you do not specify the endpoint port number, the label is the host name of the endpoint. If you specify the endpoint port number (for example, using the -l option), the endpoint label is generated as follows:
  • On Windows operating systems, the label has the format host-port.
  • On Linux and UNIX operating systems, the label has the format host-instance, if the instance number is greater than 1. The value of instance matches the instance number used in the $LCFROOT/dat/instance directory.
-N endpoint
Specifies an existing Windows endpoint in the domain or trust to be used as a proxy to remotely install all other Windows endpoints.


To install Windows endpoints using the winstlcf command, you must first install one Windows endpoint in the domain or trust manually using the InstallShield image. This endpoint is used as a proxy to remotely install all additional Windows endpoints in the domain or trust. After you have installed the proxy endpoint, install all additional Windows endpoints in that domain or trust using the winstlcf command and -N option. When you use this option, all endpoints to be installed are assumed to be Windows clients. Installing the Tivoli Remote Execution Service is not necessary.
Prompts for a password for each machine. This option is useful only when installing on remote hosts with different passwords. If each machine has the same password or if you do not use this option, the command prompts for a global password to use for each machine.
-r policy_region
Specifies a policy region to install the endpoint to.
Requires the Windows endpoint to restart after installation without prompting the user. This option is only needed if the Tivoli Authentication Package, TivoliAP.dll, was not previously installed on the endpoint or an older version of the Tivoli Authentication Package is being replaced.
-s dir_name
Specifies the source directory containing the endpoint installation image.
-S share_name
Specifies a destination share name (default = C$).
-T account
Specifies the Tivoli remote access account for the Windows endpoint.
Lists verbose installation information and error messages.
-x [TCPIP | IPX]
For Internetwork Packet Exchange (IPX) endpoints only. Specifies the protocol used by the endpoint. If you do not specify this option, the endpoint uses TCP/IP. Supported protocols are TCP/IP and IPX. To specify both TCP/IP and IPX, specify the option as -x=TCPIP,IPX. You cannot turn off the TCP/IP protocol for a gateway.
Installs the endpoint without confirmation. By default, this command identifies the actions that must be taken to perform the installation and requests confirmation before continuing. Using this option, the command identifies the actions and performs the installation without requesting confirmation.
host [user_account password]
Specifies the name of the machine on which the endpoint is installed. If you specify only the host name, the root or Administrator account is used. You are prompted for the password. You can specify a different user account and password by enclosing the three entries in single quotation marks. For example, you might enter the following:
winstlcf 'vernon DOMAIN-NT\chris d1n0mite'

If the Windows domain and the local computer use the same user_account name (such as Administrator), you must specify the fully qualified name for the account, as in the preceding example. Quotation marks are necessary when specifying fully qualified user accounts.


No Tivoli authorization role is required except when the -N option is specified. To use the winstlcf command and -N option, you must have the super, senior, or admin role.


  1. The following example installs the endpoint software on a UNIX workstation vernon, sets the locale to French, and starts the endpoint daemon (lcfd). The winstlcf command uses the root account and prompts for the root password on vernon. The installation image is placed in the default directory. The endpoint starts with the default configuration.
    winstlcf -C fr vernon
  2. The following example installs the endpoint software on a Windows workstation olympus and starts the endpoint service. The winstlcf command uses the Administrator account and prompts for the Administrator password on olympus. The installation image is taken from a Windows proxy fuji (a previously installed endpoint in the Windows domain). The software is installed in the default directory on olympus. The endpoint starts with the default configuration.
    winstlcf -N fuji olympus
  3. The following example installs the endpoint on a Windows workstation in a directory other than the default directory. In this example, the endpoint is installed on workstation bonnell on drive D with the share name steve. For instances where the share name of the destination drive is not the default name (D:\ = D$), use the -d to specify the directory (D:\tivoli\lcf), and use the -S to specify the share name (steve).
    winstlcf -N pctmp107 -d D:\tivoli\lcf -S steve bonnell
  4. The following example installs the endpoint software on workstation myoung. The endpoint performs its initial login through IP address
    winstlcf -g myoung
  5. The following example installs the endpoint on workstation bbunny and passes configuration options to the lcfd command to use when it starts the endpoint. In the example, -g cedar+1616 specifies the gateway and port that the endpoint contacts for initial login, and -Dlcs.machine_name=bbunny-ep assigns a specific name to the endpoint.
    winstlcf -L "-g cedar+1616 \
    -Dlcs.machine_name=bbunny-ep" bbunny
  6. The following example installs machines cedar and mahogany as endpoints. The installation process prompts for a global root password, but does not prompt for confirmation before installing.
    winstlcf -P -Y cedar mahogany
  7. The following example installs multiple endpoints from the endpt.txt file. The installation process does not prompt for password or installation confirmation. The software is installed in the /usr/lcf directory.
    winstlcf -f endpt.txt -Y -d /usr/lcf
  8. The following example installs the Windows endpoint antonella on the computer system agodino using IPX to connect to the NetWare gateway lux using the endpoint vernon as a proxy.
    winstlcf -x IPX -N vernon -g LUX+7787 -n antonella agodino
  9. The following example installs an endpoint on machine oak using an encrypted SSH connection from a Windows managed node .
    /usr/bin/perl -S winstlcf -j oak

    To install an endpoint from a Windows managed node using the winstlcf command and -j option, you must launch a Cygwin command prompt and then run the winstlcf command from the version of Perl provided by Cygwin.

See Also, wdelep



Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy


War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotesSomerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose BierceBernard Shaw : Mark Twain Quotes


Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law


Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOSProgramming Languages History : PL/1 : Simula 67 : C : History of GCC developmentScripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-MonthHow to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Haterís Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D

Copyright © 1996-2021 by Softpanorama Society. was initially created as a service to the (now defunct) UN Sustainable Development Networking Programme (SDNP) without any remuneration. This document is an industrial compilation designed and created exclusively for educational use and is distributed under the Softpanorama Content License. Original materials copyright belong to respective owners. Quotes are made for educational purposes only in compliance with the fair use doctrine.

FAIR USE NOTICE This site contains copyrighted material the use of which has not always been specifically authorized by the copyright owner. We are making such material available to advance understanding of computer science, IT technology, economic, scientific, and social issues. We believe this constitutes a 'fair use' of any such copyrighted material as provided by section 107 of the US Copyright Law according to which such material can be distributed without profit exclusively for research and educational purposes.

This is a Spartan WHYFF (We Help You For Free) site written by people for whom English is not a native language. Grammar and spelling errors should be expected. The site contain some broken links as it develops like a living tree...

You can use PayPal to to buy a cup of coffee for authors of this site


The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: March, 12, 2019