Commands for local management of Safetica client

This article describes all commands which can be used for local management of Safetica client on an endpoint.

In order to use any of them run command prompt as administrator and navigate to Safetica Client folder (Program Files\Safetica). Local management commands are disabled by default and must be enabled individually. To enable the action, use -allow switch with corresponding parameter. A password must be entered after running the command to allow the action. This is a special local management password (could be changed in Safetica Management Console -> Maintenance -> Client settings -> Password for local administration). Default password is the same as initial password for Safetica account.

The -allow switch has the following parameters:

  • stop – allows stopping the Safetica Client Service

  • uninstall – allows uninstalling the Safetica Client Service

  • reinstall – allows reinstalling the Safetica Client Service

  • connection – allows setting the connection between the Safetica Client Service and the server service of the Safetica Management Service

  • layer – allows network layer manipulation

  • debug – allows setting debug logs of the Safetica Client Service

For example if you want to uninstall the service, use the following command:

STCService.exe -allow uninstall

If you want list all currently permitted actions run STCService.exe -list | more command.

When you have completed local management, this action must be disabled again. To disable a specific action run STCService.exe -deny x command (where x stands for parameter of the action). If you wish to disable all actions currently permitted, use the -deny switch with option all.


C:\Program Files\Safetica>STCService.exe -list | more

Allowed actions found: 2

Id | Action | Details | Until | Count | Period | Password | Local | User


nfrsb | STOP | - | - | - | NO | NO | YES |

C:\Program Files\Safetica>STCService.exe -deny nfrsb

C:\Program Files\Safetica>STCService.exe -deny all