Skip to main content

Installing/Uninstalling CxSAST in Silent Mode in a Centralized Environment

Installing CxSAST in a centralized environment refers to installing all CxSAST components on the same host.

The CxSAST silent install/uninstall path enables you to specify property values from the command line (CLI) and is ideal for large-scale enterprise deployments. This method provides you with the ability to perform a clean installation, upgrade, and uninstallation of CxSAST in silent mode, without having to continuously interact with GUI prompts.

Version 9.4 introduces the possibility to select the service account with which the CxSAST related services are going to run. In previous versions, these services have been running with the Network Service account by default. The available options are listed below:

  • Local System account

  • Network Service account (default)

  • This account: A dedicated account that you may have added to serve your CxSAST application. Enter the user credentials to enable CxSAST to access this account.

The example below illustrates the services associated with the Network Service account.


For the required syntax for the desired service account, refer to the Installing section below.


The required prerequisites are listed below. For further information and instructions on installing and making them available, refer to the installation guide.

  • C++ Redist 2010 and 2015 SP3

  • IIS v7.0 (or higher)

  • ASP.NET Core 3.1.11 Runtime & Hosting

  • MS SQL

  • Java 1.8 64-bit


  • Java installation should be located where permission fulfillment is possible (e.g., C:\Program Files) and not in personal user folders such as the Desktop folder. The approved and recommended Java version is 1.8. The minimum version for Oracle is 8u241 and for AdoptOpenJdk, it is 8u242.

  • If you are switching Java versions, for example, due to upgrading or otherwise modifying your CxSAST installation in a way that it requires a newer Java installation, you have to update the newer Java location with the certificate from the previous Java location. This means you have to copy the cacerts file from the previous Java location (..\Checkmarx Risk Management\jre\lib\security\) to the new Java location (<install path>\openjdk-8u242-b08-jre\lib\security\) and overwrite the existing cacerts file in the new location with your existing cacerts file.

  • Make sure that the SQL password does not exceed 32 characters. You may have to reset this password before upgrading as the SQL password could exceed 32 characters in previous versions. For further information, refer to Installing SAST in a Centralized Environment.

  • If you perform a silent installation, you cannot stop the installation before it is complete and you have to run Silent Reconfigure to properly configure the setup once it has been installed.

  • Access Control and CxManager must be installed on the same host computer.

Installing CxSAST in a Centralized Environment

This section illustrates the syntax for each available service account option.


Run the Command Prompt as administrator to install CxSAST in Silent Mode.


If no additional syntax is added, the CxSAST services use the Network Service account by default.

Common Installation

Local System Account

Dedicated Service Account

In the instructions for the regular GUI based installation, this account is referred to as 'This Account'.

Common CxSAST Installation Scenarios

These scenarios assume installing CxSAST for use on the network service account (default).

Uninstalling CxSAST


If you decide to uninstall CxSAST after you have installed a CxSAST Engine Pack on top of the CxSAST installation, you must first uninstall the Engine Pack, before uninstalling CxSAST.


For a table of available variables and parameters, refer to the Parameters page.

Upgrading CxSAST in High Availability Solutions

To install and configure high availability solutions, refer to the relevant instructions. In addition, a diagram that outlines the architecture for high availability solutions is available here.

To edit any of the protocols in use, the host and/or port definitions for any of the upgraded Cx components, refer to Changing the Server Name, IP Address or Port for Checkmarx Components for further information and instructions.


By default all product services are installed and configured to run with the Windows Network Service account. For updating or customizing non-default service accounts, please refer to Configuring CxSAST for using a non-default User (Network Service) for CxServices & IIS Application Pools.