Business article search

Deploy the ESET Remote Administrator Agent (6.x)

Details

The ESET Remote Administrator Agent (ERA Agent) facilitates communication between client computers, other ESET Remote Administrator (ERA) components such as ERA Proxy Server, and the ERA Server. ERA Agent must be installed on all client computers where other ESET Remote Administrator components or ESET Endpoint products are installed.

Solution

Getting Started with ERA: Step 4 of 6

Add Client Computers | Deploy ESET endpoint solutions

The ERA Agent can be installed using Local Deployment or Remote Deployment. Read the descriptions below and then click the appropriate link to view step-by-step instructions:

Local Deployment

  • All-in-one installer (Windows only): Download the ERA Agent and your ESET security product in the same package.

  • Agent Live Installer: Client computers receive a pre-configured Live Installer package from the ERA Server in the form of a batch (.bat) file. The admin or user runs the batch file to download and install ERA Agent. This is the suggested method for small to medium-sized networks.
  • Download Agent from ESET website: Manually download the ERA Agent on your client computer and choose from a Server-assisted or Offline installation.

Remote Deployment

  • Use GPO or SCCM for deployment: Distribute the ERA Agent for enterprise environments or environments with a high number of client computers.
  • Server Task Agent installation: Use the ERA Web Console to locate unmanaged computers, execute a server task, and silently install the ERA Agent on clients. This is the suggested method for enterprise applications.
  • Deployment tool: It is a convenient way to distribute the ERA Agent together with an ESET product on client computers. It enables you to use custom created installers. ESET Remote Deployment Tool is dedicated to deploy ERA Agent to client computers with Microsoft Windows operating systems.

Permissions changes in ESET Remote administrator 6.5 and later

Before proceeding, please note important changes to user access rights and permissions in the latest versions of ESET Remote Administrator.

View Permissions Changes
  • Each user has a home group and each user can be assigned multiple permission sets. All objects created by a user are assigned to the home group of that user. The administrator user profile automatically belongs to the All home group, which contains all other groups as children, granting the administrator full control of all objects.
  • The term "objects" refers to computers, devices, templates, policies, tasks, notifications and reports, all of which are always located in a static group.
  • If a user has access to a given group, that user has the same level of access to child groups of that group. The administrator has full access to all groups.
  • Permissions sets allow you to configure access for a specific group and define actions that can be performed with specific objects in that group.

See our Online Help topic for more information on permissions in ERA 6.5

 


Agent Live Installer

Video tutorial

"Failed to get installers" or "Failed to synchronize package repository"

If you receive a "Failed to get installers" or "Failed to synchronize package repository" error while performing the steps below, it is possible your third-party firewall is blocking certain communications based on the country of origin. If this is the case, we recommend allowing communications to and from Slovakia on your third-party firewall.


Error 1603 when installing the ERA Agent

Occasionally during installation of the ERA Agent, the notification "Error code 1603- Installation ended prematurely" will be displayed. Use the following troubleshooting steps to resolve this error:

  • If you are running ESET Live Installer from a shared location, copy the live installer file to the local disk and attempt installation again.
  • When you run the ERA Agent Live installer, right-click it and select Run as Administrator from the context menu.
  • If the issue persists, collect and submit an ESET Sysinspector log to ESET technical support.

A user must have the following permissions for their home group:

Functionality Read Use Write
Stored Installers

A user must have the following permissions for the group that contains the modified object:

Functionality Read Use Write
Certificates

A user must have the following permissions for each affected object:

Functionality Read Use Write
Groups & Computers

Once these permissions are in place, follow the steps bellow.

Default certificates

Peer certificates and Certification Authority that are created during the installation are by default contained in the Static Group All.

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.
  1. Click Deploy ERA Agent.

Figure 1-1
Click the image to view larger in new window

  1. In the Create Agent Live Installer section, you can select Create Installer or Select existing. In this example Create Installer option is selected.

Figure 1-2

  1. Select Parent group where the computer will be contained after the installation.
  1. Click Get Installers.

Remote Clients

If you are creating a live installer to allow remote clients to check into a central ERA Server, expand Configuration. In the Server Hostname (Optional) field, type the public fully qualified domain name (FQDN) or public IP address for the ERA Server and then click Get Installers.

Figure 1-3
Click the image to view larger in new window

  1. Next to the installer file(s) you want to send to client computers, click Download. Make note of the .zip file's saved location.

Figure 1-4
Click the image to view larger in new window

  1. Distribute the compressed Live Installer file(s) to your target client computers using email, a shared folder, or removable media (for example, a USB flash drive or CD).

  2. On the client computer, extract the Live Installer file using a program like Winzip or 7Zip.

  3. Double-click the extracted batch file on your client workstation to install ERA Agent.

  4. If you are performing a new installation of ERA, proceed to Step 5, deploy ESET endpoint products to your client computers.


Download Agent from ESET website

Video tutorial

Error 1603 when installing the ERA Agent

Occasionally during installation of the ERA Agent, the notification "Error code 1603- Installation ended prematurely" will display. Use the following troubleshooting steps to resolve this error:

  • If you are running ESET Live Installer from a shared location, copy the live installer file to the local disk and attempt installation again.
  • When you run the ERA Agent Live installer, right-click it and select Run as Administrator from the context menu.

  1. On your client workstation, go to the ESET Remote Administrator 6 Download page and click Standalone installers.

    Figure 2-1

  2. In the Configure download section, select the information below and then click Download.

    Figure 2-2

    • ERA component: Select Agent
    • Operating system and Bitness: Select the operating system of the client
  3. Double-click the downloaded .msi file and click Next to continue to the Setup Wizard.

    Figure 2-3

  4. Accept the End-User License Agreement and click Next.

    Figure 2-4

  1. Select the type of installation you want to perform a Server assisted installation or Offline installation.
    • For Server assisted installation:

      Your client computer must be able to communicate with ERA Server over the network. This method is not currently available for OS X computers.

      1. Specify the Server host (name or IP address) and Server port of your ERA Server (the Default Server port is 2222). If you are using a different port, replace the default port with your custom port number. Verify Server assisted installation is selected and click Next.

        Figure 2-5

      2. Enter the Username and Password used to access your ERA Web Console to allow the Agent to download updates and new certificates.

        Figure 2-6

      3. Click Choose custom static group and use the drop-down menu to select the appropriate static group for the client computer. Follow the steps on-screen to complete installation.
      4. If you are performing a new installation of ERA, proceed to Step 5, deploy ESET endpoint products to your client computers.
    • For Offline installation:

      A user must have the following permissions for the group that contains the modified object:

      Functionality Read Use Write
      Certificates

      Once these permissions are in place, follow the steps bellow.

      Default certificates

      Peer certificates and Certification Authority that are created during the installation are by default contained in the Static Group All.

      Your client computer is unable to communicate with the ERA Server, or you are installing an OS X client. Before performing an offline installation, verify you have the Agent certificate available on the targeted client computer.

      1. Specify the Server host (name or IP address) and Server port of your ERA Server (the Default Server port is 2222). If you are using a different port, replace the default port with your custom port number. Verify Offline installation is selected and click Next.

        Figure 2-7

      2. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. Click Admin Certificates. Select the certificate you want to use for this installation and click Export. Transfer the exported certificate to the client computer using removable media or another method of your choice.

        Figure 2-8
        Click the image to view larger in new window

      3. In the Agent Setup Wizard, next to Peer certificate, click Browse. Navigate to the certificate you want to use for this installation and click Open. If the Certificate authority is already present in ERA, leave this field blank. Click Next.


Figure 2-9

  1. Follow the steps on-screen to complete installation. To verify the Agent is working properly, check the status log located at: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html.
  2. If you are performing a new installation of ERA, proceed to Step 5, deploy ESET endpoint products to your client computers.




Was this information helpful?