Knowledgebase business article search

Change the ESET Remote Administrator Server address used by the ESET Remote Administrator Agent (6.x)

Issue

Details

Communication between ESET Remote Administrator Server (ERA Server) 6 and ESET business edition products version 6 is managed by the ESET Remote Administrator Agent (ERA Agent). When migrating to a different ERA Server, the easiest way to change the server address used by the ERA Agent is to redeploy the agent.

Solution

End of support for version 6.4 and 6.5 of ESET Remote Administrator / MDM

ESET Remote Administrator version 6.5 is currently in Limited Support status and will soon be in Basic Support status. It is expected to reach End of Life status in December 2020.

ESET Remote Administrator version 6.4 is currently in basic support status and is expected to reach End of Life status in December 2019.

The MDM functionality in ESET Remote Administrator version 6 is in Basic Support status as of April 11, 2019. After this date, MDM version 6 will no longer be available for download.

Migrate certificates and create new ERA Agent Policy (recommended method for version 6.2 and later)

View permissions needed for least privilege user access

ERA 6.5 User Permissions

This article assumes that your ERA user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

 

A user must have the following permissions for the group that contains the modified object:

Functionality Read Use Write
Certificates  
Policies

A user must have the following permissions for their home group:

Functionality Read Use Write
Server Settings

A user must have the following permissions for each affected object:

Functionality Read Use Write
Groups & Computers

Once these permissions are in place, follow the steps below.

Default certificates

Peer certificates and Certification Authority created during the installation are by default contained in the static group All.

I. Migrate certificates to new server address

II. Migrate client computers to new server address


Modify ERA Agent Settings

A user must have the following permissions for the group that contains the modified object:

Functionality Read Use Write
Certificates  

Once these permissions are in place, follow the steps below.

Default certificates

Peer certificates and Certification Authority created during the installation are by default contained in the static group All.

  1. Open the ESET Remote Administrator Web Console.
     
  2. Click Admin CertificatesPeer Certificates, and then select the check box next to your default Agent certificate.
     
  3. Click ActionsExport and save the .pfx file to a save location of your choice.

    Figure 2-1
    Click the image to view larger in new window

  4. Click Admin CertificatesCertification Authorities, and then select the check box next to the ERA Certification authority used to sign your exported Agent Certificate.
     
  5. Click Actions → select Export Public Key and then save the .der file to a save location of your choice.

    Figure 2-2
    Click the image to view larger in new window

  6. Click Start Control PanelProgramsPrograms and Features (Windows XP / Windows Server 2003 users: Double-click Add or Remove Programs).
     
  7. Select ESET Remote Administrator Agent and click Change.

    Figure 2-3

  8. Click Next.

    Figure 2-4

  9. Click Repair.

    Figure 2-5

  10. In the Agent configuration screen, enter the address of your new ERA Server into the Server host field. Other settings should be left unchanged unless you are using a different port than the default port for ERA Server. Click Next when you are finished.

    Figure 2-6

  11. In the Peer certificate window, browse for the Agent Certificate (.pfx) and Certificate Authority (.der) files you exported in step 3 and then click Next.

    Figure 2-7

  12. Click Repair. Your client computer(s) will be able to communicate with your new ERA Server after the changes have been made.

    Figure 2-8


Redeploy the ERA Agent

When migrating to a new ERA Server, you can send an updated instance of the ERA Agent from your new server to client machines. During the ERA Agent deployment process, you will be prompted to enter connection information for your new ERA Server.

 

 



Was this information helpful?