[KB7830] Download and install the ESET Management Agent from the ESET website

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

  • Install ESET Management Agent on all client computers with ESET PROTECT On-Prem components or ESET Endpoint products
  • Facilitate communication between client computers and other ESET PROTECT On-Prem components, such as the ESET PROTECT Server
  • ESET PROTECT On-Prem version 11.x and earlier

Solution

Linux users


  1. Export Peer Certificate and Certification Authority
  2. ESET Management Agent setup

I. Export Peer Certificate and Certification Authority

  1. Open ESET PROTECT On-Prem in your web browser and log in.

  2. Click More Peer Certificates. Select the certificate you want to use for this installation and click Export.

    Figure 1-1
  3. Click MoreCertification Authorities. Select the Certification Authority and click Export Public Key.

    Figure 1-2
  4. Transfer the exported Peer Certificate and Certificate Authority to the client computer.


II. ESET Management Agent setup

  1. On the client workstation, open the ESET PROTECT Standalone installers download page. 

  2. Click Standalone installers. In the Component drop-down, select Agent. Select the client operating system. 

    Figure 2-1
  3. Double-click the downloaded .msi file and click Next to continue to the Setup Wizard.

    Figure 2-2
  4. Select I accept the terms in the License Agreement and click Next.

    Figure 2-3
  5. Click Next to agree to send crash reports and telemetry data to ESET. If you do not agree, deselect the check box next to Participate in product improvement program

    Figure 2-4
  6. Specify the Server host (name or IP address) and Server port of your ESET PROTECT Server (the default Server port is 2222). If you are using a different port, replace the default port with your custom port number. If you use a proxy for Agent–Server connection, check Use Proxy. Click Next

    Figure 2-5
  7. Click Browse. Search for the Peer Certificate and Certificate Authority. Click Next

    Figure 2-6
  8. Follow the on-screen steps to complete the installation. To verify the Agent is working properly, check the status log: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html

    Error 1603 when installing the ESET Management Agent

    Users may receive the notification "Error code 1603—Installation ended prematurely." If you are running the installer from a shared location, copy the live installer file to the local disk and attempt the installation again. Users can also right-click the installer file and select Run as Administrator from the context menu.

If you are performing a new installation of ESET PROTECT On-Prem, proceed to deploy ESET endpoint products to your client computers

ESET PROTECT On-Prem version 11.x and earlier
Do not use a user with two-factor authentication

You cannot use a user with two-factor authentication for server-assisted installations.

To install an ESET Management agent on a computer with a user with two-factor authentication, allow Server-assisted installation by another user and make sure the user has the following permissions:

  • Use permission from the Certification Authority that signed the server peer certificate and Use permission for at least one peer certificate. If no such certificate exists, the user will need to Write permission to create a new one.
  • Write permission for the static group where the user wants to add the computer.

For more information, refer to the Online Help topic.

Users on ESET PROTECT On-Prem version 11.x and earlier have the option for a Server assisted installation. The client computer must be able to communicate with ESET PROTECT Server over the network.

  1. Download and run the ESET Management Agent setup wizard.

  2. Select Server assisted installation and click Next.

    Figure 3-1
  3. Enter the Username and Password used to access your ESET PROTECT Web Console to allow the Agent to download updates and new certificates. To log in as a domain user, select the check box next to Log Into Domain. Click Next and then click Yes to accept the server certificate.

    Figure 3-2
  4. Select Do not create computer (computer will be created automatically during the first connection) or Choose custom static group. If you click Choose custom static group you will be able to select from a list of existing Static groups in ESET PROTECT. The computer will be added to the group you have selected. Click Choose custom static group and use the drop-down menu to select the appropriate static group for the client computer.

    Figure 3-3