Migrate managed computers from the existing ESMC server to the new ESET Security Management Center (ESMC) Server 7.x

Issue

  • Migrate client computers from the existing ESMC server to the new ESMC server using an agent policy
     

Solution

ESET Security Management Center (ESMC) 7 User Permissions

This article assumes that your ESMC user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

View permissions needed for least privilege user access

A user must have the following permissions for the group that contains the modified object:

Functionality Read Use Write
Certificates  
Policies

A user must have the following permissions for their home group:

Functionality Read Use Write
Server Settings

A user must have the following permissions for each affected object:

Functionality Read Use Write
Groups & Computers

Once these permissions are in place, follow the steps below.

I. Install the new ESET Security Management Server

  1. Install ESMC Server using the All-in-one package installer (Windows) or choose another installation method (Windows manual installation, Linux or Virtual Appliance).
  2. Import all required ESET licenses to ESMC.

 

II. Export the Certificate Authority from the new ESMC Server, Server One in this example

  1. On your new ESMC server, open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.

  2. Click MoreCertificates and select Certification Authorities.
     
  3. Click ERA Certification authority and select Export Public Key.
     
  4. The file is saved with a .der extension.

Figure 1-1
Click the image to view larger in new window

 

III. Export the Agent Certificate .pfx file from the new ESMC Server

  1. On your new ESMC server,open ESET Security Management Web Console (ESMC Web Console) in your web browser and log in.

  2. Click More → Peer Certificates.
     
  3. Click Agent certificate and select Export.
     
  4. The file is saved with a .pfx extension.

Figure 2-1

  1. Save the .pfx and .der files to a shared location that is accessible from Server Two.

IV. Import the Certificate Authority (CA) .der file to the existing ESMC Server (Server Two in this example)

  1. On your existing ESMC server, open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.

  2. Click More → Certificates Certification Authorities.
     
  3. Click Actions and select Import Public Key

Figure 3-1
Click the image to view larger in new window

  1. Click the Browse button. Navigate to the shared location where you saved the Certificate Authority (CA) .der file. Select the file and click Open.

Figure 3-2
Click the image to view larger in new window

  1. Type in a Description and click Import.

Figure 3-3
Click the image to view larger in new window

  1. After the Certificate has successfully imported, click Close. The Certification Authority from Server One is now in the Certification Authorities list on Server Two.

Figure 3-4
Click the image to view larger in new window

Make sure the exported Agent certificate .pfx file is accessible to the existing ESMC Server (Server Two) and continue to migrate Client Computers from the existing ESMC Server to the new ESMC Server.

 

V. Migrate client computers

  1. On your existing ESMC server, open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.

  2. Click Policies.
     
  3. Click Policies → New.

Figure 1-1
Click the image to view larger in new window

  1. Type a Name and optional Description for the policy in the appropriate fields.

Figure 1-2
Click the image to view larger in new window

  1. Click Settings, select ESET Management Agent from the drop-down menu and click Edit server list.

Figure 1-3
Click the image to view larger in new window

  1. Click Add. Type the FQDN / IP address of the new server in the Host field and click Ok.

Figure 1-4
Click the image to view larger in new window

  1. Verify the FQDN / IP address for the new server is correct and click Save.

Figure 1-5

  1. Click Change certificate.

Figure 1-6
Click the image to view larger in new window

  1. Select Custom certificate and click the folder icon.

Figure 1-7

  1. Navigate to the Agent Certificate .pfx file exported from the new ESMC Server, select the file and click OK.


    Figure 1-8

  1. The Agent certificate is in the policy.

Figure 1-9
Click the image to view larger in new window

  1. Select Assign → Assign. Select a client computer to migrate to the new server. Only select one client computer to start. Click OK.

Figure 1-10
Click the image to view larger in new window

  1. Click Finish.
     
  2. Verify the test client computer is now connected to the new ESMC Server and the Agent policy has the correct certificate.
     
  3. After a successful migration of the test client computer, assign the new policy you created to the rest of your client computers to complete the migration to the new ESMC Server.

  4. Client computers should now connect to your new ESMC Server. If clients are not connecting, see Problems after upgrade/migration of ESMC Server.

  5. Once you have everything running correctly on your new ESMC Server, carefully decommission your old ESMC Server.

Additional resources