[KB6097] Deploy an install package to client workstations (6.4 and later)

Issue

  • ESET Remote Administrator version 6.4.x and later allows you to create a package to install the ERA Agent and ESET endpoint product (Windows only) together
  • The All-in-one installer now contains the ERA Agent, ESET product, License, and Policy in a pre-configured.exe installerpackage

This method is for local installations and an Admin should run it for the following reasons:

  • It requires user interaction on the client workstation
  • It requires a domain admin account (not a regular user account)
  • It is possible to extract the certificate passphrase on the client workstation because it is embedded in the .exe file

The ERA Agent can also be installed using Live Installer, deployed remotely or installed manually (a local installation of the ERA Agent only). See the following ESET Knowledgebase article for further deployment options:

Details

The ESET Remote Administrator Agent (ERA Agent) facilitates communication between client computers, other ESET Remote Administrator (ERA) components such as ERA Proxy Server, and the ERA Server. ERA Agent must be installed on all client computers where other ESET Remote Administrator components or ESET endpoint products are installed.

Solution

End of support for version 6.4 and 6.5 of ESET Remote Administrator / MDM

ESET Remote Administrator version 6.5 is currently in Limited Support status and will soon be in Basic Support status. It is expected to reach End of Life status in December 2020.

ESET Remote Administrator version 6.4 is currently in basic support status and is expected to reach End of Life status in December 2019.

The MDM functionality in ESET Remote Administrator version 6 is in Basic Support status as of April 11, 2019. After this date, MDM version 6 will no longer be available for download.

Create an all-in-one installation package in ERA Web Console

Follow the instructions below to use ESET Remote Administrator (ERA) to create a package containing the ERA Agent, ESET Windows endpoint product, Policy, License, and ERA management configuration.

Silent installation

To run the installation with no user interaction, seebelow.

  1. In theQuick Linkssection,clickDeploy ERA Agent.

Figure 1-1
Click the image to view larger in new window

  1. In theLocal Deploymentsection →Create all-in-one installer (Windows only), clickCreate Installer.

Figure 1-2
Click the image to view larger in new window

  1. Click the list of products next toProductand select an ESET endpoint product. Select the check box next toI agree with application End User License Agreement. You can select another language and license (optional).

Only ESET endpoint products version 6.4 and later will allow automatic product activation

If you choose version 6.3 or earlier products, automatic product activation will not work andyou will have to activate the product later. ESET endpoint products version 6.4 andlater will be automatically activated during the installation.

Figure 1-3

Click the image to view larger in new window

  1. If you specified a passphrase during the installation of ERA, expandCertificateand type in your Certificate Passphrase.

Figure 1-4
Click the image to view larger in new window

  1. ExpandAdvanced.You can set the name, description and a parent group for the installer. By selecting a check boxEnable ESET AV Remover, you can include ESET AV Remover in the installler. Server Hostnameand Port are automatically selected for you.

Figure 1-5
Click the image to view larger in new window

  1. ClickCreate Packageand then click the download for 32-bit or 64-bit version depending on your system.

Install package download fails

If the download of the installation package fails with no error message, run acomponent upgrade taskandreplace the repository .dllwith our updated version.

Figure 1-6

Click the image to view larger in new window

  1. Save the file to a shared location and access it from the client computer where it will be installed.
  2. Run the All-in-one installation package file (for example,ERA_Installer_x64_en_US.exe) on theclient computer to start the setup wizard using a domain Administrator account.


For illustrated instructions for the setup wizard, see theAll-in-one Agent setup wizardOnline Help topic.


Silent installation of all-in-one installation package

You can install an all-in-one installation package generated from ERA Web Console on the client device without user interaction (silent mode). Make sure the following requirements are met before using this method:

  • Store the installation package locally on the designated device
  • Perform the silent installation onan account with administrator privileges
  • We recommend that you run the command prompt as an administrator
  • Use the .exe installer type

If all of the above requirements are met, follow the steps below to perform a silent install:

  1. Navigate in the command line to the installation package location.
  2. Execute the installation package with the--silentparameter(for example,C:UsersAdminDownloads>ERA_Installer_x64_en_US.exe --silent).

    If you enabled ESET AV Remover during the creation of the all-in-one istallation package, you can now use the parameter--avr-disableto disable the ESET AV Remover (for example,C:UsersAdminDownloads>ERA_Installer_x64_en_US.exe --silent --avr-disable).

ESET Endpoint Security/Antivirus

If you are deploying the all-in-one installer from ERA version 6.5, the following parameters are required:

ERA_Installer_x64_en_US.exe --silent --accepteula
ERA_Installer_x64_en_US.exe --silent --accepteula --avr-disable

The "silent" parameter is not functional in ESET endpoint products version 6.5. When using the parameters, the installation is automated, but the GUI is visible during the installation.

The "silent" parameter is fully functional in ESET endpoint products version 6.6 and later.

  1. Installation will now proceed in silent mode (no window or progress barwill appear during the installation).
  2. The package will be installed with default settings.

Settings for silent installation

By default, when performing a silent installation the following settings will be used:

  • TheEULAis accepted
  • ESET LiveGrid isenabled
  • Detection of potentially unwanted applications isdisabled.

These default settings can be changed after the installation is completed. They can also be modified in your installation package duringConfiguration. In theConfiguration typefield you canSelect configuration from the list of policies.Select a policy for ERA Agent and a policy for your ESET security product (you can not create a new policy at this point).