[KB3675] Deploy the ESET Remote Administrator Agent via SCCM or GPO (6.x)
Issue
- Distribute the ESET Remote Administrator Agent (ERA Agent) installer file for distribution via Group Policy Object (GPO) or System Center Configuration Manager (SCCM)
- An alternate method to distribute ERA Agent in enterprise environments or environments with a high number of client computers
Details
This article explains how to create a modified version of the ERA Agent Installer file for distribution in large and enterprise-level environments. The .msi file for the ERA Agent is separated from the .bat file available from ESET Remote Administrator and then modified so that it will be able to recognize the proper certificate and port for communication with your ERA Server after distribution to client computers.
Solution
Getting Started with ERA: Step 4 of 6
← Add Client Computers | Deploy ESET endpoint solutions →
This article is for ESET Remote Administrator version 6.4 and later.
Version 6.3 and earlier 6.x users, go to the process below.
Default certificates
Peer certificates and Certification Authority created during the installation are by default contained in the static group All.
- On your ERA Server, click the appropriate ERA 6.5 Agent installer file below and save the file to a shared folder your client computers can access. Visit our Knowledgebase article for a complete list of ERA 6.5 Component installers.
| Agent | Windows | Linux | macOS |
|---|---|---|---|
| 64-Bit | 64-bit Download | 64-bit Download | |
| 32-Bit | 32-bit Download | 32-bit Download | 32-bit Download |
- Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.
- Click Deploy ERA Agent.
Figure 1-1
Click the image to view larger in new window
- In the Use GPO or SCCM for deployment section, click Create Script.
Figure 1-2
Click the image to view larger in new window
- Click Create Package. Save the
install_config.inifile to the same shared folder from Step 2. For customers using custom certificates, refer to the Custom certificates with ERA Online Help topic for more details.
Figure 1-3
Click the image to view larger in new window
Client computers need read/execute access
Verify all appropriate client computers have read/execute access to the folder containing the .msi and .ini files. Right-click the folder from Step 2 and click Properties. Click the Security tab. Review each machine and confirm the check box next to Read & execute is selected under the Allow column. If not, click Edit, adjust the settings and click Apply.
Figure 1-4
- Refer to one of the processes below to deploy the package:
- Deploy the ESET Remote Administrator Agent using a Group Policy Object (GPO)
- Deploy the ESET Remote Administrator Agent using System Center Configuration Manager (SCCM)
- Once you have completed the instructions from the appropriate article, proceed to Step 5, deploy ESET endpoint products to your client computers if you are performing a new installation of ERA.
Version ERA Server 6.3 and earlier 6.x versions
Prerequisites
- The Orca database editor tool must be installed on your computer. Orca is available as part of the Windows SDK. You can also use Orca's successor SuperOrca which is available for download separately from Windows SDK and has a manual.
- The ERA Agent installer file must be present on your system. You can download the installer file from within ESET Remote Administrator. Click here for step-by-step instructions.
Edit the ESET Remote Administrator installer file
- Click Start → All Programs → Orca to launch Orca database editor.
- Click File → Open, navigate to the ERA Agent installer file that you want to apply the transformation file to, select it and then click Open.
- Click Transform → New Transform.
Figure 2-1
Click the image to view larger in new window
- Select Property from the Tables section, right-click anywhere in the list of property values and select Add Row from the context menu.
Figure 2-2
Click the image to view larger in new window
- Add the property P_HOSTNAME and type the hostname or IP address of your ESET Remote Administrator Server (ERA Server) into the Value field.
- Repeat steps 4 and 5 to add the property P_PORT, where the value is the port used to connect to your ERA Server (2222 by default).
Figure 2-3
Click the image to view larger in new window
- Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?
- Click Admin
→ Certificates → Peer Certificates, locate the Agent certificate for the ERA Agents you will be distributing, click it and select Export as Base64. Save the exported file to your Desktop.
Figure 2-4
Click the image to view larger in new window
- Click Certificate Authorities, click your ERA Certificate Authority and select Export public key as Base64. Save the exported file to your Desktop.
Figure 2-5
Click the image to view larger in new window
- In Orca, add the following three rows to the file (see steps 4 and 5 above for instructions). See below for property value details:
P_CERT_CONTENT: Copy the contents of the peer certificate file into the value field (open it in a text editor such as notepad).
P_CERT_PASSWORD: Only create this if your peer certificate requires a password. Enter the password to use the peer certificate.
P_CERT_AUTH_CONTENT: Copy the contents of the Certificate Authority public key file into the value field (open it in a text editor such as notepad).
- Click Transform → Generate Transform and save the transform file to your Desktop. Refer to one of the processes below to deploy the file:
Figure 2-6
Click the image to view larger in new window
- Once you have completed the instructions from the appropriate article, proceed to Step 5, deploy ESET endpoint products to your client computers if you are performing a new installation of ERA.
