[KB7730] Deploy the ESET Management Agent and the ESET endpoint product together from ESET PROTECT or ESET PROTECT Cloud

Issue

Windows users only

The deployment of the ESET Management Agent and the ESET endpoint product together from ESET PROTECT is available on Windows only.

  • ESET PROTECT and ESET PROTECT Cloud enable you to create a package to install the ESET Management Agent and ESET endpoint/server product together (Windows only)
  • The All-in-one installer contains the ESET Management Agent, ESET product, ESET Inspect Agent, License, and Policy in a pre-configured .exe installer package
Click the expanders below to show the procedure for ESET PROTECT or ESET PROTECT Cloud:
ESET PROTECT

Details

Click to expand

This method is for local installations and an Admin should run it for the following reasons:

  • It requires user interaction on the client workstation
  • It requires a domain admin account (not a regular user account)
  • Users are able to extract the certificate passphrase on the client workstation because it is embedded in the .exe file

The ESET Management Agent can also be installed using Live Installer, deployed remotely, or installed manually (a local installation of the ESET Management Agent only). Click for more options to deploy the ESET Management Agent.

The ESET Management Agent facilitates communication between client computers and other ESET PROTECT components such as the ESET PROTECT Server. ESET Management Agent must be installed on all client computers where other ESET PROTECT components or ESET endpoint/server products are installed.

Solution

Create an All-in-one installation package in ESET PROTECT Web Console

Follow the instructions below to use ESET PROTECT to create an installation package including ESET Management Agent, ESET Windows endpoint/server products, Policy, License, and ESET PROTECT management configuration.

ESET Server/Mail Security users

ESET Endpoint Security is selected in the example screenshots below. The process also applies to ESET Server/Mail Security (Windows Only) products. ESET Server/Mail Security users must select the product that applies to their system.

Silent installation

To run the installation with no user interaction, see  below.

  1. Open the ESET PROTECT Web Console in your web browser and log in.

  2. Click Quick Links → Other Deployment Options.

Figure 1-1
Click the image to view larger in new window 
  1. In the Local Deployment section, select Create All-in-one installer (Windows only) and then click Create Installer.
Figure 1-2
Click the image to view larger in new window 
  1. Under Package contents, select the check box next to Security product. If you have an active ESET Full Disk Encryption license, you can select the check box next to Full Disk Encryption. Deselect the check box next to Participate in product improvement program if you do not agree to send crash reports and telemetry data to ESET.
Figure 1-3
Click the image to view larger in new window 
Include ESET Inspect Agent in the Installer

To include ESET Inspect (formerly ESET Enterprise Inspector) Agent in the installer, click ESET Inspector Agent and click Select or Create. Read more about configuring ESET Inspect Agent to run with your ESET endpoint product.

Figure 1-4
Click the image to view larger in new window

  1. Click Security Product. In this section you can:

    • Select the license.
    • Click the list of products under Product/Version and select an ESET endpoint/server product.
    • Language (optional) - Select another language of the installer wizard.
    • Configuration Policy (optional) - Select a policy that will be applied to the ESET security product.
    • Select the check box next to I accept the terms of the application End User License Agreement and acknowledge the Privacy Policy.
    • Optionally, select an option next to the check box for Enable The ESET LiveGrid® feedback system. For more information about ESET LiveGrid® see our Online Help.
    • Optionally, select an option next to the check box for Enable detection of potentially unwanted applications. For more information about the detection of potentially unwanted applications see our Online Help.
Figure 1-5
Click the image to view larger in new window 
  1. If you specified a passphrase during the ESET PROTECT installation, click Certificate and type in your Certificate passphrase.
Figure 1-6
Click the image to view larger in new window 
  1. Click Advanced. In this section you can:
    • Set the Name, Description, Tags, and a Parent group for the installer.
    • Select the check box next to Enable ESET AV Remover to include ESET AV Remover in the installer.
    • In the Initial installer configuration, select a policy that will be applied to the ESET Management Agent.
    • Server hostname and Port are automatically selected for you.
    • If you use an HTTP Proxy: Select the check box next to Enable HTTP Proxy settings and type the required details (Server, Port, Login, Password).
Figure 1-7
Click the image to view larger in new window 
  1. Click Finish and click the download for 32-bit, 64-bit or ARM64 version depending on your system. 
Figure 1-8
Click the image to view larger in new window 

  1. Save the file to a shared location and access it from the client computer where it will be installed.

  2. Run the All-in-one installation package file, for example, PROTECT_Installer_x64_en_US.exe on the client computer to start the Setup Wizard using a domain Administrator account. 

Restart

ESET Server/Mail Security users must restart the server after the upgrade is complete.

For illustrated instructions for the Setup Wizard, see the ESET Package Installer Online Help topic.

Perform silent mode installation (ESET PROTECT)

You can install an All-in-one installation package generated from the ESET PROTECT Web Console on the client device without user interaction (silent mode). Make sure the following requirements are met before using this method: 

  • Store the installation package locally on the designated device
  • Perform the silent installation on an account with administrator privileges
  • We recommend that you run the command prompt as an administrator
  • Use the .exe installer type

If all of the above requirements are met, follow the steps below to perform a silent install:

  1. Navigate in the command line to the installation package location.

  2. Execute the installation package with the --silent and --accepteula parameters, for example:

C:\Users\Admin\Downloads\PROTECT_Installer_x64_en_US.exe --silent --accepteula.

If you enabled ESET AV Remover during the creation of the All-in-one installation package, you can now use the parameter --avr-disable to disable the ESET AV Remover, for example:

C:\Users\Admin\Downloads\PROTECT_Installer_x64_en_US.exe --silent --accepteula --avr-disable.

  1. The installation will now proceed in silent mode (no window or progress bar will appear during the installation).

  2. The package will be installed with default settings.

Settings for silent installation

By default, when performing a silent installation the following settings will be used:

  • The EULA is accepted
  • ESET LiveGrid is enabled
  • Detection of potentially unwanted applications is disabled.

These default settings can be changed after the installation is completed. They can also be modified in your installation package during Configuration. In the Configuration type field, you can Select configuration from the list of policies. Select a policy for ESET Management Agent and a policy for your ESET security product (you cannot create a new policy at this point).

ESET PROTECT Cloud

Details

Click to expand
  • ESET PROTECT Cloud enables you to create a package to install the ESET Management Agent and ESET endpoint/server product together (Windows only)
  • The All-in-one installer contains the ESET Management Agent, ESET product, ESET Inspect Agent, License, and Policy in a pre-configured .exe installer package

This method is for local installations and an Admin should run it for the following reasons:

  • It requires user interaction on the client workstation
  • It requires a domain admin account (not a regular user account)
  • Users are able to extract the certificate passphrase on the client workstation because it is embedded in the .exe file

The ESET Management Agent can also be installed using Live Installer, deployed remotely, or installed manually (a local installation of the ESET Management Agent only). Read more about the deployment of the ESET Management Agent.

The ESET Management Agent facilitates communication between client computers and other ESET PROTECT Cloud components. ESET Management Agent must be installed on all client computers where other ESET PROTECT Cloud components or ESET endpoint/server products are installed.

Solution

Create an All-in-one installation package in ESET PROTECT Cloud Web Console

Follow the instructions below to use ESET PROTECT Cloud to create an installation package including ESET Management Agent, ESET Windows endpoint/server products, Policy, License, and ESET PROTECT management configuration.

ESET Server Security for Microsoft Windows Server and ESET Mail Security for Microsoft Exchange Server

ESET Endpoint Security is selected in the example screenshots in this article. The process also applies to ESET Server Security for Microsoft Windows Server and ESET Mail Security for Microsoft Exchange Server. Users must select the product that applies to their system.

Silent installation

To run the installation with no user interaction, see Perform silent mode installation section.

  1. Open ESET PROTECT Cloud Web Console in your web browser and log in.

  2. Expand Quick links and click Windows devices.

Figure 1-1
Click the image to view larger in new window

  1. Select your preferred operating system. You can deselect the check boxes in the Protection and installation settings section (not recommended, these check boxes are selected by default). Select the check box next to I accept the End User License Agreement and acknowledge the Privacy Policy. You have three options how to distribute and deploy the ESET product:

    • Click Download to download the installer package to your computer.
    • Click the Copy icon to copy the download link to the clipboard.
    • Click the Envelope icon to send the download link via email.
If you want to customize the installer, click Customize installer and see the related section below.
Figure 1-2
Click the image to view larger in new window 

  1. Save the .exe file to a shared location and access it from the client computer where it will be installed.

  2. Run the All-in-one installer package file on the client computer to start the Setup Wizard using a domain Administrator account.

For illustrated instructions for the Setup Wizard, see the ESET Package Installer Online Help topic.

Customize installer

Click the expander below to see how to customize the installer for ESET security products.

Click to expand
  1. In the Basic section, select your preferred operating system (in this example, Windows is selected). Ensure that Live Installer option is selected. In the Package contents section, you can select the check box next to Full Disk Encryption if you want to include it in your installation package. Click Continue.
Figure 1-3
Click the image to view larger in new window 
  1. In the Security Product section, follow the list of options below and click Continue. 
    1. Verify if the correct License and Product/Version of the ESET security product is selected.
    2. Optionally, click  Select or Create to choose an existing configuration or create a new Security product configuration.
    3. Select the check box next to I accept the End User License Agreement and acknowledge the Privacy Policy.
    4. Optionally, select the check box to Enable The ESET LiveGrid® feedback system (recommended).
    5. Optionally, select the check box to Enable detection of potentially unwanted applications.

See ESET LiveGrid® Online Help and Potentially unwanted applications ESET Online Help for more information.

Figure 1-4
Click the image to view larger in new window 
  1. In Full Disk Encryption section (available if you have selected this option in step 1), verify if the correct License and Product/Version of the ESET security product is selected. Optionally, you can Select or Create a Configuration Policy. Select the check box next to I accept the End User License Agreement and acknowledge the Privacy Policy. Click Continue.
Figure 1-5
Click the image to view larger in new window 
  1. In the Advanced section, follow the list of options below and click Finish.
    1. Edit the Installer name.
    2. Optionally, click Select or New Static Group to choose an existing group or create a New Static Group.
    3. Optionally, in the Run ESET AV Remover section, select the check box to enable ESET AV Remover.
    4. Optionally, click Select or Create to choose an existing configuration or create a new Agent configuration.
    5. Optionally, select the check box to Enable HTTP proxy settings.
Figure 1-6
Click the image to view larger in new window 
  1. Run the All-in-one installer package file on the client computer to start the Setup Wizard using a domain Administrator account.

For illustrated instructions for the Setup Wizard, see the ESET Package Installer Online Help topic.

Perform silent mode installation (ESET PROTECT Cloud)

You can install an All-in-one installation package generated from the ESET PROTECT Cloud Web Console on the client device without user interaction (silent mode). Make sure the following requirements are met before using this method: 

  • Store the installation package locally on the designated device
  • Perform the silent installation on an account with administrator privileges
  • We recommend that you run the command prompt as an administrator
  • Use the .exe installer type

If all of the above requirements are met, follow the steps below to perform a silent install:

Settings for silent installation

By default, when performing a silent installation the following settings will be used:

  • The EULA is accepted
  • ESET LiveGrid is enabled
  • Detection of potentially unwanted applications is disabled.

These default settings can be changed after the installation is completed. They can also be modified in your installation package during the installer customization:

  1. In step 2, in the Security product configuration section, you can Select a configuration from the list of policies (or Create a new policy). Select a policy for your ESET security product.

  2. In step 4, in the Agent configuration section, you can Select or Create a policy for ESET Management Agent.

  1. Navigate in the command line to the installation package location.

  2. Execute the installation package with the --silent and --accepteula parameters, for example:

C:\Users\Admin\Downloads\epi_win_live_installer.exe --silent --accepteula

If you enabled ESET AV Remover during the creation of the All-in-one installation package, you can now use the parameter --avr-disable to disable the ESET AV Remover, for example:

C:\Users\Admin\Downloads\epi_win_live_installer.exe --silent --accepteula --avr-disable

  1. The installation will now proceed in silent mode (no window or progress bar will appear during the installation).

  2. The package will be installed with default settings.

Languages
Last Updated: May 30, 2022

Additional resources

User Guides

ESET Forum

YouTube videos

Need further assistance?

Contact ESET Technical Support

More Information

Support News
Customer Advisories