Issue
- Direct clients to connect to a new ESET PROTECT Server by migrating certificates and setting your policy to the new server's address
Details
Communication between ESET PROTECT Server and ESET business edition products is managed by the ESET Management Agent. When migrating to a different ESET PROTECT Server, the easiest way to change the server address used by the ESET Management Agent is to redeploy the agent.
Solution
There are three ways to specify a new server address for the ESET Management Agent to use when migrating to a new ESET PROTECT Server.
- Migrate certificates and adjust the ESET Management Agent Policy in the ESET PROTECT Web Console
- Modify ESET Management Agent settings
- Redeploy the ESET Management Agent
Migrate certificates and create new ESET Management Agent Policy
- Open ESET PROTECT On-Prem in your web browser and log in.
- Click More → Peer Certificates, and then select the check box next to your default Agent certificate.
- Click Actions → Export and save the
.pfxfile to a save location of your choice.
Figure 1-1 - Click More → Certification Authorities, and then select the check box next to the Certification authority used to sign your exported Agent Certificate.
- Click Actions → select Export Public Key and then save the
.derfile to a save location of your choice.
Figure 1-2 - Click Start → Control Panel → Programs → Programs and Features.
- Select ESET Management Agent and click Change.
Figure 1-3 - Click Next.
Figure 1-4 - Click Repair.
Figure 1-5 - In the Agent configuration screen, enter the address of your new ESET PROTECT Server into the Server host field. Other settings should be left unchanged unless you are using a different port than the default port for ESET PROTECT Server. Click Next when you are finished.
Figure 1-6 - In the Peer certificate window, browse for the Agent Certificate (
.pfx) file you exported in step 3 and Certification Authority (.der) file you exported in step 5 and then click Next.
Figure 1-7 - If the Agent is password protected, type the ESET Management Agent password. Otherwise, leave the password field blank. Click Next.
Figure 1-8 - Click Repair. Your client computers will be able to communicate with your new ESET PROTECT Server after the changes have been made.
Figure 1-9 - If the installer asks you for the
.msifile, you can download the.msifrom the ESET Web page. When the Installation Wizard completes the repair, click Finish.
Redeploy the ESET Management Agent
When migrating to a new ESET PROTECT Server, you can send an updated instance of the ESET Management Agent from your new server to client machines. During the ESET Management Agent deployment process, you will be prompted to enter connection information for your new ESET PROTECT Server.
