Issue

• Install ESET PROTECT on SUSE Linux Enterprise Server 15

Details

---

Click to expand

This article describes the installation process on SUSE Linux Enterprise Server 15 SP3 as installed from the official small installation image. If you already have some software installed, the installation process might differ.

To access the ESET PROTECT Web Console on your Linux server you need a running desktop environment (for example, Gnome) and a web browser (for example, Mozilla Firefox). Otherwise, you can access the Web Console remotely from another computer.

---

Solution

1. Prerequisites
2. Install and configure the MySQL database
3. Install and setup ESET PROTECT Server
4. Install the ESET PROTECT Web Console
5. Install the ESET Management Agent

---

I. Prerequisites

1. Verify your internet connection. If you have a problem with your connection, enable Network Manager and use the following command to list the available network devices:

nmcli d

2. To connect to the network, use the command ip.

3. Add openSUSE OSS software package repositories to your software management. (Click here to open the instructions)

4. Install additional ESET PROTECT Server prerequisites. Depending on your SUSE 15 installation, some of these may be already installed on your server.

sudo zypper install krb5-client

Repeat the command for the following packages:
1. apache-commons-daemon
2. tomcat9
3. openldap2-client
4. unixODBC
5. mysql-connector-odbc
6. java-1_8_0-ibm

---

II. Install and configure the MySQL database

Open a Terminal and follow the steps below to install MySQL Server. 

1. Download the Repository package:

wget http://dev.mysql.com/get/mysql80-community-release-sl15-5.noarch.rpm

2. Install the downloaded release package:

sudo rpm -Uvh mysql80-community-release-sl15-5.noarch.rpm

3. Import the GnuPG key:

sudo rpm --import /etc/RPM-GPG-KEY-mysql-2022

4. Refresh the repository information:

sudo zypper refresh

5. Install the MySQL Server by the following command:

sudo zypper install mysql-community-server

6. Start the MySQL Server:

systemctl start mysql

7. Verify MySQL is running. After you run the following command and verify the statute is active, press Ctrl + C to quit it.

systemctl status mysql

8. Use the following command to reveal the temporary MySQL password:

sudo grep 'temporary password' /var/log/mysql/mysqld.log

9. Perform the mysql_secure_installation that will allow you to set basic settings. Use the temporary password, then you will be prompted to create a new password.

mysql_secure_installation

10. Follow the steps in the Online Help topic to configure the MySQL server.

11. Save and close the file, then type the following command to restart MySQL server and apply the configuration:

systemctl restart mysql

---

III. Install and setup ESET PROTECT Server

1. Verify the odbcinst.ini file for the configuration. The output should contain the names of available drivers. For example, [MySQL ODBC 8.0 Unicode Driver].

cat /etc/unixODBC/odbcinst.ini

2. Verify your odbcinst version.

odbcinst --version

3. Update the configuration files that control ODBC access by the following command:

sudo odbcinst -i -d -f /etc/unixODBC/odbcinst.ini

4. Download the ESET PROTECT Server install file (you can download it from the ESET Download page). For example:

wget https://download.eset.com/com/eset/apps/business/era/server/linux/latest/server-linux-x86_64.sh

5. Make the ESET PROTECT Server install file executable:

chmod +x server-linux-x86_64.sh

6. Run the installation command on your Server install file. See our Online Help topic for instructions on how to modify the installation command.

sudo ./server-linux-x86_64.sh \
--skip-license \
--db-type="MySQL Server" \
--db-driver="MySQL ODBC 8.0 Unicode Driver" \
--db-hostname=127.0.0.1 \
--db-port=3306 \
--db-admin-username=root \
--db-admin-password=password \
--server-root-password=password \
--db-user-username=root \
--db-user-password=password \
--cert-hostname="hostname, IP, FQDN"

7. Start the ESET PROTECT Server:

systemctl start eraserver

8. Verify that the ESET PROTECT Server is running:

systemctl status eraserver

---

IV. Install the ESET PROTECT Web Console

1. Download the ESET PROTECT Web Console application package (you can download it from the ESET Download page). For example:

wget https://download.eset.com/com/eset/apps/business/era/webconsole/latest/era.war

2. Copy the application package file to the tomcat webapps folder:

sudo cp era.war /srv/tomcat/webapps/

3. Check if the ESET PROTECT Server and the tomcat service are running:

sudo systemctl status eraserver
sudo systemctl status tomcat

2. If one of the services is not active, start it.
   1. To start Tomcat service:

sudo systemctl start tomcat

2. To make Tomcat start after each boot run:

sudo systemctl enable tomcat

4. Connect to the Web Console. For example, on your Linux server, open a web browser and navigate to the following URL (where 10.1.0.1 is replaced by the IP address of your machine):

http://10.1.0.1:8080/era

The connection to the Web Console is now available only via HTTP. You can set up HTTPS connection. If you are unable to connect to the Web Console from a different computer, check if network ports are open. The SUSE Linux may have a firewall blocking the 8080 port for outside connection.

---

V. Install the ESET Management Agent

Install the ESET Management Agent on the Linux server running the ESET PROTECT Server.

1. Download the Agent installer.

wget https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-x86_64.sh

2. Set the installer as executable.

chmod +x agent-linux-x86_64.sh

3. Run the installation command on your Management Agent install file with the following parameters:

sudo ./agent-linux-x86_64.sh \
--skip-license \
--hostname=10.1.0.1 \
--port=2222 \
--webconsole-user=Administrator \
--webconsole-password=password \
--webconsole-port=2223

The hostname is the IP or hostname of the PROTECT Server machine. The webconsole-password is the password you use to log in to ESET PROTECT Web Console

4. When prompted, press y to accept the certificate. You can ignore any errors about SELinux returned by the installer.

5. Set the ESET Management Agent service to start and enable starting after computer boot-up.

sudo systemctl enable eraagent
sudo systemctl start eraagent

6. Open the ESET PROTECT Web Console and log in as Administrator. If the Computers section contains your server machine, the Agent is installed successfully.