[KB7876] Upgrade ERA Agents (6.5) or ESET Management Agents (7.x) on Windows clients to ESET Management Agents (8.x – 10.x) using the ESET PROTECT Run Command Task

Issue

  • Upgrade of Agents using the Components Upgrade Task (recommended Agent upgrade method) fails
  • Upgrade ERA Agents 6.5 or ESET Management Agents 7.x on Windows clients using the ESET PROTECT Run Command task (alternative Agent upgrade method for advanced users).

Solution

If you also manage computers running Linux, see the instructions for upgrading Agents on managed Linux computers.
Advanced users only

The steps described in this Knowledgebase article are for advanced users only.

Upgrade to Agent 8.1 using ESET PROTECT 8.x

This Knowledgebase article describes an upgrade to Agent 8.1. Users should have ESET PROTECT Server 8.x installed.

Use the Administrator account

We recommend that you use ESET PROTECT Administrator account for the following steps.


Follow the steps applicable to your environment:

  • If you manage both 32-bit and 64-bit Windows computers, follow the steps in both sections below.
  • If you manage only 64-bit Windows computers, follow only the steps in Upgrade Agents on 64-bit Windows computers.
  • If you do not know whether you manage any 32-bit Windows computers, follow the steps in both sections below.

Upgrade Agents on 32-bit Windows computers:

I. Create a new Dynamic group template for 32-bit Windows systems:

  1. In the ESET PROTECT Web Console, click MoreDynamic Group TemplatesNew Template.

    Figure 1-1
  2. Type a name and click Expression.

    Figure 1-2
  3. In the Operation drop-down menu select AND (All conditions have to be true).

  4. Add these rules (to add a new rule, click Add rule):

    • Installed software → Application nameis one ofESET Management Agent → click Add ESET Remote Administrator Agent.
    • Installed software → Application versiondoesn't have prefix8.0
    • OS editionOS platform= (equal)32-bit.
    • OS editionOS type= (equal)Microsoft Windows.
  5. Click Finish.

    Figure 1-3

II. Create a new Dynamic group for 32-bit Windows systems:

  1. In the ESET PROTECT Web Console, click Computers, click the gear icon next to ALL group and select New Dynamic Group.
Figure 2-1
  1. Type a name and click Template.
Figure 2-2
  1. Click Choose existing, assign the Dynamic group template created in Section I and click Finish.
Figure 2-3
  1. Wait a few minutes until the computers appear in the dynamic group.
No computers appear in the dynamic group

If no computers appear in the dynamic group, it means you do not manage any 32-bit Windows computers and do not need to continue with steps for 32-bit computers.


III. Create a new Client task for 32-bit Windows systems:

  1. In the ESET PROTECT Web Console, click TasksNewClient Task.
Figure 3-1
  1. Type the Name of the task, select Run Command from the Task drop-down menu and click Settings.
Figure 3-2
  1. In the Command line to run field, type (replace server with your actual server name and share with your share name):

    msiexec /qn /i "\server\share\Agent_x86.msi" /l*v! %TEMP%\era-agent-upgrade.txt ​
When using the installer package via HTTP, use one of these commands (your HTTP share or ESET repository):

msiexec /qn /i "http://server/share/agent_x86.msi" /l*v! %TEMP%\era-agent-upgrade.txt​
msiexec /qn /i "http://repository.eset.com/v1/com/eset/apps/business/era/agent/v8/8.0.1238.0/agent_x86.msi" /l*v! %TEMP%\era-agent-upgrade.txt
  1. Create a Trigger for this Client Task and in the Targets section, select the dynamic group for 32-bit Windows systems created in Section II.
There will be a brief period where two versions of the Agent are running on a single client machine. This is only temporary. Create an Outdated applications report to monitor the status of client computers hourly.
ESET Management Agent log file location:

The ESET Management Agent log file is accessible at: %TEMP%; for example: C:\Windows\Temp

See also log files location for all ESET PROTECT components in ESET PROTECT User Guide.



Upgrade Agents on 64-bit Windows computers:

I. Create a new Dynamic group template for 64-bit Windows systems:

  1. In the ESET PROTECT Web Console, click MoreDynamic Group TemplatesNew Template.
Figure 4-1
  1. Type a name and click Expression.
Figure 4-2
  1. In the Operation drop-down menu select AND (All conditions have to be true).

  2. Add these rules (to add a new rule, click Add rule):
    • Installed software → Application nameis one ofESET Management Agent → click Add ESET Remote Administrator Agent.
    • Installed software → Application versiondoesn't have prefix8.0
    • OS editionOS platform= (equal)64-bit.
    • OS editionOS type= (equal)Microsoft Windows.
  1. Click Finish.
Figure 4-3

II. Create a new Dynamic group for 64-bit Windows systems:

  1. In the ESET PROTECT Web Console, click Computers, click a gear icon next to ALL group and select New Dynamic Group.
Figure 5-1
  1. Type a name and click Template.
Figure 5-2
  1. Click Choose existing, assign the Dynamic group template created in Section I and click Finish.
Figure 5-3
  1. Wait a few minutes until computers appear in the dynamic group.

III. Create a new Client task for 64-bit Windows systems:

  1. In the ESET PROTECT Web Console, click TasksNewClient Task.
Figure 6-1
  1. Type the Name of the task, select Run Command from the Task drop-down menu and click Settings.
Figure 6-2
  1. In the Command line to run field, type (replace server with your actual server name and share with your share name):

    msiexec /qn /i "\server\share\Agent_x64.msi" /l*v! %TEMP%\era-agent-upgrade.txt ​
When using the installer package via HTTP, use one of these commands (your HTTP share or ESET repository):

msiexec /qn /i "http://server/share/agent_x64.msi" /l*v! %TEMP%\era-agent-upgrade.txt​
msiexec /qn /i "http://repository.eset.com/v1/com/eset/apps/business/era/agent/v8/8.0.1238.0/agent_x64.msi" /l*v! %TEMP%\era-agent-upgrade.txt
  1. Create a Trigger for this Client Task and in the Targets section, select the dynamic group for 64-bit Windows systems created in Section II.
There will be a brief period where two versions of the Agent are running on a single client machine. This is only temporary. Create an Outdated applications report to monitor the status of client computers hourly.
ESET Management Agent log file location:

The ESET Management Agent log file is accessible at: %TEMP%; for example: C:\Windows\Temp

See also log files location for all ESET PROTECT components in ESET PROTECT User Guide.