Issue
- Create and deploy a new certificate for new workstations to automatically join a Dynamic Group based on Certificate serial number
Details
Click to expand
Certificates are used to authenticate products distributed under your license to identify computers on your network, which ensures secure communication between your ESET PROTECT On-Prem Server and clients. Certificates also establish the secured connection of ESET PROTECT On-Prem.
Your Certification Authority (CA) is used to legitimize certificates distributed from your network. In an enterprise setting, a public key can be used to automatically associate client software with the ESET PROTECT On-Prem Server to allow for remote installation of ESET products.
Solution
Create a new certificate in ESET PROTECT On-Prem for new workstations to join a Dynamic Group automatically:
-
Open ESET PROTECT On-Prem in your web browser and log in.
-
Click More → Peer Certificates → New and select Certificate.
Figure 1-1 -
In the Basic section, type in a Description to identify which computer or Dynamic Groups the certificate will be for. Select Agent in the Product drop-down menu.
Figure 1-2 -
Click Sign and click <Select Certification Authority>.
Figure 1-3 -
Select the check box next to the certification authority you want to use and click OK.
Figure 1-4 -
Click Finish.
-
The new certificate with the description you chose in step 3 will be included in the list of Peer Certificates. Right-click the new certificate and select Edit from the context menu.
Figure 1-5 -
In the Edit Certificate window, copy the Serial number value.
Figure 1-6 -
Click Computers, click the gear icon and select New Dynamic Group from the context menu.
Figure 1-7 -
Type a descriptive name for the Dynamic Group in the Name field.
Figure 1-8 -
Click Template and click New.
Figure 1-9 -
Type a descriptive name in the Name field for the template.
Figure 1-10 -
Click Expression and click Add Rule.
Figure 1-11 -
Expand Peer certificate, select Serial number and click OK.
Figure 1-12 -
Select = (equal) from the Peer certificate . Serial number drop-down menu. In the empty field, paste (CTRL + V) or type in the serial number you copied in step 7. Click Finish.
Figure 1-13 -
Click Summary to view details about the certificate. Click Finish when you are done making changes. Your new certificate will be displayed in the list of peer certificates (More → Certificates → Peer Certificates).
New Dynamic Group is ready to filter new workstations based on the certificate serial number. When you create an Agent installer, select the new certificate to be added to the new Dynamic Group.
