[KB7830] Download and install ESET Management Agent on computers with ESET PROTECT On-Prem components or endpoint products

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you are unable to perform the tasks below (the option is unavailable), create a second administrator user in ESET PROTECT or ESET PROTECT On-Prem with all access rights.

Solution

Related solutions: Linux users

  1. Export Peer Certificate and Certification Authority
  2. ESET Management Agent setup

I. Export Peer Certificate and Certification Authority

  2. Click More → Peer Certificates → the certificate you want to use for this installation → Export.

  3. Click More → Certification Authorities → the Certification Authority you want to use for this installation → Export Public Key.

  4. Transfer the exported Peer Certificate and Certificate Authority to the client computer.

II. ESET Management Agent setup

  1. On the client workstation, open the ESET PROTECT Standalone installers download page.

  2. Click Standalone installers and select the Component and Operating system from the drop-down menu.

  3. Double-click the downloaded .msi file and click Next.

  4. Select I accept the terms in the License Agreement and click Next.

  5. Click Next to agree to send crash reports and telemetry data to ESET. If you do not agree, deselect the check box next to Participate in product improvement program.

  6. Specify the Server host (name or IP address) and Server port of your ESET PROTECT Server (the default Server port is 2222). If you are using a different port, replace the default port with your custom port number. If you use a proxy for Agent–Server connection, check Use Proxy. Click Next.

  7. Click Browse. Search for the Peer Certificate and Certificate Authority. Click Next.

  8. You can leave the default destination folder for ESET Management Agent installation or change it. Click Next.

  9. If ESET Management Agent is protected with a password, type the password and click Next.

  10. Click Install and follow the on-screen steps to complete the installation.

  11. To verify the Agent is working properly, check the status log: C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html

    Error 1603—Installation ended prematurely

    If you are running the installer from a shared location, copy the live installer file to the local disk and attempt the installation again. You can also right-click the installer file and click Run as Administrator in the context menu.

If you are performing a new installation of ESET PROTECT On-Prem, proceed to deploy ESET endpoint products to your client computers.

ESET PROTECT On-Prem version 11.x and earlier
Do not use a user with Two-Factor Authentication

You cannot use a user with Two-Factor Authentication for server-assisted installations.

To install the ESET Management agent on a computer with a user with Two-Factor Authentication, enable Server-assisted installation by another user and ensure the user has the following permissions:

  • The Use permission from the Certification Authority that signed the server Peer Certificate, and the Use permission for at least one Peer Certificate. If no such certificate exists, the user will need the Write permission to create a new one.
  • The Write permission for the static group where the user wants to add the computer.

For more information, refer to the Online Help topic.

Users on ESET PROTECT On-Prem version 11.x and earlier have the option of a Server assisted installation. The client computer must be able to communicate with ESET PROTECT Server over the network.

  1. Download and run the ESET Management Agent Setup Wizard.

  2. Select Server assisted installation and click Next.

  3. Type the Username and Password used to access your ESET PROTECT Web Console to allow the Agent to download updates and new certificates. To log in as a domain user, select the check box next to Log into domain. Click Next → Yes to accept the server certificate.

  4. Select Do not create computer (computer will be created automatically during the first connection) or Choose custom static group. If you select Choose custom static group, you will be able to select an existing static group in ESET PROTECT from the drop-down menu. The client computer will be added to the selected static group.

Last Updated: Jan 27, 2026

Additional resources

User guides

ESET Forum

YouTube videos
ESET Support News ESET Customer Advisories ESET Status Portal ESET Technical Support

Existing customer?