[KB6820] Deploy the ESET Management Agent and the ESET endpoint product together (7.x)

Issue

  • ESET Security Management Center allows you to create a package to install the ESET Management Agent and ESET endpoint product (Windows only) together
  • The All-in-one installer now contains the ESET Management Agent, ESET product, License, and Policy in a pre-configured .exe installer package

This method is for local installations and an Admin should run it for the following reasons:

  • It requires user interaction on the client workstation
  • It requires a domain admin account (not a regular user account)
  • It is possible to extract the certificate passphrase on the client workstation because it is embedded in the .exe file

The ESET Management Agent can also be installed using Live Installer, deployed remotely or installed manually (a local installation of the ESET Management Agent only). Click for more options to Deploy the ESET Management Agent (7.x)

Details


Click to expand

The ESET Management Agent facilitates communication between client computers, other ESET Security Management Center (ESMC) components such as the ERA Server. ESET Management Agent must be installed on all client computers where other ESET Security Management Center components or ESET endpoint products are installed.


Solution

Create an all-in-one installation package in ESMC Web Console

Follow the instructions below to use ESET Security Management Center (ESMC) to create an installation package including ESET Management Agent, ESET Windows endpoint products, Policy, License and ESMC management configuration.

Silent installation

To run the installation with no user interaction, see  below.

  1. In the Quick Links section, click Other Deployment Options.

Figure 1-1
Click the image to view larger in new window

  1. In the Local Deployment section, select Create all-in-one installer (Windows only) and then click Create Installer.

Figure 1-2
Click the image to view larger in new window

  1. Select the option Security product under Package contents. If you have an active ESET Full Disk Encryption license, you can select the check box Full Disk Encryption. Deselect the check box Participate in product improvement program if you do not agree to send crash reports and telemetry data to ESET.

    Figure 1-3

    Click the image to view larger in new window

  2. Click the Security Product section where you can:
    • Select the license.
    • Click the list of products under Product/Version and select an ESET endpoint product.
    • Language (optional) - Select another language of the installer wizard.
    • Configuration Policy (optional) - Select a policy that will be applied on the ESET security product.
    • Select the check box next to I accept the terms of the application End User License Agreement and acknowledge the Privacy Policy.
Only ESET endpoint products version 6.4 and later will allow automatic product activation

If you choose version 6.3 or earlier products, automatic product activation will not work and you will have to activate the product later. ESET endpoint products version 6.4 and later will be automatically activated during the installation.

Figure 1-4

Click the image to view larger in new window

  1. If you specified a passphrase during the installation of ESMC, click Certificate and type in your Certificate passphrase.

Figure 1-5
Click the image to view larger in new window

  1. Click Advanced where you can:
    • Set the Name, Description, Tags and a Parent group for the installer.
    • Select a check box Enable ESET AV Remover to include ESET AV Remover in the installer.
    • In the Initial installer configuration, select a policy that will be applied on the ESET Management Agent.
    • Server hostname and Port are automatically selected for you.
    • If you use an HTTP Proxy: Select the check box Enable HTTP Proxy settings and type the required details (Server, Port, Login, Password).

Figure 1-6
Click the image to view larger in new window

  1.  Click Finish and then click the download for 32-bit or 64-bit version depending on your system. 

Figure 1-7

Click the image to view larger in new window

  1. Save the file to a shared location and access it from the client computer where it will be installed.
     
  2. Run the All-in-one installation package file (for example, ESMC_Installer_x64_en_US.exe) on the client computer to start the setup wizard using a domain Administrator account. 


For illustrated instructions for the setup wizard, see the ESET Package Installer Online Help topic.


Silent installation of all-in-one installation package

You can install an all-in-one installation package generated from ESMC Web Console on the client device without user interaction (silent mode). Make sure the following requirements are met before using this method: 

  • Store the installation package locally on the designated device
  • Perform the silent installation on an account with administrator privileges
  • We recommend that you run the command prompt as an administrator
  • Use the .exe installer type

If all of the above requirements are met, follow the steps below to perform a silent install:

  1. Navigate in the command line to the installation package location.
     
  2. Execute the installation package with the --silent and --accepteula parameters (for example, C:\Users\Admin\Downloads\ESMC_Installer_x64_en_US.exe --silent --accepteula).

    If you enabled ESET AV Remover during the creation of the all-in-one istallation package, you can now use the parameter --avr-disable to disable the ESET AV Remover (for example, C:\Users\Admin\Downloads\ESMC_Installer_x64_en_US.exe --silent --accepteula --avr-disable).
ESET Endpoint Security/Antivirus version 6.5 and later

If you are deploying the all-in-one installer from ERA version 6.5 or ESMC 7, the following parameters are required:

ESMC_Installer_x64_en_US.exe --silent --accepteula
ESMC_Installer_x64_en_US.exe --silent --accepteula --avr-disable

The "silent" parameter is not functional in ESET endpoint products version 6.5. When using the parameters, the installation is automated, but the GUI is visible during the installation.

The "silent" parameter is fully functional in ESET endpoint products version 6.6 and later.

  1. Installation will now proceed in silent mode (no window or progress bar will appear during the installation).
     
  2. The package will be installed with default settings.
Settings for silent installation

By default, when performing a silent installation the following settings will be used:

  • The EULA is accepted
  • ESET LiveGrid is enabled
  • Detection of potentially unwanted applications is disabled.

These default settings can be changed after the installation is completed. They can also be modified in your installation package during Configuration. In the Configuration type field you can Select configuration from the list of policies. Select a policy for ESET Management Agent and a policy for your ESET security product (you cannot create a new policy at this point).