[KB6891] Deploy ESET Management Agent using ESET Remote Administrator 5.x

• Use ESET Remote Administrator (ERA) 5.3 and later to deploy the ESET Management Agent for 7.x endpoint products.
• Migrate from ERA 5.3 to ESMC 7 using ERA 5.3 to deploy the ESET Management Agent.

To deploy the ESET Management Agent to client computers using ERA 5.x, follow the instructions below:

I. Generate the ESET Management Agent Live Installer package from ESMC 7.x:

1. Open the ESET Security Management Center Web Console.
    
2. Click Quick Links → Other Deployment Options.

Figure 1-1
Click the image to view larger in new window

3. Select Create Agent Live Installer and click Create Installer.

   

   Figure 1-2

    

4. Deselect the check box Participate in product improvement program if you do not agree to send crash reports and telemetry data to ESET.
   Select an ESMC Certificate and Certificate passphrase (optional).

   

   Figure 1-3
   Click the image to view larger in new window

    

5. Click Configuration. Type the Name and Description (optional) of the Agent live installer. You can optinally change the Server hostname. Click Finish.

   

   Figure 1-4
   Click the image to view larger in new window

    

6. Click Download under the Agent installer for Windows.
   

   

   Figure 1-5
   Click the image to view larger in new window
    

7. The browser will display the ESMCAgentInstaller.zip file. Download the file and extract the ESMCAgentInstaller.bat file.

8. Place ESMCAgentInstaller.bat into a local or a public repository accessible by the client workstation.
    

II. Create a policy in ERA 5.x to install ESET Management Agent on the client computers

1. Open ESET Remote Administrator Console (5.x).

2. In the menu bar, click Tools and select Policy Manager from the drop-down menu.

3. Click Add New Policy in the Actions section of Policy Manager.

   

   Figure 2-1
   Click the image to view larger in new window
    

4. In the Create New Policy window, type the name of the policy and click OK.

Figure 2-2

5. Select the newly created policy and click Add/Show Clients and add the client computers where the policy will be applied.

   

   Figure 2-3
   Click the image to view larger in new window

6. Select the newly created policy and click Edit Policy to edit its settings.

   

   Figure 2-4
   Click the image to view larger in new window

7. In Configuration Editor, expand Windows desktop v5 → Kernel → Settings → Scheduler/Planner and double-click Scheduler/Planner.

   

   Figure 2-5
   Click the image to view larger in new window

8.  Create a task to download the Agent installer file (for example, ESMCAgentInstaller.bat):

   1. In the Scheduled tasks window, click Add.

      

      Figure 2-6

   2. Select Run external application and click Next. Enter a Task name (for example, 'Download the installer') and then follow the instructions in the Wizard to create the task.

Figure 2-7

3. In the Special Settings window, enter the following values for File, Work directory, and Command line. These values must be entered as one line. 

   Command line

   Be sure to enter your own hosted repository address and saved .bat file name for the highlighted information.

Click Next after each value is entered.

• • • File: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      
      
    • Work directory: C:\ProgramData\ESET
      
      
    • Command line:
      (New-Object System.Net.WebClient).DownloadFile('https://website.domain/ESMCAgentInstaller.bat', 'C:/ProgramData/ESET/ESMCAgentInstaller.bat');(Start-process 'C:\ProgramData\ESET\ESMCAgentInstaller.bat')
      

      UAC Filtering

      UAC Filtering must be disabled for all computers.

4. Click OK to exit the Special settings window.
    

9. Click OK in the Scheduled tasks window and close the ESET Configuration Editor window. Yes when asked if you want to save changes.
    
10. Once the created client tasks are triggered, Windows PowerShell will download and execute the ESET Management Agent Live Installer on 5.x client workstations.