[KB8576] Install ESET Inspect Connector from a Windows command line

Issue

• Prerequisites
• Install ESET Inspect Connector from a Windows command line
• Assign the ESET Inspect Connector an ESET PROTECT On-Prem policy that allows communication with ESET Inspect Server

Solution

Prerequisites

• Deploy ESET Management Agent
• Deploy an ESET Endpoint application
• Activate ESET Inspect Connector with an ESET Inspect subscription: create a Module Activation task or contact your ESET PROTECT On-Prem administrator.

Install ESET Inspect Connector from a Windows command line

1. Download the ESET Inspect Connector installation file.

2. Open the command line and navigate to the downloaded file.

3. Run the msiexec installation command with the attributes listed in the table below. You can use the provided example and modify the attributes to match your environment configuration.

   Example command

   msiexec /i ei_connector_nt32_ENU.msi P_HOSTNAME="192.168.5.21" P_PORT="8093" P_PATH_TO_CERT_AUTH="C:\repo\Component\Products\Inspect Server\Src\test\http_server\certs\ca_store\ca.cert.der"

   You can include multiple attributes when running the installer in the silent mode. The P_HOSTNAME attribute is required.

   Attribute	Description	Required	Default value
   APPDIR	Used to set the directory under which the application will be installed		C:\Program Files(x86)\ESET\ESET Inspect Connector\ for 32-bit OS and C:\Program Files\ESET\ESET Inspect Connector\ for 64-bit
   P_HOSTNAME	Used to set the host on which ESET Inspect Server is installed	Yes	localhost
   P_PORT	Used to set the number of the port on which ESET Inspect Server is listening for data from ESET Inspect Connectors		8093
   APPDATADIR	The directory used to store logs and additional output files		C:\ProgramData\ESET\Inspect Server\
   P_PATH_TO_CERT_AUTH	The absolute path to the Certificate Authority file on the target PC. Currently, URLs are not supported. Mounted remote drives like \\store03 should work. Multiple files can be separated by char ';'
   P_IS_SERVER_ASSISTED	If you do not have the Certificate Authority present, set this parameter to 1 (P_IS_SERVER_ASSISTED=1) for server-assisted installation. If this parameter is used user does not need to use P_PATH_TO_CERT_AUTH
   P_INSTALL_CANARY_FILES	If enabled, the installer will generate a canary file and place it in a hidden directory. Setting this value to 0 (zero) skips file generation.		1

Assign the ESET Inspect Connector an ESET PROTECT On-Prem policy that allows communication with ESET Inspect Server

To allow the computer with ESET Inspect Connector installed to communicate with the ESET Inspect Server, the computer must be assigned an ESET PROTECT On-Prem policy that allows the communication.

If you are just starting with the setup, create such a policy and assign the computer to it. If such a policy already exists, assign the computer to the existing policy.

Create a new policy and assign it to the ESET Inspect Connector

1. Log in to ESET PROTECT On-Prem.

2. Open the Policies view: Click Policies and click Add.

3. Define the policy basic information and click Continue.

4. Under Settings, select ESET Inspect Connector. Then, expand Connection and do the following:

   1. In the Server address field, type the ESET Inspect Server IP address.

   2. Next to Certificate Authorities, click Edit→ Add → Open Certificate Authorities. Select the Certificate Authority that was used during ESET Inspect Server installation and click OK. Click Save → Save.

5. Click Continue.

6. Under Assign, click Assign, select the computer to which you want to apply the policy and click OK.

7. Click Finish.

Assign an existing policy to the ESET Inspect Connector

1. Log in to ESET PROTECT On-Prem.

2. Open the Policies view: click Policies.

3. Locate the policy (the policy application must be ESET Inspect Connector), click the policy name and click Edit.

4. On the left, click Settings, expand Connection and verify the following connection settings:

   • Server address contains the correct ESET Inspect Server IP address.
   • Certificate Authorities are set up. The Certificate Authority that was used during ESET Inspect Server installation must be selected. If needed, click Edit next to Certificate Authorities and verify or change the Certificate Authority.
     
     

5. On the left, click Assign. Under Assign, click Assign, select the computer to which you want to apply the policy and click OK.

6. Click Finish.