Change the ESET Security Management Center Server address used by the ESET Management Agent (7.x)

Issue

  • Direct clients to connect to a new ESET Security Management Center Server (ESMC Server) by migrating certificates and setting your policy to the new server's address.

Details

Communication between ESET Security Management Center Server (ESMC Server) 7 and ESET business edition products version 7 is managed by the ESET Management Agent. When migrating to a different ESMC Server, the easiest way to change the server address used by the ESET Management Agent is to redeploy the agent.

Solution

There are three ways to specify a new server address for the ESET Management Agent to use when migrating to a new ESET Security Management Center Server (ESMC Server).

ESET Security Management Center (ESMC) 7 User Permissions

This article assumes that your ESMC user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):


Migrate certificates and create new ESET Management Agent Policy 

Read our Knowledgebase article.

Modify ESET Management Agent Settings

A user must have the following permissions for the group that contains the modified object:

Functionality Read Use Write
Certificates  

Once these permissions are in place, follow the steps below.

Default certificates

The Peer certificates and Certification Authority that were created during the installation are by default contained in the static group All.

  1. Open the ESET Security Management Center Web Console.
     
  2. Click More CertificatesPeer Certificates, and then select the check box next to your default Agent certificate.
     
  3. Click ActionsExport and save the .pfx file to a save location of your choice.

    Figure 2-1
    Click the image to view larger in new window

  4. Click More CertificatesCertification Authorities, and then select the check box next to the ERA Certification authority used to sign your exported Agent Certificate.
     
  5. Click Actions → select Export Public Key and then save the .der file to a save location of your choice.

    Figure 2-2
    Click the image to view larger in new window

  6. Click Start Control PanelProgramsPrograms and Features (Windows XP / Windows Server 2003 users: Double-click Add or Remove Programs).
     
  7. Select ESET Management Agent and click Change.

    Figure 2-3

  8. Click Next.

    Figure 2-4

  9. Click Repair.

    Figure 2-5

  10. In the Agent configuration screen, enter the address of your new ESMC Server into the Server host field. Other settings should be left unchanged unless you are using a different port than the default port for ESMC Server. Click Next when you are finished.

    Figure 2-6

  11. In the Peer certificate window, browse for the Agent Certificate (.pfx) and Certificate Authority (.der) files you exported in step 3 and then click Next.

    Figure 2-7

  12. Click Repair. Your client computer(s) will be able to communicate with your new ESMC Server after the changes have been made.

    Figure 2-8


Redeploy the ESET Management Agent

When migrating to a new ESMC Server, you can send an updated instance of the ESET Management Agent from your new server to client machines. During the ESET Management Agent deployment process, you will be prompted to enter connection information for your new ESMC Server.

 

 

Mais Artigos:

Assistęncia Adicional