[KB3683] Export a certificate or public key from ESET Remote Administrator (6.x)

Issue

ESET business product no longer supported

This content applies to an ESET product version that is currently in End of Life status and is no longer supported. This content is no longer updated.

For a complete list of supported products and support level definitions, review the ESET End of Life policy for business products.

Upgrade ESET business products.

Export a Server certificate, an Agent certificate or a Certificate Authority (CA) public key from ESET Remote Administrator Web Console (ERA Web Console) for use during the installation of an ESET Remote Administrator (ERA) component

Details

As part of the installation process, ERA requires a peer certificate authority and a peer certificate for Agents. These certificates are used to authenticate products distributed under your license. You can create new certificates for use on additional client computers. For example, a server certificate is required for the distribution of ESET server products. In some cases, you might also want to create a new certificate to set specific parameters for a certain group of client computers, for example, a group of computers that will only be in use for six months might use a certificate with a different expiration date than other client computers.

Your Certificate Authority (CA) is used to legitimize certificates distributed from your network. In an enterprise setting, a public key can be used to automatically associate client software with the ESET Remote Administrator Server to allow for remote installation of ESET products.

Solution

Prerequisite

A Peer certificate or Certification Authority must be present in ERA Web Console.

Export a certificate or public key

View permissions needed for least privilege user access

ERA 6.5 User Permissions

This article assumes that your ERA user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

Create a second administrator user in ESET Remote Administrator 6.5

A user must have the following permissions for the group that contains the modified object:

*Functionality*	*Read*	*Use*	*Write*
Certificates	✓	✓

Once these permissions are in place, follow the steps below.

Default certificates

Peer certificates and Certification Authority that are created during the installation are by default contained in the Static Group All.

Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.

Click Admin → Certificates → Peer Certificates (or select Certification Authorities to export a public key).

Select the appropriate certificate. The type of certificate you export will depend on the component you are installing. Export a Server certificate for use when installing server components like ESET Remote Administrator Proxy. Export an Agent certificate for use when installing the ESET Remote Administrator Agent (ERA Agent). See below for examples of when to use each option:
1. Export as Base64 - Export your certificate or CA as a .txt file. Open this file in a text editor to access your unique certificate or public key for use when creating a transformation (.mst) file or in other applications where it is necessary to enter unique strings from your certificate or CA to submit your credentials.

Figure 1-1
Click the image to view larger in new window

Convert custom certificates to Base64 format

Base64 is the only format accepted by ERA components to connect to the ERA Server. For more information on how to convert certificates, see Linux man page and Mac OS X man page.

Última atualizaçăo: 28 de nov. de 2022