[KB7889] Upgrade ERA Agents (6.5) or ESET Management Agents (7.x) on Linux clients to ESET Management Agents (8.x – 10.x) using the ESET PROTECT Run Command Task

Issue

  • Upgrade of Agents using the Components Upgrade Task (recommended Agent upgrade method) fails
  • Upgrade ERA Agents 6.5 or ESET Management Agents 7.x on Linux clients using the ESET PROTECT Run Command task (alternative Agent upgrade method for advanced users).

Solution

If you also manage computers running Windows, see the instructions for upgrading Agents on managed Windows computers.

Advanced users only

The steps described in this Knowledgebase article are for advanced users only.

Upgrade to Agent 8.1 using ESET PROTECT 8.x

This Knowledgebase article describes an upgrade to Agent 8.1. Users should have ESET PROTECT Server 8.x installed.

Use the Administrator account

We recommend that you use ESET PROTECT Administrator account for the following steps.

Follow the steps applicable to your environment:

  • If you manage both 32-bit and 64-bit Linux computers, follow the steps in both sections below.
  • If you manage only 64-bit Linux computers, follow only the steps in Upgrade Agents on 64-bit Linux computers.
  • If you do not know whether you manage any 32-bit Linux computers, follow the steps in both sections below.
Upgrade Agents on 32-bit Linux computers:

I. Create a new Dynamic group template for 32-bit Linux systems:

  1. In the ESET PROTECT Web Console, click More → Dynamic Group Templates → New Template.
Figure 1-1
  1. Type a name and click Expression.
Figure 1-2
  1. In the Operation drop-down menu select AND (All conditions have to be true).

  2. Add these rules (to add a new rule, click Add rule):
    • Installed software → Application name → is one of → ESET Management Agent → click Add → ESET Remote Administrator Agent.
    • Installed software → Application version → doesn't have prefix → 8.0
    • OS edition → OS platform → = (equal) → 32-bit.
    • OS edition → OS type → = (equal) → Linux.
  1. Click Finish.
Figure 1-3

II. Create a new Dynamic group for 32-bit Linux systems:

  1. In the ESET PROTECT Web Console, click Computers, click the gear icon next to ALL group and select New Dynamic Group.
Figure 2-1
  1. Type a name and click Template.
Figure 2-2
  1. Click Choose existing, assign the Dynamic group template created in Section I and click Finish.
Figure 2-3
  1. Wait a few minutes until computers appear in the dynamic group.
No computers appear in the dynamic group

If no computers appear in the dynamic group, it means you do not manage any 32-bit Linux computers and do not need to continue with steps for 32-bit computers.

III. Create a new Client task for 32-bit Linux systems:

  1. In the ESET PROTECT Web Console, click Tasks → New → Client Task.
Figure 3-1
  1. Type the Name of the task, select Run Command from the Task drop-down menu and click Settings.
Figure 3-2
  1. In the Command line to run field, type (replace SERVER with your actual server name and share with your share name):

    HTTP local share command:

    wget -q http://SERVER/share/agent-linux-i386.sh -O /tmp/agent-linux-i386.sh && chmod a+x /tmp/agent-linux-i386.sh && /tmp/agent-linux-i386.sh --skip-license &> /tmp/era-agent-upgrade.txt
Request from online command:

wget -q https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-i386.sh -O /tmp/agent-linux-i386.sh && chmod a+x /tmp/agent-linux-i386.sh && /tmp/agent-linux-i386.sh --skip-license &> /tmp/era-agent-upgrade.txt
  1. Create a Trigger for this Client Task and in the Targets section, select the dynamic group for 32-bit Linux systems created in Section II.
There will be a brief period where two versions of the Agent are running on a single client machine. This is only temporary. Create an Outdated applications report to monitor the status of client computers hourly.
ESET Management Agent log file location:

The ESET Management Agent log file is accessible at: /tmp/

See log files location for all ESET PROTECT components in ESET PROTECT User Guide.

Upgrade Agents on 64-bit Linux computers:

I. Create a new Dynamic group template for 64-bit Linux systems:

  1. In the ESET PROTECT Web Console, click More → Dynamic Group Templates → New Template.
Figure 4-1
  1. Type a name and click Expression.
Figure 4-2
  1. In the Operation drop-down menu select AND (All conditions have to be true).

  2. Add these rules (to add a new rule, click Add rule):
    • Installed software → Application name → is one of → ESET Management Agent → click Add → ESET Remote Administrator Agent.
    • Installed software → Application version → doesn't have prefix → 8.0
    • OS edition → OS platform → = (equal) → 64-bit.
    • OS edition → OS type → = (equal) → Linux.
  1. Click Finish.
Figure 4-3
 

II. Create a new Dynamic group for 64-bit Linux systems:

  1. In the ESET PROTECT Web Console, click Computers, click a gear icon next to ALL group and select New Dynamic Group.
Figure 5-1
  1. Type a name and click Template.
Figure 5-2
  1. Click Choose existing, assign the Dynamic group template created in Section I and click Finish.
Figure 5-3
  1. Wait a few minutes until computers appear in the dynamic group.

III. Create a new Client task for 64-bit Linux systems:

  1. In the ESET PROTECT Web Console, click Tasks → New → Client Task.
Figure 6-1
  1. Type the Name of the task, select Run Command from the Task drop-down menu and click Settings.
Figure 6-2
  1. In the Command line to run field, type (replace SERVER with your actual server name and share with your share name):

    HTTP local share command:

    wget -q http://SERVER/share/agent-linux-x86_64.sh -O /tmp/agent-linux-x86_64.sh && chmod a+x /tmp/agent-linux-x86_64.sh && /tmp/agent-linux-x86_64.sh --skip-license &> /tmp/era-agent-upgrade.txt
Request from online command:

wget -q https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-x86_64.sh -O /tmp/agent-linux-x86_64.sh && chmod a+x /tmp/agent-linux-x86_64.sh && /tmp/agent-linux-x86_64.sh --skip-license &> /tmp/era-agent-upgrade.txt
  1. Create a Trigger for this Client Task and in the Targets section, select the dynamic group for 64-bit Linux systems created in Section II.
There will be a brief period where two versions of the Agent are running on a single client machine. This is only temporary. Create an Outdated applications report to monitor the status of client computers hourly.
ESET Management Agent log file location:

The ESET Management Agent log file is accessible at: /tmp/

See log files location for all ESET PROTECT components in ESET PROTECT User Guide.

Slovenský
Naposledy aktualizované: 10. 11. 2022

Ďalšia pomoc:

Dokumentácia

ESET Security Forum

Videonávody

Kontaktujte nás

Online formulár
02/322 44 444 (pracovné dni 8:00-18:30)
Vzdialená pomoc

Viac informácií

ESET Status Portal