[KB6734] Upgrade ESET Remote Administrator 6.5 (and later) for Linux to the latest ESET Security Management Center 7

Solution

ESET business product no longer supported

This content applies to an ESET product version that is currently in End of Life status and is no longer supported. This content is no longer updated.

For a complete list of supported products and support level definitions, review the ESET End of Life policy for business products.

Upgrade ESET business products.

Windows users: Upgrade ESET Remote Administrator 6.5 and later to ESMC 7.2.

I. Upgrade ERA Server to ESMC Server

II. Upgrade ESET Management Agent

III. Upgrade ERA Proxy (for Linux and ERA Virtual Appliance users)

I. Upgrade ERA Server to ESMC Server

Only ERA 6.5 and later can be upgraded to ESMC 7.2 directly.

If you use ERA 6.0 - 6.3, upgrade to ERA 6.4 first.
If you use ERA 6.4, upgrade to ESMC 7.1 first.

Upgrade type	Installed from	Use when	Link to instructions
Component Upgrade Client task	ESMC Web Console	Recommended procedure (not for Virtual Appliance)	Security Management Center Components Upgrade Online help topic
Run Command Client task	ESMC Web Console	Use if Component Upgrade task fails. The installer is downloaded separately.	Run Command Online help topic
Install Agent manually	Linux terminal	For advanced users only. Requires knowledge of Linux terminal.	Step by step guide (this article)
Database pull from an older ERA/ESMC VA	VA terminal	If you have been using ESMC Virtual Appliance (for example VMWare or Virtual Box) you can perform database pull and then upgrade agents via Components Upgrade task.	Database Pull Online help topic

Upgrade ESMC Server, Tomcat and Web Console manually

I. Upgrade ESMC Server

All steps in this article are to be run in the Linux terminal. If you use 32-bit Linux system, do not upgrade. ESMC 7.1 Server (and later) does not support 32-bit architecture.

Download the ESMC Server installer:

wget https://download.eset.com/com/eset/apps/business/era/server/linux/latest/server-linux-x86_64.sh
Change the permission of file to executable:

sudo chmod +x server-linux-x86_64.sh
Execute the installer file:

sudo ./server-linux-x86_64.sh
During the installation, you will be asked if you accept the EULA and Privacy Policy and if you want to join the Product improvement program. Click Enter to confirm your answer.

If you receive an error related to insufficient rights when upgrading:

See the error log first:

cat /var/log/eset/RemoteAdministrator/EraServerInstaller.log

and complete the following steps:

Temporarily add the SUPER right for "era" user
Locate the actual user name and server connection in: /etc/opt/eset/RemoteAdministrator/Server/StartupConfiguration.ini
For a database server on localhost, use:
mysql -u root -p
and type:
grant SUPER on *.* to era@'localhost';
For a database server running on another machine, use:
mysql -u root -p --host=
and type:
grant SUPER on *.* to 'era'@'%';
Make sure to remove the SUPER right after the upgrade is complete:
For a database server on localhost, use:
mysql -u root -p
and type:
revoke SUPER on *.* from 'era'@'localhost';
For a database server on another machine, use:
mysql -u root -p --host=
and type:
revoke SUPER on *.* from 'era'@'%';

The installation will continue. When it is finished, follow the next steps below.

II. Upgrade Tomcat

ESMC 7.2 requires Tomcat 9 or later. Many Linux systems do a regular upgrade in the background, or there may not be a newer version available. Some Linux distributions use different versioning of Tomcat. Modify the addresses in the steps in part II and III according to your system.

Before upgrading the Tomcat, backup your server.xml file, which stores the configuration for Tomcat. The file is located at /etc/tomcat7/server.xml or a similar location. You can find it using the following command:

sudo find / -name server.xml
To back up the server.xml file, copy it to your home folder. For example:

sudo cp /etc/tomcat7/server.xml /home/user/backup.server.xml

III. Manual Web Console upgrade

Download the ESMC Web Console:

wget https://download.eset.com/com/eset/apps/business/era/webconsole/latest/era.war
Backup the Web Console configuration file, copy it to your home folder. For example:

cp /var/lib/tomcat7/webapps/era/WEB-INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties /home/user/backup.Era.WebServerConfig.properties
Stop the Tomcat service:

sudo systemctl stop tomcat7
Remove the old Web Console files:

sudo rm -rf /var/lib/tomcat7/webapps/era /var/lib/tomcat7/webapps/era.war
Copy the new era.war file:

sudo cp era.war /var/lib/tomcat7/webapps/
Start the Tomcat service:

sudo systemctl start tomcat7
Wait until the era.war is extracted by Tomcat. A new folder era appears in the /var/lib/tomcat7/webapps/ folder.
Restore the backed Web Console configuration file:

sudo cp /home/user/backup.Era.WebServerConfig.properties /var/lib/tomcat7/webapps/era/WEB-INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties
Restart the Tomcat service to apply the restored configuration.
You can now log in the Web Console.

IV. RD Sensor upgrade

To upgrade RD Sensor, run the installer as follows:

sudo ./rdsensor-linx-x86_64.sh --skip-license

The --skip-license parameter skips the display of the ESET End-user license agreement (EULA). If you wish to view the EULA before agreeing to it, do not use this parameter when installing RD Sensor.

II. Upgrade ESET Management Agent

Beginning with version 7, the ERA Agent is named the ESET Management Agent.

Before you begin

Always upgrade the ESMC Server machine first.
The ESET Management Agent cannot connect to the ERA 6.x Server.
Do not upgrade the ERA Agents which are connecting via ERA Proxy before a proper proxy solution is set up.
- ERA Version 6.x Agent can connect to ESMC 7 Server.
- ESET Management Agent (version 7.x) cannot be connected to ESMC 7.x Server via ERA Proxy.
- ESET Management Agent (version 7.x) cannot connect to ERA 6.x Server.

There are different ways how to upgrade your ERA 6.x Agent to the latest ESET Management Agent.

Upgrade type	Installed from	Use when	Link to documentation
Component Upgrade Client task	ESMC Web Console	Recommended procedure.	Security Management Center Components Upgrade Online help topic
Run Command Client task	ESMC Web Console	Use if Component Upgrade task fails. The installer is downloaded for each client separately.	Run Command Online help topic Step by step guide (this article)
Manual installation	Linux terminal	For advanced users only. Requires knowledge of Linux terminal.	Step by step guide (this article)

Install Agent via Run Command Client task

We recommend that you use ESMC Administrator's account for the following steps.

Create new Dynamic groups which identify the operating system on the client machine—one group for 32-bit and other for 64-bit:
1. Create a Dynamic group template for 32-bit systems with the following parameters:
  - Operation "AND"
  - Add rule OS edition > OS platform = (equal) 32-bit
  - Add rule OS edition > OS type contains Linux
2. Create a Dynamic group template for 64-bit systems with the following parameters:
  - Operation "AND"
  - Add rule OS edition > OS platform = (equal) 64-bit
  - Add rule OS edition > OS type contains Linux
3. Create a Dynamic group based on the 32-bit template you have just created.
4. Create Dynamic group based on the 64-bit template you have just created.
Create a new Client task for 32-bit systems:
1. In the Basic section, select Run Command from the Task drop-down menu.
2. In the Targets section, select the Dynamic group you created for 32-bit operating systems.
3. In the Settings section, enter one of the following commands into the Command line to run field (replace SERVER with actual server name and share with share name):
  
  HTTP Local Share command: wget -q http://SERVER/share/agent-linux-i386.sh -O /tmp/agent-linux-i386.sh && chmod a+x /tmp/agent-linux-i386.sh && /tmp/agent-linux-i386.sh --skip-license &> /tmp/era-agent-upgrade.txt
  
  Request from online command: wget -q https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-i386.sh -O /tmp/agent-linux-i386.sh && chmod a+x /tmp/agent-linux-i386.sh && /tmp/agent-linux-i386.sh --skip-license &> /tmp/era-agent-upgrade.txt
Create a new Client task for 64-bit systems:
1. In the Basic section, select Run Command from the Task drop down menu.
2. In the Targets section, select Dynamic group you created for 64-bit operating systems.
3. In the Settings section, enter one of the following commands into the Command line to run field (replace server with your actual server name and readonlyshare with share name):
  HTTP Local Share command: wget -q http://SERVER/share/agent-linux-x86_64.sh -O /tmp/agent-linux-x86_64.sh && chmod a+x /tmp/agent-linux-x86_64.sh && /tmp/agent-linux-x86_64.sh --skip-license &> /tmp/era-agent-upgrade.txt
  
  Request from online command: wget -q https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-x86_64.sh -O /tmp/agent-linux-x86_64.sh && chmod a+x /tmp/agent-linux-x86_64.sh && /tmp/agent-linux-x86_64.sh --skip-license &> /tmp/era-agent-upgrade.txt
Monitor the Computer details section in Installed Applications. It may happen that two Agents (one running the old version, the other running a more recent version) are running on a client machine at the same time. This is only temporary. You can also monitor the Outdated applications report in Computers section (use drill-down to show particular computers). Note that data in this report are updated once per hour.

Manual installation

You can also upgrade the Agent manually using the Agent installer file. To upgrade the Agent manually, follow the steps below:

Download the EM Agent installer:

64-bit
wget https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-x86_64.sh

32-bit
wget https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-i386.sh
Change the permission of file to executable:

sudo chmod +x agent-linux-x86_64.sh
Execute the installer file:

sudo ./agent-linux-x86_64.sh
During the installation you are asked if you accept the EULA and Privacy Policy and if you want to join the Product improvement program. Click Enter to confirm your answer.
The installation will continue. After the installation, the Agent is operable. Wait a few minutes until it is initialized and starts connecting to the ESMC Server.

III. Upgrade ERA Proxy (for Linux and ERA Virtual Appliance users)

Visit this Knowledgebase article on Migration of ERA 6 Proxy to Apache HTTP Proxy (Linux and Virtual Appliance).

Before you begin

Always upgrade the ESMC Server machine first.
The ESET Management Agent (7.x) cannot connect to the ERA 6.x Server.
Do not upgrade the ERA Agents which are connecting via ERA Proxy before a proper proxy solution is set up. The ESET Management Agent (7.x) cannot connect to the ESMC Server via ERA Proxy.

Son Revize: 23 Kas 2022