ESET Security Management Center 7.0 Owner's manual

Brand: ESET

Model: Security Management Center 7.0

Category: Antivirus security software

Type: Owner's manual

ESET Security Management Center

Guide for Small and Medium-sized Businesses

Click here to display the Online help version of this document

ESET Security Management Center was developed by ESET, spol. s r.o.

For more information visit https://www.eset.com

any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise without

permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described application software without prior notice.

Technical Support: https://support.eset.com

REV. 11/18/2020

1 Introduction 1 ...................................................................................................................................................

1.1 ESET endpoint products 1 .........................................................................................................................

1.2 New Features in ESET Security Management Center 7 1 .....................................................................

2 ESMC components and architecture 2 ..............................................................................................

3 System requirements 3 ..............................................................................................................................

3.1 Hardware 3 ...................................................................................................................................................

3.2 Operating system 3 ....................................................................................................................................

3.3 Network 4 .....................................................................................................................................................

3.4 Software 5 ....................................................................................................................................................

4 Installation 5 .....................................................................................................................................................

4.1 All-in-one installation of ESET Security Management Center Server 5 .............................................

4.2 Post-installation steps 17 ..........................................................................................................................

5 ESMC Structure 18 .........................................................................................................................................

6 Deployment 20 ................................................................................................................................................

6.1 Deployment package creation 20 .............................................................................................................

6.2 Deployment package installation 24 .......................................................................................................

6.3 Other deployment methods 27 .................................................................................................................

6.4 ESET Remote Deployment Tool 27 ...........................................................................................................

7 Next steps 29 ....................................................................................................................................................

7.1 Dashboard 29 ...............................................................................................................................................

7.2 Computers and Groups 29 .........................................................................................................................

7.3 Threats and Quarantine 31 ........................................................................................................................

7.4 Reports 32 ....................................................................................................................................................

7.5 Basic actions 33 ...........................................................................................................................................

7.5.1 Tasks 33 ...................................................................................................................................................

7.5.2 Notiﬁcations 34 ...........................................................................................................................................

7.5.3 Policies 34 .................................................................................................................................................

8 Help and support 34 .....................................................................................................................................

9 End User License Agreement (EULA) 35 ...........................................................................................

10 Privacy policy 40 ..........................................................................................................................................

Introduction

This guide is intended for a small to medium-sized businesses that manage up to 250 Windows ESET endpoint

products using ESMC 7.

It will explain basic concepts important for deploying and using ESET security products.

ESET Security Management Center 7

ESET Security Management Center 7 (former ERA) is an application that allows you to manage ESET products on

client workstations, servers and mobile devices in a networked environment from one central location. The built-in

task management system in ESET Security Management Center allows you to install ESET security solutions on

remote computers and quickly respond to new problems and threats.

ESET Security Management Center does not provide protection against malicious code by itself. Protection of your

environment depends on the presence of an ESET security solution such as ESET Endpoint Security on

workstations.

ESET endpoint products

ESET endpoint products are primarily designed for use on workstations in a small business/enterprise environment

and can be used with ESET Security Management Center.

ESET Security Management Center 7 is able to deploy, activate or manage the following ESET endpoint products:

Manageable via ESET Security Management Center 7 Product version

ESET Endpoint Security for Windows 5.x and later

ESET Endpoint Antivirus for Windows 5.x and later

ESET Endpoint Security for macOS 6.x and later

ESET Endpoint Antivirus for macOS 6.x and later

ESET Endpoint Security for Android 2.x and later

New Features in ESET Security Management Center 7

• New replication protocol for ESET Management Agent - ESET Push Notiﬁcation Service. The protocol has

enabled usage of third-party proxy services, like Apache HTTP Proxy for forwarding the communication.

• Support for VDI environments - Hardware ﬁngerprint detection allows automatic resolving of cloning.

• Hardware Inventory - ESET Management Agent collects information about installed hardware from

Windows, macOS and Linux systems.

• Support for new ESET products:

oESET Dynamic Threat Defense

oESET Enterprise Inspector

oEnhanced ransomware protection (Ransomware Shield) on Endpoints v. 7+

• Major Web Console redesign:

oA new main menu, polished user interface, new icons, redesigned Quick links and Help links.

oProactive notiﬁcation when a new version of ESMC Server is available.

oNew Overview dashboard with one-click navigation and RSS feed (WeLiveSecurity and ESET product

release news) integration.

oNew Incidents Overview dashboard with one-click navigation to threats.

oESET Endpoint Encryption (Deslock) and Safetica are now reported as ESET Products. Safetica agent can

be deployed using the ESMC repository.

oWizard elements have a new layout.

oEnhanced ﬁltering options in Computers.

oImproved wizard for removing devices from management.

oNew Deploy Agent screen with a simple overview of deployment options.

oAll-in-one installer now allows selecting Agent only when creating a new package.

oNew Show Details with clickable tile elements, including the information about applicable dynamic

groups and device hardware details.

oOne-click actions are available to resolve many types of actions such as activation, reboot, OS update,

protection issues.

oNew interactive questions (blue ﬂags) related to potential cloning/duplication/hardware change issues.

oImproved management of threats - handled threats are automatically marked as resolved, one-click scan

with cleaning; the addition of a threat as exclusion into policy; improved ﬁltering of threats; ability to

manually submit a ﬁle to ESET Dynamic Threat Defense.

oNew Layout of Reports with one-click report generation; new report template categories added for ESET

Enterprise Inspector, ESET Dynamic Threat Defense, Hardware Inventory, cloning detection.

oClient Tasks include new task types - Diagnostics and Send File to EDTD.

oPolicies include the possibility to allow local lists (policy exclusions/rules conﬁgured locally).

oOption to synchronize Computer Users directly via Active Directory.

oRedesigned Notiﬁcations with a lot of new default notiﬁcation templates, editing multiple notiﬁcations at

once. Notiﬁcations can be created on new event types with advanced ﬁltering options.

oMore > Submitted Files - A new section with details about what ﬁles were submitted to ESET LiveGrid

and ESET Dynamic Threat Defense.

oSupport for subscription licenses; a better tooltip showing the actual license usage; redesigned Add

License wizard with support for ESET Business Account, one-click product activation.

oPossibility to deﬁne database cleanup for diﬀerent types of logs in More > Server Settings.

• Mobile Device Connector is more robust and secure.

ESMC components and architecture

To perform a complete deployment of the ESET security solutions portfolio, the following components must be

installed:

• ESMC Server (controls the communication with client computers)

• ESMC Web Console (browser-based user interface for the ESMC Server)

• ESET Management Agent (deployed on client computers, communicates with ESMC server)

The following supporting components are optional, we recommend that you install them for best performance of

the application on the network:

• Apache HTTP Proxy

• RD Sensor (can detect unmanaged computers on the network)

Server

The ESET Security Management Center Server (ESMC Server) is the application that processes all data received

from clients that connect to the Server (through the ESET Management Agent).

Agent

The ESET Management Agent is an essential part of ESET Security Management Center 7. Clients do not

communicate with the Server directly, rather the Agent facilitates this communication. The Agent collects

information from the client and sends it to the ESMC Server. If the ESMC Server sends a task for the client - it is

sent to the Agent which then sends this task to the ESET endpoint product running on the client.

Web Console

ESMC Web Console is a browser-based user interface that allows you to manage ESET security solutions in your

environment. It displays an overview of the status of clients on your network and can be used to deploy ESET

solutions to unmanaged computers remotely. If you choose to make the web server accessible from the internet,

you can use ESET Security Management Center from virtually any place and device.

Apache HTTP Proxy

Apache HTTP Proxy is a service that can be used in combination with ESET Security Management Center 7 to

distribute installation packages and updates to client computers. It acts as a transparent proxy, meaning it caches

ﬁles that have already been downloaded to minimize Internet traﬃc on your network.

Using Apache HTTP Proxy oﬀers the following beneﬁts

• Downloads and caches the following:

oDetection engine updates

oActivation tasks, including communication with activation servers and caching of license requests

oESMC repository data

oProduct component updates—Apache proxy caches and distributes updates to endpoint clients on your

network.

• Minimized internet traﬃc on your network.

Rogue Detection Sensor

Rogue Detection Sensor (RD Sensor) searches your network for computers not registered in ESET Security

Management Center. This component can locate new computers and add them in ESET Security Management

Center automatically.

WARNING

Remote detection sensor can take up to 24 hours to locate new computers on your network.

Newly discovered machines are listed in a predeﬁned report, making it easy to assign them to speciﬁc static

groups and begin assigning them tasks.

System requirements

Before you install ESET Security Management Center, verify that all hardware, operating system, network and

software prerequisites are met.

Hardware

For seamless operation of ESET Security Management Center, your system should meet the following hardware

requirements:

Hardware Minimum requirement

Memory 4 GB RAM

Hard Drive At least 20 GB of free space

Processor Dual-Core, 2.0 GHz or faster

Network connection 1 Gbit/s

Operating system

The table below displays the supported operating systems for each ESMC component recommended for small and

medium-sized business. See also a full list of supported operating systems.

Operating System Server Agent RD Sensor MDM

Windows Home Server 2003 SP2 ✔ ✔

Windows Home Server 2011 x64 ✔ ✔

Windows Server 2003 x86 SP2 ✔ ✔

Windows Server 2003 x64 SP2 ✔ ✔

Windows Server 2003 x86 R2 SP2 ✔ ✔

Windows Server 2003 x64 R2 SP2 ✔ ✔

Windows Server 2008 x64 R2 SP1 ✔ ✔ ✔ ✔

Windows Server 2008 x64 R2 CORE ✔ ✔ ✔ ✔

Windows Server 2008 x86 SP2 ✔ ✔ ✔**

Windows Server 2008 x64 SP2 ✔ ✔ ✔**

Windows Storage Server 2008 x64 R2 ✔ ✔ ✔ ✔

Windows Server 2012 x64 ✔ ✔ ✔ ✔

Windows Server 2012 x64 CORE ✔ ✔ ✔ ✔

Windows Server 2012 x64 R2 ✔ ✔ ✔ ✔

Windows Storage Server 2012 x64 R2 ✔ ✔

Windows Server 2012 x64 R2 CORE ✔ ✔ ✔ ✔

Windows Storage Server 2012 x64 R2 ✔ ✔ ✔ ✔

Windows Server 2016 x64 ✔ ✔ ✔ ✔

Windows Storage Server 2016 x64 ✔ ✔ ✔ ✔

Windows Server 2019 x64 ✔ ✔ ✔ ✔

Microsoft SBS 2003 x86 SP2 ✔ ✔

Microsoft SBS 2003 x86 R2 ✔ ✔

Microsoft SBS 2008 x64 SP2 ✔ ✔ ✔

Microsoft SBS 2011 x64 Standard ✔ ✔ ✔ ✔

Microsoft SBS 2011 x64 Essentials ✔ ✔ ✔ ✔

Operating System Server Agent RD Sensor MDM

Windows XP x86 SP3 ✔ ✔

Windows XP x64 SP2 ✔ ✔

Windows Vista x86 SP2 ✔ ✔

Windows Vista x64 SP2 ✔ ✔

Windows 7 x86 SP1 ✔* ✔ ✔ ✔*

Windows 7 x64 SP1 ✔* ✔ ✔ ✔*

Windows 8 x86 ✔* ✔ ✔ ✔*

Windows 8 x64 ✔* ✔ ✔ ✔*

Windows 8.1 x86 ✔* ✔ ✔ ✔*

Windows 8.1 x64 ✔* ✔ ✔ ✔*

Windows 10 x86 ✔* ✔ ✔ ✔*

Windows 10 x64 ✔* ✔ ✔ ✔*

* Installing ESMC components on a client OS might not be in alignment with Microsoft licensing policy.

Check the Microsoft licensing policy or consult your software supplier for details. In SMB / small

network environments, we encourage you to consider a Linux ESMC installation or virtual appliance

where applicable.

** Installation of the MDM component for Windows Server 2008 SP2 is supported only for the all-in-one installer

(standalone).

Network

It is essential that both ESMC Server and client computers managed by ESMC have a working Internet connection

so that they can reach the ESET repository and activation servers. If you prefer not to have clients connect directly

to the Internet, you can use a proxy server (not the same as Apache HTTP Proxy) to facilitate communication with

your network and the Internet.

Computers managed by ESMC should be connected to the same LAN and/or should be in the same Active Directory

domain as your ESMC Server. The ESMC Server must be visible by client computers. Additionally, Client computers

must be able to communicate with your ESMC Server to use remote deployment and the Wake-Up Call feature.

Ports used

If your network uses a ﬁrewall, see our list of possible network communication ports used when ESET Security

Management Center and its components are installed in your infrastructure.

Software

The following prerequisites must be met to install ESMC Server on Windows:

• You must have a valid license.

• Microsoft .NET Framework 3.5 must be installed; you can install it using the Add Roles and Features

Wizard.

• ESMC Web Console requires Java/OpenJDK.

WARNING

Public updates for Oracle Java SE 8 released after January 2019 will not be available for business, commercial or

production use without a commercial license. If you opt not to purchase Java SE subscription, you can opt to

transition to a no-cost alternative by following this guide.

• ESET Security Management Center supports two types of database servers, however we recommend that

you use Microsoft SQL Server Express 2014, which is included with ESET Security Management Center.

Installation

ESET Security Management Center installers are available in diﬀerent formats to support diﬀerent install methods.

We recommend the All-in-one installer for small deployments.

All-in-one installation of ESET Security Management Center Server

Upgrading from a previous version of ERA?

To perform a new installation of ESET Security Management Center 7.0, download the All-in-one installer from the

download section of the ESET website under ESET Security Management Center.

This feature allows you to install all ESMC components using the ESMC installation wizard.

1. Before you proceed, verify all installation requirements are met.

2. Open the installation package. If necessary, adjust the language settings in the Language drop-down menu

and click Next.

3. Select Install ESET Security Management Center Server and click Next.

4. Deselect the check box Participate in product improvement program if you do not agree to send crash

reports and telemetry data to ESET. If the check box is left selected, telemetry data and crash reports will be

sent to ESET. Accept the EULA by selecting I accept the terms in the license agreement and click Next.

5. Select the applicable components to install and click Install.

NOTE: Microsoft SQL Server Express

• If you already have another version of Microsoft SQL Server or MySQL installed, or you plan to connect to

diﬀerent SQL Server, deselect this component.

• We recommend that you do not install SQL Server on a Domain Controller (for example, if you are using

Windows SBS / Essentials). We recommend that you install ESET Security Management Center on a diﬀerent

server or do not select the SQL Server Express component during installation (this requires you to use your

existing SQL or MySQL Server to run the ESMC database).

6. If errors are found during the prerequisites check, address them accordingly. Make sure your system meets

all installation requirements.

• .NET v3.5 is not installed/.NET v2.0 SP2 is not installed - install .NET Framework.

• No Java found.

• Oracle Java detected (with the same bitness as ESMC All-in-one instaler).

IMPORTANT

• If you have multiple Java versions installed on your system, we recommend that you uninstall the older Java

versions and only keep the latest one.

• Make sure that Java, ESMC, and Apache Tomcat have the same bitness (32-bit or 64-bit).

WARNING

Public updates for Oracle Java SE 8 released after January 2019 will not be available for business, commercial or

production use without a commercial license. If you opt not to purchase Java SE subscription, you can opt to

transition to a no-cost alternative by following this guide.

a)To select the already installed Java, click Select a Java installation, select the folder where Java is

installed (with a subfolder bin, for example C:\Program Files\Amazon Corretto\jdk1.8.0_212) and click OK.

The installer prompts you if you select an invalid path.

b)Click Install to continue or change to change the Java installation path.

NOTE

The following notiﬁcation may be displayed if your system does not have enough disk space for ESMC to install:

There is only 32 MB free on system disk

You must have at least 5000 MB of free disk space to install ESMC.

7. When the prerequisites check is complete and your environment meets all requirements, installation will

begin. Be aware that installation can take over an hour depending on your system and network conﬁguration.

8. Enter a valid License Key (included in the new purchase email you received from ESET) and click Next. If

you are using legacy license credentials (Username and Password), convert your credentials to a License Key.

Alternatively, you can choose to activate later. If you choose Activate later, see how to add a new license and

ESMC activation.

9. If you chose to install Microsoft SQL Server Express in step 5, a database connection check will be performed

- skip to step 11. If you have an existing database server, you will be prompted to enter your database

connection details in the next step. Click Next to start the database check.

10. Deﬁne your database server connection:

• If you chose Microsoft SQL Server Express select MS SQL Server via Windows Authentication or MS

SQL Server and conﬁgure connection settings accordingly.

• If you are using an existing Microsoft SQL Server or MySQL Server, select the database type and

conﬁgure connection settings accordingly.

Enter your Database name, Hostname, Port number (you can ﬁnd this information in Microsoft SQL Server

Conﬁguration Manager), and Database admin account details (Username and Password) into the

appropriate ﬁelds and click Next. The connection to the database will be veriﬁed.

Database account

Use a dedicated database user account that will have access only to the ESMC database, alternatively an SA

account (MS SQL) or root account (MySQL). When using a dedicated user account, that account must have

suﬃcient permissions to access the database. If you do not intend to use a dedicated user account, enter your

administrator account (SA or root).

If you entered your SA account or root account in the previous window, click Yes to continue using the SA/root

account as the database user for ESET Security Management Center.

If you click No, you must select Create new user (if you have not already created one) or Use existing user

(if you have a dedicated database user account).

11. You will be prompted to enter a new password for the Web Console Administrator account. This password is

important, as you will use it to log into the ESMC Web Console. Click Next.

12. You can leave the ﬁelds intact, or enter your corporate information to appear in the details of ESET

Management Agent and ESMC Server certiﬁcates. Certiﬁcates verify the identity of Agent and Server, and allow

for secure communication over SSL. Your certiﬁcate includes: your public key, server name, additional

information about the server and a signature computed by a certiﬁcation authority. If you choose to enter a

password in the Authority password ﬁeld, record it in a safe place, as the Authority password is

required for future upgrades or migrations. Click Next and then click Install.

13. A green check mark will be displayed next to the diﬀerent components being installed when installation for

each one completes.

14. When installation is complete, ESET Security Management Center Server installation was successful

will be displayed along with your ESMC Web Console URL address. Click the URL to open Web Console, or click

Finish to close the window.

Post-installation steps

After you have ﬁnished installation, you should be able to:

Connect to ESMC Web Console

On your local Windows server (the machine hosting your Web Console), click Start > All Programs > ESET >

ESET Security Management Center > ESET Security Management Center Webconsole - a login screen will

open in your default web browser. If a SSL certiﬁcate warning is displayed, add the certiﬁcate exception to your

web browser.

IMPORTANT

Use a supported web browser to connect to ESMC Webconsole.

Read Startup Wizard instructions

Once you ﬁrst log in to ESMC Web Console, you should read instructions, which will give you initial overview. Click

Next to proceed to the next screen. In the latest step, you can start creating installation package for your ESET

endpoint product which you will deploy to the target machines. You can also deploy Agent and ESET endpoint

products later in ESMC Web Console.

Page is loading ...

ESET Security Management Center 7.0 Owner's manual

Brand: ESET

Model: Security Management Center 7.0

Category: Antivirus security software

Type: Owner's manual

Download PDF

report

ESET Security Management Center 7.0 Owner's manual

ESET Security Management Center 7.0 Owner's manual

Related papers

Other documents