ESET DEM Plug-ins DEM Owner's manual

ESET Direct Endpoint Management

plugin for Datto RMM

User guide

Click here to display the online version of this document

ESET Direct Endpoint Management plugin for Datto RMM was developed by ESET, spol. s r.o.

For more information visit https://www.eset.com.

in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise without

permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described application software without prior notice.

Technical Support: https://support.eset.com

REV. 3/20/2023

1 Introduction 1 .......................................................................................................................................

2 System Requirements 1 .......................................................................................................................

3 Component installation 1 .....................................................................................................................

3.1 Download a component from the ComStore 2 ...................................................................................

3.2 Import a component from a .CPT ﬁle 2 .............................................................................................

4 Migrate from the ERA/ESMC/ESET PROTECT to DEM plugin 4 ..............................................................

5 Migration from ERA 5.x and EFSW 4.5 6 ..............................................................................................

6 Migration from ERA 6.x 7 .....................................................................................................................

7 Integrating and using ESET components 7 ...........................................................................................

7.1 Copy a component 8 ......................................................................................................................

7.2 Deploy an ESET endpoint product to a machine 9 ..............................................................................

7.2 Schedule a job to deploy an ESET endpoint product to a machine 9 ...................................................................

7.2 Schedule a job to deploy an ESET endpoint product together with ESET Management Agent Live Installer 11 .....................

7.2 Create a policy to deploy an ESET endpoint product to machines 16 .................................................................

7.3 Activate an ESET endpoint product 20 .............................................................................................

7.3 Schedule a job to activate an ESET endpoint product 20 ..............................................................................

7.3 Create a policy to activate ESET endpoint products 21 ................................................................................

7.4 Conﬁgure an endpoint 25 ...............................................................................................................

7.4 Create an ESET endpoint product conﬁguration ﬁle 25 ................................................................................

7.4 Schedule a job to conﬁgure an endpoint 25 ............................................................................................

7.4 Create a policy to conﬁgure endpoints 27 ..............................................................................................

7.4 Export conﬁguration ﬁle 31 ..............................................................................................................

7.5 Scan an endpoint 31 ......................................................................................................................

7.5 Schedule a job to scan an endpoint 31 ..................................................................................................

7.5 Create a policy to scan endpoints 33 ....................................................................................................

7.6 Update an endpoint 37 ..................................................................................................................

7.6 Schedule a job to update endpoint's components 37 ..................................................................................

7.6 Create a policy to update endpoint's components 38 ..................................................................................

7.6 Upgrade endpoint to the latest version 40 ..............................................................................................

7.7 Monitor an endpoint 43 .................................................................................................................

7.8 Review errors and logs 46 ..............................................................................................................

8 Advanced integration 47 ......................................................................................................................

8.1 Add ﬁles to a component 47 ...........................................................................................................

8.2 Add variables to a component 48 ....................................................................................................

8.3 Deployment variables 48 ...............................................................................................................

8.4 Monitor variables 50 .....................................................................................................................

8.5 Task variables 50 ..........................................................................................................................

9 Support and Troubleshooting 50 ..........................................................................................................

9.1 Known issues 51 ...........................................................................................................................

9.2 Plugin components versions 52 ......................................................................................................

9.3 Feedback 54 .................................................................................................................................

9.4 Changelog 54 ...............................................................................................................................

1

Introduction

Thank you for using the ESET Direct Endpoint Management plugin for Datto RMM.

This plugin is developed by ESET in cooperation with Datto RMM to deploy, manage and report on ESET endpoint

products within your Datto RMM administrator account.

System Requirements

• ESET Direct Endpoint Management plugin for Datto RMM must be installed on your administrator account.

• RMM components have been developed to work with ESET endpoint products version 7.x and later without

the need for a remote management tool.

• The remote management server is not required, but the administrator can use it in conjunction with ESET

Direct Endpoint Management plugin for Datto RMM for additional functionality. In that case, policies need to

be pushed from the remote management server. ESET provides ESET PROTECT—a remote management server.

• Endpoint devices are required to have .NET Framework version 4.0.3 or later.

• Requirements for ESET products:

oWindows

▪ESET Endpoint Security 7.x, 8.x, 9.x, 10.x

▪ESET Endpoint Antivirus 7.x, 8.x, 9.x, 10.x

▪ESET File Security for Microsoft Windows Server 8.0, 9.0

▪ESET Mail Security for Microsoft Exchange Server 8.0, 9.0

omacOS

▪ESET Endpoint Security for macOS 6.1x

▪ESET Endpoint Antivirus for macOS 6.1x, 7.x

oLinux

▪ESET Endpoint Antivirus for Linux 8.x, 9.0

▪ESET Server Security for Linux 8.1, 9.0

Component installation

This section includes the following topics:

• Download a component from the ComStore

2

• Import a component from a .CPT file

Download a component from the ComStore

To download a component from the ComStore:

1. Using an administrator account, log in to the ESET Direct Endpoint Management plugin for Datto RMM

server and click ComStore.

2. In the search field, type ESET and then click Search ComStore.

3. Select the applicable component for your ESET product version and operating system and then click Add to

my Component Library.

Select an operating system component: Windows [WIN], macOS [MAC] or Linux [LINUX].

The component is installed and ready to use. Repeat this process for each component as needed.

Import a component from a .CPT file

To import a component from a .CPT file:

1. Using an administrator account, log in to the ESET Direct Endpoint Management plugin for Datto RMM

server and click Components.

3

2. Click Import Component.

3. Click Choose File, locate the appropriate component file (.cpt) and then click Upload.

4. Click Save.

The component is installed and ready to use. Repeat this process for each component as needed.

Migrate from the ERA/ESMC/ESET PROTECT to DEM

4

plugin

1. Install the DEM plugin.

2. Schedule a job to deploy ESET to a machine

3. In ERA/ESCM/ESET PROTECT, create a policy to configure ERMM settings on all endpoints so that they can

be managed in the DEM plugin.

4. Expand Settings and select ESET Endpoint for Windows.

5. Expand Tools.

6. Expand ESET RMM and click Edit next to Application paths.

Are you ERA 6 user?

5

7. In the Allowed RMM application paths window, click Add.

8. Select the file path for the plugin and click OK > Save.

File path entry

If necessary, use the full path to

ermmi.exe

file: C:\ProgramData\ESET\eRMMI\bin\ermmi.exe

instead of %ProgramData%\ESET\eRMMI\bin\ermmi.exe shown in the example bellow.

9. Complete the steps in the article (from step 4) to assign the policy and apply it to the endpoint computers.

10. When all machines are managed by the DEM plugin, uninstall the ESET PROTECT Agent to prevent

configuration conflicts.

11. (Optional) When the agent has been removed from all endpoints, decommission your ERA/ESCM/ESET

PROTECT Server.

6

Migration from ERA 5.x and EFSW 4.5

To migrate your remote management environment from ESET Remote Administrator (ERA) 5.x to Datto RMM,

follow the steps below:

I. Install the latest version of the components

1. Make sure all your client computers meet the Requirements of the ESET Direct Endpoint Management

plugin for Datto RMM.

2. Add the ESET Direct Endpoint Management plugin for Datto RMM Components to your component library.

3. Configure the monitoring to allow viewing of the statuses of your ESET products.

4. Identify if any computers are affected by the Legacy startup issue and take appropriate action.

II. Uninstall the version 4.5 ESET File Security

1. In ERA 5, create a policy.

a.Click Policy Editor > Add New Policy.

b.In the Policy name field, type a policy name.

c.In the Parent policy list, select BaseUp.

d.In the Policy configuration section, select Create empty policy configuration.

e.Click OK.

2. Double-click the policy from step 1b.

3. Expand Windows Server v4.5, locate the Enable Self-defense setting, disable it, and then click Console.

To fully disable Self-Defense, reboot each server after it received the policy to disable self-defense.

4. At this time, we recommend you schedule a maintenance window.

5. Select all applicable servers ready for migration, right-click, and select Set Policy.

6. Select the appropriate server migration policy and then click Set Policy. The Requested Policy Name column

updates and policy changes and changes to Self-defense reflect the next time servers check into the system.

7. Reboot the server machine to disable self-defense before uninstalling the ESET product.

8. Schedule a job to uninstall ESET File Security for Windows Server 4.5 from Datto RMM. When creating the

Uninstall job, select Uninstall from the product drop down list.

9. After the uninstall completes, reboot the server again.

10. After the reboot completes, schedule a Job to install the latest ESET File Security for Windows Servers.

7

III. Upgrade Endpoints to latest version of ESET Endpoint products using a

Deployment task.

Follow the steps in the Upgrade Endpoint to the latest version topic.

IV. Decommission the old ERA server safely

Confirm that all computers are no longer using a legacy product versions and safely decommission the ERA server.

Migration from ERA 6.x

To migrate your remote management environment from ESET Remote Administrator (ERA) 6.x to Datto RMM,

follow the steps below:

I. Install the latest version of the components

1. Make sure all your client computers meet the Requirements of the ESET Direct Endpoint Management

plugin for Datto RMM.

2. Add the ESET Direct Endpoint Management plugin for Datto RMM Components to your component library.

3. Configure the monitoring to allow viewing of the statuses of your ESET products.

4. Identify if any computers are affected by the Legacy startup issue and take appropriate action.

II. Migrate Existing Endpoints using a policy in ERA

Follow the steps in the Migrate the Datto plugin to DEM topic.

III. Upgrade Endpoints to latest version of ESET Endpoint products using a

Deployment task.

Follow the steps in the Upgrade Endpoint to the latest version topic.

IV. Decommission the old ERA server safely

Confirm that all computers are no longer using a legacy product versions and safely decommission the ERA server.

Integrating and using ESET Components

This section includes the following topics:

• Copy a component

• Deploy an ESET endpoint product to a machine

• Activate an ESET endpoint product

8

• Configure an endpoint

• Scan an endpoint

• Update an endpoint

• Review errors and logs

Copy a component

Copying a component can be a useful way of populating variables that you repeatedly use or as a way to

separate different sites.

To copy a component:

1. Click Components and select the appropriate component.

2. Click the copy icon.

Select an operating system component: Windows [WIN], macOS [MAC] or Linux [LINUX].

3. Click OK.

4. Change the name of the copied component and click Save.

9

The copied component is ready for use.

Deploy an ESET endpoint product to a machine

This section includes the following topics:

• Schedule a job to deploy an ESET endpoint product to a machine

• Schedule a job to deploy an ESET endpoint product together with ESET Management Agent Live Installer

• Create a policy to deploy an ESET endpoint product to machines

Schedule a job to deploy an ESET endpoint product to a

machine

To schedule a deployment job:

1. Click Sites and then select the applicable site.

2. Click Devices and select the appropriate device(s).

3. In the Actions menu, click the Schedule a job gear icon.

10

4. In the Components section, click Add a Component. Select the appropriate ESET Direct Endpoint

Management - Deployment component and click Save.

Select an operating system component: Windows [WIN], macOS [MAC] or Linux [LINUX].

11

5. To accept the End User License Agreement, in the ACCEPT_EULA field, type ACCEPT.

6. Select the applicable product from the Product drop-down menu.

7. To activate the product immediately after installation, in the ACTIVATION_KEY field, type your license

activation key.

ESET Business Account (EBA) license account username, password, and public ID required. When entering

the aforementioned information, separate each with a space (for example, [email protected]

password XXX-XXX-XXX). For MSP licenses, each customer license must be added individually under their

site.

8. Click Save.

The deployment job has been scheduled.

Schedule a job to deploy an ESET endpoint product

together with ESET Management Agent Live Installer

I. Download and modify a deployment component:

Select an operating system component: Windows [WIN], macOS [MAC] or Linux [LINUX].

1. Download the ESET Direct Endpoint Management - Deployment component from the Datto ComStore

to use the latest version of the component.

2. Click Components, select the downloaded deployment component and create a copy of a component.

12

3. Click Add file to add the prepared ESET Management Agent Live Installer .bat file to the copied

component.

4. Change the Name of the copied component to highlight that it contains the Agent Live Installer.

5. Click Save.

II. Schedule a deployment job with Agent Live Installer:

1. Click Sites and then select the applicable site.

2. Click Devices and select the appropriate device(s).

3. In the Actions menu, click the Schedule a job gear icon.

13

4. In the Components section, click Add a Component. Select the modified ESET Direct Endpoint

Management - Deployment component containing the Agent Live Installer and click Save.

14

5. To accept the End User License Agreement, in the ACCEPT_EULA field, type ACCEPT.

6. Select the applicable product from the Product drop-down menu.

7. In the Agent variable field specify the filename of the Agent Live Installer.

15

8. To activate the product immediately after installation, in the ACTIVATION_KEY field, type your license

activation key.

ESET Business Account (EBA) license account username, password, and public ID required. When entering

the aforementioned information, separate each with a space (for example, [email protected]

password XXX-XXX-XXX). For MSP licenses, each customer license must be added individually under their

site.

9. Click Save.

The deployment job with Agent Live Installer has been scheduled.

16

Create a policy to deploy an ESET endpoint product to

machines

To automatically deploy ESET products to endpoints:

1. Click Sites and then select the applicable site.

2. Click Policies > New site policy.

3. Input a policy Name. In the Type drop-down menu, select Monitoring and then click Next.

4. Click Add a target and select the Target type. Set the Default Device Filter as needed, for example, All

Windows Desktops.

17

5. In the Add a monitor drop-down menu, select Component Monitor and click Next.

6. In the drop-down menu, select the appropriate ESET Direct Endpoint Management - Monitor component

monitor.

Select an operating system component: Windows [WIN], macOS [MAC] or Linux [LINUX].

Page is loading ...