Issue

• You use ESET Security Management Center (ESMC) version 7.2 to manage your network and your client machines use earlier versions of ESET endpoint products that are reaching End of Life or other issues (e.g., SHA1 or other certificates).

Details

• End of Life policy of ESET business products.
• Expiring ESET signing certificates and SHA-2 compatibility with Windows Server systems information.
• Your client computers run on Windows operating system (OS).

Solution

Prerequisites

• All client computers are running the latest version of ESET Management Agent.
• Update / upgrade all client computers operating systems to the latest available version. For client computers on Windows, we recommend using the latest version of the Windows 10 operating system. Avoid using operating systems which are not supported by their vendor, if possible.

Sort your (Windows) client machines in the ESMC 7.2 Web Console using the Dynamic Groups and update their ESET security products to the appropriate version. See the table below:

Open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in before continuing.

I. Create Dynamic Group templates for filtering the Windows version

To create a Dynamic Group template that includes only Windows XP computers:

1. In ESMC Web Console, select More → Dynamic Group Templates and click the New Template button.

   

   Figure 1-1
   Click the image to view larger in new window

2. In Basic, type a Name and Description (optional) for the new Dynamic Group template. Use the OS name, for example: Windows XP.

3. In Expression, select the Operation AND (All conditions have to be true) and select Add Rule.

4. In filter, select OS edition → OS name.

5. Select the operator: contains.

6. Type the value: Windows XP.

   

   Figure 1-2
   Click the image to view larger in new window
    

7. Click Continue to see the Dynamic Group template Summary and Finish to create the Dynamic Group template.

8. Repeat the above steps in this section to create other Dynamic Group templates based on the table below (you have already created the first one):

Refer to the table at the beginning of the Solution section:

Several Windows OS versions are together in one Dynamic Group template in case you need to perform the same actions on them - see the table at the beginning of the Solution section.

II. Create Dynamic Group templates for filtering the ESET endpoint product version

To create a Dynamic Group template that includes only ESET endpoint version 5.x:

1. In ESMC Web Console, select More → Dynamic Group Templates and click the New Template button.

   

   Figure 2-1
   Click the image to view larger in new window

2. In Basic, type a Name and Description (optional) for the new Dynamic Group template. Use the OS name, for example: Windows XP.

3. In Expression, select the operation AND (All conditions have to be true) and select Add Rule.

4. In filter, select Installed software → Application name.

5. Select the operator: has prefix.

6. Type the value: ESET Endpoint.

7. Click Add Rule and in filter, select Installed software → Application version.

8. Select the operator: has prefix.

9. Type the value: 5.

   

   Figure 2-2
   Click the image to view larger in new window
    

10. Click Continue to see the Dynamic Group template Summary and Finish to create the Dynamic Group template.

11. Repeat the above steps in this section to create Dynamic Group templates based on the table below (you have already created the first one):

III. Create Dynamic Groups for Windows versions

To create a Dynamic Group template for computers:

1. In Computers, click the gear icon next to All and select New Dynamic Group.

Create all the new Dynamic Groups under the 'All' Static Group!

Create all the new Dynamic Groups for OS editions under the All Static group to ensure that the Dynamic Groups include all applicable managed computers.

Figure 3-1
Click the image to view larger in new window

1. In Basic, type a Name of the new Dynamic Group. For your convenience, use the same name as the name of the applicable Dynamic Group template, for example: Windows XP and Vista and 7 SP0.
   
   
2. In Template, click Choose Existing and select the Windows XP and Vista and 7 SP0 Dynamic Group template.
   
   
3. Click Finish to create the Dynamic Group.
   
   
4. Repeat the above steps in this section to create the following Dynamic Groups and assign the respective Dynamic Group template to each (you have already created the first one):

• Windows XP and Vista and 7 SP0
• Windows Vista and 7 SP0
  
• Windows 7 SP1 and 8 and 10

IV. Create Dynamic Groups for ESET endpoint product versions under each OS version Dynamic Group

Under Dynamic Group created in the previous section, create the following Dynamic Groups (as subgroups) and make sure to assign the respective Dynamic Group template to each.

The resulting Dynamic Group structure looks like the following:

Figure 4-1

Continue with the Knowledgebase article Update your Endpoints remotely using the ESET Security Management Center.