Issue

• ESET Security management Center (ESMC) 7.x Certificate Migration to secondary server

Solution

ESET Security Management Center (ESMC) 7 User Permissions

This article assumes that your ESMC user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

• Create a second administrator user in ESET Security Management Center 7.x

View permissions needed for least privilege user access

I. Export the Certificate Authority from the existing ESMC Server, Server One in this example

1. Open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.

2. Click More → Certificates and select Certification Authorities.
    
3. Click ERA Certification authority and select Export Public Key.
    
4. The file is saved with a .der extension.

Figure 1-1
Click the image to view larger in new window
 

II. Export the Peer Server Certificate from the existing ESMC Server, Server One in this example

1. Click More → Peer Certificates.
    
2. Click Server certificate and select Export.
    
3. The file is saved with a .pfx extension.

Figure 2-1
Click the image to view larger in new window

1. Save the .pfx and .der files to a shared location that is accessible from Server Two.
    

III.  Import the Certificate Authority (CA) .der file to the secondary ESMC Server, Server Two in this example

1. Open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.

2. Click More → Certificates → Certification Authorities.
    
3. Click Actions and select Import Public Key. 

Figure 3-1
Click the image to view larger in new window

1. Click the Browse button. Navigate to the shared location where you saved the Certificate Authority (CA) .der file. Select the file and click Open.

Figure 3-2
Click the image to view larger in new window

1. Type in a Description and click Import.

Figure 3-3
Click the image to view larger in new window

1. After the Certificate has successfully imported, click Close. The Certification Authority from Server One is now in the Certification Authorities list on Server Two.

Figure 3-4
Click the image to view larger in new window

IV.  Import the Peer Server Certificate .pfx file to the secondary ESMC Server, Server Two in this example

1. Click More → Server Settings → Change certificate.

Figure 4-1
Click the image to view larger in new window

1. Select Custom certificate in the Certificate window and click the choose file icon.
    
2. Navigate to the shared location where you saved the Peer Server Certificate .pfx file from Server One. Select the file and click Open.

Figure 4-2
Click the image to view larger in new window

1. Click OK → Save.

Figure 4-3
Click the image to view larger in new window

To complete the certificate change, restart the ESMC Server service. To restart the service:

1. Press the Windows key + R, type services.msc in the Open field and click OK.
    
2. Right-click ESET Security Management Center Server and select Restart.

With your certificates successfully migrated to the new server, you are ready to migrate Client Computers from Server One to Server Two.

KB Solution ID: KB6729 |Document ID: 25426|Last Revised: August 16, 2018