Solution

Windows users: Upgrade ESET Remote Administrator 6.3 and later to ESMC.

ESMC Virtual Appliance: Upgrade your existing ESMC VA to the latest version or migrate.

I. Manual upgrade for Linux ESET Security Management Center Server using MySQL (applies to ESMC Server Appliance)

II. Upgrade ESET Management Agent

III. Upgrade ERA Proxy (applies to Linux and ERA virtual appliance)

There are easier ways to upgrade ESMC

1. Component upgrade task

ESMC Server (currently unavailable), ESET Management Agent, ESMC Web Console and ESMC MDC can also be upgraded using an upgrade task. Check online help for more information.

1. Pull database from older ESMC VA 

If you have been using ESMC Virtual Appliance (for example VMWare or Virtual Box) you can perform database pull and then upgrade agents via upgrade task.

I. Manual upgrade for Linux ESET Security Management Center Server using MySQL (applies to ESMC Server Appliance)

1. Download the ESMC component installers including:
   • ESET Security Management Center Server (Server) 
   • ESET Mangement Agent (Agent) 
   • Rogue Detection Sensor (RDSensor) 
   • Web Console (era.war)
   • Other installers as needed
      
2. Stop the Apache Tomcat service. For example:
   
   service tomcat7 stop (CentOS)  
    
3. Back up the following folder and all of its contents:
   
   /var/lib/tomcat7/webapps/era
    
4. Make a copy of the following configuration file:
   
   /var/lib/tomcat7/webapps/era/WEB-INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties
    
5. Delete the existing Web Console folder and all of its contents:
   
   /var/lib/tomcat7/webapps/era  
    
6. Delete the existing era.war file if it is on the system.
    
7. Unzip the new era.war file (that was downloaded in step 1) to the following folder:
   
   /var/lib/tomcat7/webapps/era/
   

   Examples (use yum or apt-get to install "unzip" if command is not available):

   mkdir /var/lib/tomcat7/webapps/era/
unzip era.war -d /var/lib/tomcat7/webapps/era/
 (jar xvf era.war)
    
8. Move the EraWebServerConfig.properties configuration file that you copied in step 4 to the following directory:
   
   /var/lib/tomcat7/webapps/era/WEB-INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties 
    
9. Run the ESMC Server installer:
   
   sudo ./server-linux-x86_64.sh --skip-license

   The --skip-license parameter skips the display of the ESET End-user license agreement (EULA). If you wish to view the EULA before agreeing to it, do not use this parameter when installing ESMC Server.

   For ESMC Server Appliance

   The DB root password is identical to the ESMC password in ESMC Web Console.

   If you receive an error related to insufficient rights when upgrading, see the log:

   /var/log/eset/RemoteAdministrator/EraServerInstaller.log

   and complete the following steps: 

   • Temporarily add the SUPER right for "era" user
      
   • Locate the actual user name and server connection in: /etc/opt/eset/RemoteAdministrator/Server/StartupConfiguration.ini

Use the following scripts (substitute the actual user name for "era"):
 

• For a database server on localhost, use

  mysql -u root -p

  and type:

  grant SUPER on *.* to era@'localhost';

• For a database server running on another machine, use

  mysql -u root -p --host=<db-hostname>

  and type:

  grant SUPER on *.* to 'era'@'%';
 

Complete the upgrade and make sure to remove the SUPER right after the upgrade is complete:

• For a database server on localhost, use

  mysql -u root -p

  and type:

  revoke SUPER on *.* from 'era'@'localhost';

• For a database server on another machine, use

  mysql -u root -p --host=<db-hostname>

  and type:

  revoke SUPER on *.* from 'era'@'%';

1. Start the Apache Tomcat service. Typically, it takes some time for the Apache to start and for the ESMC Web Console to become functional.
    
2. Log into your ESMC Web Console at the following URL: https://<hostname>/era
   
   for example https://192.168.10.12/era
    
3. To upgrade RD Sensor, run the installer as follows:
   
   sudo ./rdsensor-linx-x86_64.sh --skip-license

   The --skip-license parameter skips the display of the ESET End-user license agreement (EULA). If you wish to view the EULA before agreeing to it, do not use this parameter when installing RD Sensor.

II. Upgrade ESET Management Agent

It is recommended to use ESMC Administrator's account for the following steps.

Warning:

Be careful about connection compatibility:

• ERA Version 6.x Agent can connect to ESMC 7 Server.
• ESET Management Agent (version 7) cannot be connected to ESMC Server via ERA Proxy.
• ESET Management Agent (version 7) cannot connect to ERA.

If your infrastructure is using ERA Proxy, do not upgrade ERA Agents before a proper proxy solution is set up.
 

When upgrading the Agent, you have two options:

1. Run the Agent installer from the terminal locally on each client computer.
    
2. Create a Run Command Client task from the ESMC Web Console (steps included below).

ESET Management Agent upgrade using the Run Command Client task

1. Create new Dynamic groups which identify the operating system on the client machine—one group for 32-bit and other for 64-bit:
   1. Create a Dynamic group template for 32-bit systems with following parameters:
      • Operation "AND"
      • Add rule OS edition > OS platform = (equal) 32-bit
      • Add rule OS edition > OS type contains Linux
         
   2. Create a Dynamic group template for 64-bit systems with following parameters:
      • Operation "AND"
      • Add rule OS edition > OS platform = (equal) 64-bit
      • Add rule OS edition > OS type contains Linux
         
   3. Create a Dynamic group based on the 32-bit template you have just created.
       
   4. Create Dynamic group based on the 64-bit template you have just created.
      
       
2.  Create a new Client task for 32-bit systems:
   1. In the Basic section, select Run Command from the Task drop down menu.
       
   2. In the Targets section, select the Dynamic group you created for 32-bit operating systems.
       
   3. In the Settings section, enter one of the following commands into the Command line to run field (replace SERVER with actual server name and share with share name):
      

      HTTP Local Share command: wget -q http://SERVER/share/agent-linux-i386.sh -O /tmp/agent-linux-i386.sh && chmod a+x /tmp/agent-linux-i386.sh && /tmp/agent-linux-i386.sh --skip-license &> /tmp/era-agent-upgrade.txt
      
      Request from online command: wget -q https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-i386.sh -O /tmp/agent-linux-i386.sh && chmod a+x /tmp/agent-linux-i386.sh && /tmp/agent-linux-i386.sh --skip-license &> /tmp/era-agent-upgrade.txt
       

3. Create a new Client task for 64-bit systems:
   1. In the Basic section, select Run Command from the Task drop down menu.
       
   2. In the Targets section, select Dynamic group you created for 64-bit operating systems.
       
   3. In the Settings section, enter one of the following commands into the Command line to run field (replace server with your actual server name and readonlyshare with share name):

      HTTP Local Share command: wget -q http://SERVER/share/agent-linux-x86_64.sh -O /tmp/agent-linux-x86_64.sh && chmod a+x /tmp/agent-linux-x86_64.sh && /tmp/agent-linux-x86_64.sh --skip-license &> /tmp/era-agent-upgrade.txt
      
      Request from online command: wget -q https://download.eset.com/com/eset/apps/business/era/agent/latest/agent-linux-x86_64.sh -O /tmp/agent-linux-x86_64.sh && chmod a+x /tmp/agent-linux-x86_64.sh && /tmp/agent-linux-x86_64.sh --skip-license &> /tmp/era-agent-upgrade.txt

4. Monitor the Computer details section in Installed Applications. It may happen that two Agents (one running the old version, the other running a more recent version) are running on a client machine at the same time. This is only temporary. You can also monitor the Outdated applications report in Computers section (use drill-down to show particular computers). Note that data in this report are updated once per hour.

III. Upgrade ERA Proxy (for Linux and ERA virtual appliance users)

Visit this Online Help topic for upgrading infrastructure with ERA 6 Proxy.

KB Solution ID: KB6734 |Document ID: 25443|Last Revised: August 21, 2018