Issue

Migrate ESMC Server from ESET Security Management Center Virtual Appliance to Windows Server.

Prerequisites:

• ESET Security Management Center Virtual Appliance
• New MySQL database using the default name “era_db” and username “root”.

Important!

The following guide is only applicable to ESET Security Management Center running a MySQL database.

Solution

1. Generate a new ESMC Server certificate with connection information for the new ESMC Server. Log in to your existing ESMC Virtual Appliance (ESMC VA) and navigate to More → Peer Certificates → New → Certificate.

Figure 1-1
Click the image to view larger in new window

1. Type the Description of the certificate. Select Server from the Product drop-down menu. Leave the Host field set to the default value (an asterisk) and leave the Passphrase and Confirm passphrase fields empty.

Figure 1-2
Click the image to view larger in new window

1. Click the Sign section. Select the radio button Certification authority under Signing Method. In the Certification authority options, click Select certification authority. A new window will open; select certification authority you want to use to sign a new certificate. Click OK to confirm and return to the previous window.
    
2. Type the Certification Authority passphrase. In this case it is the same password you use to log into ESMC Appliance management console. Click the Summary section to review the settings of the new certificate and click Finish to apply.

Figure 1-3
Click the image to view larger in new window

1. Create a new policy to set a new ESMC Server IP address and assign the policy to all client computers. Click Policies → New Policy.

Figure 1-4
Click the image to view larger in new window

1. Enter a name for your policy, the Description field is optional. Click the Settings tab, select ESET Management Agent from the drop-down menu and then click Edit server list.

Figure 1-5
Click the image to view larger in new window

1. In the Servers window, click Add. In the host field, type the IP address of your new ESMC VA in format xxx.xxx.xxx.xxx (the example 10.20.100.155 is used). If you are using a port other than the default ESMC Server port 2222, specify your custom port number. Click OK. Make sure your new ESMC Server address is listed first and click Save.
    

Figure 1-6

1. Click the Assign tab to specify the clients that are targeted by this policy. Click Assign to display a new popup window with all Static and Dynamic Groups

Figure 1-7
Click the image to view larger in new window

1. Select the Static Group All to assign the policy to all connected agents and click OK.

Figure 1-8
Click the image to view larger in new window

1. Review the settings for this policy and click Finish to apply. Time to apply the policy will vary depending on your ESMC VA configuration.
    
2. When the policy is applied, open ESMC VA Management Console and create a database backup: Enter management mode by pressing Enter, typing your password and then pressing Enter twice. Select Backup database using the arrow keys and then press Enter. You will be prompted to type in your root password before the database backup can begin. Depending on the size of your database, the backup will take anywhere from a few seconds to a few hours.
    
3. Enable the Webmin interface. In the ESMC Server Appliance management mode menu, select Enable/Disable Webmin interface. Connect to the Webmin interface using a web browser with the IP address of ESMC VA and port 10000. A sample address is included here: https://xxx.xxx.xxx.xxx:10000 Log into the Webmin interface using the ESMC VA credentials where root is the login.

Figure 1-9

1. In the Webmin interface main menu, expand Others and select File Manager. Navigate to the folder /root/. Right-click era-backup.sql file and select Download from the context menu. Save the file to local drive and then copy it to a location accessible from the target Windows machine.

Figure 1-10
Click the image to view larger in new window

1. Return to the ESMC VA window, log into the management mode and select Shut down system.
    
2. On the target Windows Server, prepare a clean installation of MySQL Server. When you are prompted by MySQL installer to create a Root Account Password, we recommend that you use the same one you used in ESMC Server Appliance.
    
3. Before proceeding you must import ESMC VA database backup to an empty database named era_db on the target MySQL Server. Open a Command prompt and navigate to the MySQL Server binaries folder (default location is C:\Program Files\MySQL\MySQL Server x.x\bin). Enter the following commands, replace TARGETHOST with the address of the target database server.
   
   mysql --host TARGETHOST -u root -p "--execute=CREATE DATABASE era_db /*!40100 DEFAULT CHARACTER SET utf8 */;"
    
4. Restore the ESMC VA backed up database to the previously prepared empty database. Make PATHTOBACKUPFILE the location where you have stored the ESMC VA database backup:
   
   mysql --host TARGETHOST -u root -p era_db < PATHTOBACKUPFILE
    
5. Create an ESMC database user named root on the target MySQL server. Replace TARGETERAPASSWD with the password you used to log in to ESMC VA management console:
   
   mysql --host TARGETHOST -u root -p "--execute=CREATE USER root@'%' IDENTIFIED BY 'TARGETERAPASSWD';"
    
6. Grant proper access rights for the ESMC database user - root, on the target MySQL server:
   
   mysql --host TARGETHOST -u root -p "--execute=GRANT ALL ON eradb.* TO root;"
7. Click here to download the ESET Security Management Center Server standalone component. Execute the installation file and follow the installation wizard. When you reach the Database server connection setup in installation, make sure that the MySQL Server and MySQL ODBC Driver are detected properly. The database must be named era_db. In the Database account section, type in the Username "root" and Password you have created in the step 18. Click Next to continue. Installer will ask if you want to use provided user root as a database user for ESMC, click Yes to apply and continue.

Figure 1-11

1. In the following window, the installation wizard will configure an Administrator password for Webconsole. Select the check box next to Use Administrator password already stored in the database. Change the Agent and Console port if required to match the settings in ESMC Server Appliance. Default value for Agent port is 2222 and default value for Console port is 2223.

Figure 1-12

1. In the following window, select the radio button next to Keep currently used certificates and click Next to continue. Follow the installation wizard to finish the Server component installation.

Figure 1-13

1. Install ESMC Web Console.
    
2. Log in to ESMC Web Console using your ESMC Server Appliance password. Verify that the agents have migrated successfully and are connecting to the new server. Do not uninstall your old ESMC Server Appliance until you have verified the migration was successful.