[KB6729] Migrate managed computers from the existing ESMC server to the new ESET Security Management Center (ESMC) Server 7.x

0
(0)

Issue

ESET business product in Limited Support status

This article applies to an ESET product version that is currently in Limited Support status and is scheduled to reach End of Life status soon.

For a complete list of supported products and support level definitions, review the ESET End of Life Policy for business products.

Upgrade ESET business products.

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

  • Migrate client computers from the existing ESMC server to the new ESMC server using an agent policy

Solution

Before Migration

Before any migration, decrypt all workstations encrypted with ESET Full Disk Encryption. You can encrypt them once the migration is finished.

I. Install the new ESET Security Management Server

  1. Install ESMC Server using the All-in-one package installer (Windows) or choose another installation method (Windows manual installation, Linux or Virtual Appliance).
  2. Import all required ESET licenses to ESMC.

II. Export the Certificate Authority from the new ESMC Server, Server One in this example

  1. On your new ESMC server, open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.
  2. Click More → Certificates and select Certification Authorities.
  3. Click ERA Certification authority and select Export Public Key.
  4. The file is saved with a .der extension.

Figure 1-1
Click the image to view larger in new window

III. Export the Agent Certificate .pfx file from the new ESMC Server

  1. On your new ESMC server,open ESET Security Management Web Console (ESMC Web Console) in your web browser and log in.
  2. Click More → Peer Certificates.
  3. Click Agent certificate and select Export.
  4. The file is saved with a .pfx extension.

Figure 2-1

  1. Save the .pfx and .der files to a shared location that is accessible from Server Two.

IV. Import the Certificate Authority (CA) .der file to the existing ESMC Server (Server Two in this example)

  1. On your existing ESMC server, open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.
  2. Click More → Certificates → Certification Authorities.
  3. Click Actions and select Import Public Key.

Figure 3-1
Click the image to view larger in new window

  1. Click the Browse button. Navigate to the shared location where you saved the Certificate Authority (CA) .der file. Select the file and click Open.

Figure 3-2
Click the image to view larger in new window

  1. Type in a Description and click Import.

Figure 3-3
Click the image to view larger in new window

  1. After the Certificate has successfully imported, click Close. The Certification Authority from Server One is now in the Certification Authorities list on Server Two.

Figure 3-4
Click the image to view larger in new window

Make sure the exported Agent certificate .pfx file is accessible to the existing ESMC Server (Server Two) and continue to migrate client computers from the existing ESMC Server to the new ESMC Server.

V. Migrate client computers

Warning:

If the client computers are encrypted with ESET Full Disk Encryption, decrypt them before migrating to another ESMC Server to avoid the loss of recovery data. After the migration, you can encrypt the client computers again using the new ESMC Server.

  1. On your existing ESMC server, open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.
  2. Click Policies.
  3. Click Policies → New.

Figure 4-1
Click the image to view larger in new window

  1. Type a Name and optional Description for the policy in the appropriate fields.

Figure 4-2
Click the image to view larger in new window

  1. Click Settings, select ESET Management Agent from the drop-down menu and click Edit server list.

Figure 4-3
Click the image to view larger in new window

  1. Click Add. Type the FQDN / IP address of the new server in the Host field and click Ok.

Figure 4-4
Click the image to view larger in new window

  1. Verify the FQDN / IP address for the new server is correct and click Save.

Figure 4-5

  1. Click Change certificate.

Figure 4-6
Click the image to view larger in new window

  1. Select Custom certificate and click the folder icon.

Figure 4-7

  1. Navigate to the Agent Certificate .pfx file exported from the new ESMC Server, select the file and click OK.

    Figure 4-8
  1. The Agent certificate is in the policy.

Figure 4-9
Click the image to view larger in new window

  1. Select Assign → Assign. Select a client computer to migrate to the new server. Only select one client computer to start. Click OK.

Figure 4-10
Click the image to view larger in new window

  1. Click Finish.
  2. Verify the test client computer is now connected to the new ESMC Server and the Agent policy has the correct certificate.
  3. After a successful migration of the test client computer, assign the new policy you created to the rest of your client computers to complete the migration to the new ESMC Server.
  4. Client computers should now connect to your new ESMC Server. If clients are not connecting, see Problems after upgrade/migration of ESMC Server.

  5. Once you have everything running correctly on your new ESMC Server, carefully decommission your old ESMC Server.

Languages
Last Updated: May 5, 2021

How useful was this post?

Click on a star to rate it!

Average rating 0 / 5. Vote count: 0

No votes so far! Be the first to rate this post.

(Visited 73 times, 1 visits today)
Tagged: