ESET REMOTE ADMINISTRATOR Manuale utente

ESET

Remote

Administrator

we protect your digital worlds ©

Installation Manual

and User Guide

Contents

. Introduction................................................ 

. ERA  client/server architecture .................... 

. ERA Server ERAS................................................

.. Requirements........................................................

.. ERAS hierarchy at large networks ...........................

.. Installation............................................................ 

.. Logs ...................................................................... 

.. Conﬁguration ........................................................ 

.. License keys........................................................... 

.. Database & information storage.............................

. ERA Console ERAC .............................................

. Other ESET components in network

environment ............................................... 

. ESET client solutions.............................................

. ESET Conﬁguration Editor .....................................

.. Conﬁguration layering ......................................... 

.. Key conﬁguration entries ..................................... 

. LAN Update Server Mirror ................................... 

.. Operation of Mirror server ....................................

.. Types of updates ...................................................

.. How to enable and conﬁgure Mirror.......................

. ESET Remote Administrator Console in detail 

. Connecting to ERAS ............................................

. ERAC  main screen.............................................

. Information ﬁltering............................................

.. Groups .................................................................

.. Filter ....................................................................

.. Context menu....................................................... 

.. Views ...................................................................

. Tabs in ERAC.......................................................

.. General description of tabs and clients ...................

.. Replication & information in individual tabs ...........

.. Clients tab............................................................

.. Threat Log tab ..................................................... 

.. Firewall Log tab ................................................... 

.. Event Log tab....................................................... 

.. The Scan Log tab.................................................. 

.. Tasks tab ............................................................. 

.. Reports tab ......................................................... 

.. Remote Install tab ............................................... 

. ERA Console setup ............................................. 

.. Connection tab.................................................... 

.. Columns  Show / Hide tab................................... 

.. Colors tab............................................................ 

.. Paths tab............................................................. 

.. Date / Time tab.................................................... 

.. Other Settings tab ............................................... 

. Conﬁguring ERA Server using the Console ............ 

.. General tab.......................................................... 

.. Security tab ......................................................... 

.. Server Maintenance tab ....................................... 

.. Logging tab ......................................................... 

.. Replication tab .................................................... 

contents

ESET Remote Administrator

REV.

Exclusive Distributor

Version 2 Limited

Sales Hotline: (852) 2893 8860

Fax: (852) 2893 8214

Website:

Support Hotline: (852) 2893 8186

www.nod32.com.hk

www.eset.hk

.. Updates .............................................................. 

.. Other Settings tab ............................................... 

. Tasks .........................................................

. Conﬁguration Task ............................................. 

. OnDemand Scan task .........................................

. Update Now task ................................................

. Installation of ESET’s client solutions ............ 

. Command line parameters for direct installation of

client solutions .................................................. 

. Installation methods.......................................... 

.. Direct installation with predeﬁned XML

conﬁguration .................................................................... 

.. Remote installation in general ............................. 

.. Remote push install ............................................ 

.. Logon / email remote install ................................. 

.. Custom remote install.......................................... 

. The einstaller.exe agent in detail ......................... 

. Avoiding repeated installations ...........................

. Installation process  error messages...................

.. Remote Install Diagnostics....................................

. Deployment scenarios for ESET Remote

Administrator, Mirror server and ESET client

solutions ...................................................

. Small network  x ERAS, x Mirror server.............. 

.. Installation of HTTP Mirror server................................... 

.. Installation of ERA Server ..................................... 

.. Installation of ERA Console .................................. 

.. Remote install on workstations present in the

network ........................................................................... 

.. Remote install on notebooks currently not present in

the network .......................................................................

. Company with a remote subsidiary  x ERAS, x

Mirror server ..................................................... 

.. Installations at headquarters ...............................

.. Subsidiary: installation of ERA Server.................... 

.. Subsidiary: Installation of HTTP Mirror server................ 

.. Subsidiary: Remote installation to clients.............. 

. Hints & tips ................................................

. Export and other features of client XML

conﬁguration .................................................... 

. Combined update for notebooks and mobile

devices ............................................................. 

. Removing existing proﬁles .................................. 

. Scheduler setup.................................................

. Custom install packages ......................................



. Introduction

ESET Remote Administrator is an application which allows you to manage ESET‘s products in a networked

environment. ESET Remote Administrator (ERA) is a solution which allows you to administer ESET products,

including workstations and servers – from one central location. Thanks to ESET Remote Administrator‘s built-in

task management system, you can quickly respond to new problems threats, and - last but not least – install ESET

solutions on remote computers.

ESET Remote Administrator itself does not provide any other form of protection against malicious code, such as

viruses and worms. ERA depends on the presence of an ESET solution on workstations or servers, such as ESET NOD32

Antivirus or ESET Smart Security.

To perform a complete deployment of ESET security solutions portfolio, the following steps must be taken:

• Installationof ERA Server ERAS,

• InstallationofERAConsole(ERAC),

• InstallationofMirrorserver,

• Installationofclientcomputers(ESETNOD32Antivirus,ESETSmartSecurity,ESETServerEdition,etc...).

NOTE: Some parts of this document will use system variables, which refer to an exact location of folders and ﬁles:

%ProgramFiles% = typically C:\Program Files

%ALLUSERSPROFILE% = typically C:\Documents and Settings\All Users

Figure  Simpliﬁed model of deployment: ESET for Windows clients, ESET Remote Administrator. ERAS and MIRROR

SERVER can, but do not have to be installed on the same system.



. ERA  client/server architecture

Technically, ESET Remote Administrator consists of two separate components: ERA Server ERAS and ERA Console

ERAC. You can run an unlimited number of ERA Servers and clients on your network as there are no limitations in

the license agreement for their use. The only limitation is the total number of clients your installation of ERA can

administer see section .. ,“License keys”.

. ERA Server ERAS

The server component of ERA runs as a service under the following Microsoft Windows NTbased operating

systems: NT, , XP,  and Vista. The main task of this service is to collect information from clients and to

send various requests to them. These requests, including conﬁguration tasks, remote installation requests, etc., are

created through the ERA Console ERAC.

ERAS is a meeting point between ERAC and client computers  a place where all information is processed,

maintained or modiﬁed before being transferred to clients or to ERAC.

.. Requirements

ERAS requires a Microsoft Windows NTbased operating system NT, , XP, , Vista. The Microsoft

Windows Server Edition is not necessary for ERAS to work. A computer with ERAS should be always online and

accessible via computer network by:

• Clients(usuallyworkstations)

• PCwithERAConsole

• OtherinstancesofERAS(ifreplicated)

The chart below lists the possible network communications used when ERAS is installed. The process era.exe listens

on TCP ports , ,  and . Other communications occur using native operating system processes for

example“NetBIOS over TCP/IP”.

Protocol Port Description

TCP  ERAS listening Communication between clients

and ERAS

TCP  ERAS listening Communication between ERAC and

ERAS

TCP  ERAS listening

By default, this port oers

update packages using the Mirror

feature integrated in ERAS HTTP

communication

If using all features of the program, the following network ports need to be open:

Protocol Port Description

TCP  ERAS listening

Communication between the agent

einstaller.exe and ERAS during

remote install

TCP  ERAS listening ERAS replication

TCP  target port from the point of

view of ERAS

Copying of the agent einstaller.

exe from ERAS to a client using the

share admin during push install

UDP  target port from the point of

view of ERAS

“Name resolving” during remote

install

UDP  target port from the point of

view of ERAS “Browsing“ during remote install

TCP  target port from the point of

view of ERAS

Direct access to shared resources

using TCP/IP during remote install

an alternative to TCP 

The minimum hardware conﬁguration for the deployment of ERAS is also the minimum recommended

conﬁguration for the Microsoft Windows operating system used on the machine.



2.1.2 ERAS hierarchy at large networks

In larger networks multiple ERA Servers can be installed to perform future remote installs of client computers from

servers which are more accessible. For this purpose, ERA Server oers“replication“, which allows stored information

to be forwarded to a superior ERA Server “upper server”. Replication can be conﬁgured using ERAC.

The replication feature is very useful for companies with multiple branches or remote oces. The model

deployment scenario would be as follows: Install ERAS in each oce and have each replicate to a central ERA

Server. The advantage of this conﬁguration is especially apparent in private networks which are connected via VPN,

which is usually slower  the administrator will only need to connect to a central ERAS the communication marked

by the letter A in the ﬁgure below. He will not need to use the VPN tunnel to access individual departments the

communications B, C, D and E allowing him to bypass a slower communication channel through the use of ERA

Server replication.

The replication setup allows an administrator to deﬁne which information will be transferred to upper servers

automatically at a preset interval, and which will be sent upon request from the upper server administrator.

Replication makes ERA more userfriendly and also minimizes network trac.

Another advantage to replication is that multiple users can log in with various permission levels. The administrator

accessing the ERAS london.company.com with the console communication E will be able to administer only

clients connecting to london.company.com, london.company.com, paris.company.com. If you connect to the

central company.com A, you will be able to control all clients located at company headquarters and departments/

branches.

Figure  Replication in network consisted of headquarters and departments/subsidiaries.



2.1.3 Installation

The installation process is initiated by running the installation package. During this process, you will be prompted

to upload a license key, which is a ﬁle with the .lic extension. If the Expert installation mode is selected, several

other parameters can be deﬁned. They can be modiﬁed later in ERAC, but in most cases there is no need to do

so. The only exception is the server name. The server name should be the same as in the DNS, or the Computer

name value of your operating system My Computer > Properties > Computer name tab. The IP address of the

computer can also be used. This is the most essential piece of information for performing remote installation. If the

name is not speciﬁed during installation, the installer will automatically supply the value of the system variable

%COMPUTERNAME%, which is sucient in most cases.

By default, the ERAS program components are installed to the following folder:

%ProgramFiles%\Eset\Eset Remote Administrator\Server

and other data components such as logs, install packages, conﬁguration, etc. are stored in:

%ALLUSERSPROFILE%\Application Data\Eset\Eset Remote Administrator\Server

NOTE:On servers with ERAS, the ERA client should also be installed. ERAS uses the current virus signature database version

number as a reference number for clients. Installation of a solution with the LAN Update Server (Mirror) is recommended.

2.1.4 Logs

ERAS does not generate any output for a log ﬁle. This ﬁle is located in the folder:

%ALLUSERSPROFILE%\Application Data\Eset\Eset Remote Administrator\Server\logs

The log ﬁle titled“era.log” stores all events that take place during operation of ERAS, including error messages

related to starting the ERAS service, such as a corrupt database error or license key error. The log ﬁle allows you to

quickly determine the exact cause of ERAS failing to launch correctly.

NOTE: In the ERAS setup (accessible through ERAC) you can deﬁne several levels of logging including log rotation, to

signiﬁcantly reduce log ﬁle size and growth rate. Logging to the operating system application log can also be conﬁgured.

2.1.5 Conﬁguration

To a certain extent, ERAS can be conﬁgured during installation particularly in Advanced mode or later using the

ERA Console connected to the ERA Server. If need be, the .xml conﬁguration ﬁles on the server can be modiﬁed.

These ﬁles are located in the following directory:

%ALLUSERSPROFILE%\Application Data\Eset\Eset Remote Administrator\Server\conﬁguration

NOTE: For security reasons, password setup is separated (into individual .xml ﬁles) from other setup options. Potential lost

passwords (e.g. to access an ERA Server) can be resolved by deleting the era_private.xml ﬁle located in the Conﬁguration folder

2.1.6 License keys

The license key is a ﬁle with the .lic extension, similar in structure to the .xml format, but protected by an electronic

signature. This ﬁle is required to successfully conﬁgure ERAS. The ﬁle contains the following information:

• Licenseowner

• Numberofclientmachines(numberoflicenses)

• Licenseexpirydate

Here are four common problem scenarios related to license key ﬁles:

• .lic le is not present

ERAS will run in a trial mode  it will be possible to administer only two clients workstations for an unlimited time

period.

• .lic le is corrupt

The ERA Server service will not launch at all. The event will be logged to the era.log ﬁle.

• .lic le has expired

If the expiry date deﬁned in a .lic ﬁle is older than a current date, it is not possible to establish connection between

ERAC and ERAS. ERAS will continue to accept information from clients, but will not be able to administer them.



• The number of clients dened in a .lic le is exceeded

This status will be displayed by an error message in ERAC. It will be not possible to administer the extra clients

communicating with the ERA Server.

License keys should be stored in the folder:

%ALLUSERSPROFILE%\Application Data\Eset\Eset Remote Administrator\Server\license

During the installation of ERAS, the license key is automatically copied to the abovementioned folder. If the license

is updated or upgraded, the license key must be manually updated. The folder may contain several license ﬁles, but

ERAS will always choose and work with the most suitable ﬁle with the .lic extension. Every time a new license is

installed, the ERAS service must be stopped and restarted.

There are several ways to upload a license key to ERAS:

• Copy it to the abovementioned directory where ERA Server is installed; then restart the ERAS service.

• Use the ESET Conﬁguration Editor in ERAC and import license keys to ERA Server remotely

• Use the Licenses feature in ESET Smart Security/ESET NOD Antivirus to import license keys

2.1.7 Database & information storage

ERAS uses the MDAC Microsoft Data Access Components database component, while larger entries are saved to

individual ﬁles in the Storage folder.

ERAS has tools built in to allow administrators to automatically perform database and stored information

maintenance. This can be conﬁgured during the installation expert level or later through ERAC. Database

maintenance leads to faster responses on database queries from ERAS and also saves hard disk space.

We recommend using the default conﬁguration, which automatically deletes all entries older than six months.

Decrease this value only in the event that the system is overwhelmed by entries from a large amount of clients.

The database is stored in the following directory:

%ALLUSERSPROFILE%\Application Data\Eset\Eset Remote Administrator\Server\database

Files related to records in the database are stored in:

%ALLUSERSPROFILE%\Application Data\Eset\Eset Remote Administrator\Server\storage

Information about client communication with ERAS is stored in individual ﬁles. These ﬁles reside in the Storage

folder, and contain the following information:

• Clientdetails(.xmlconguration,ProtectionStatus,ProtectionFeatures,andSystemInformation),

• Logdetails(fromThreatLogandScanLog),

• Taskdetails,

• Scheduledreportsdetails(notdirectlyrelatedtothecommunicationbetweenaclientandERAS).

NOTE: If the Storage folder is located on a computer with an NTFS ﬁle system, you can use the NTFS compression feature to

signiﬁcantly decrease its size while storing a large volume of information.

. ERA Console ERAC

ERAC is the client component of ERA and is usually installed on a workstation. This workstation is used by the

administrator to remotely control ESET solutions on individual clients. Using ERAC, the administrator can connect

to the server component of ERA  on TCP port . The communication is controlled by the console program,

which is usually located in the following directory:

%ProgramFiles%\Eset\Eset Remote Administrator\Console You can also open ERA Console by clicking Start > All

Programs > ESET > ESET Remote Administrator Console

When installing ERAC, you may need to enter the name of an ERA Server. Upon startup, the console will

automatically connect to this server. The ERA Console can also be conﬁgured after installation.

ERAC outputs graphical logs in HTML that are saved locally. All other information is sent from ERAS on TCP port

.



. Other ESET components in network environment

. ESET client solutions

Client solutions are the security products which detect and block malicious code on workstations and servers. The

primary client solutions are ESET NOD Antivirus . and ESET Smart Security.

Clients communicate through two main channels:

• ERAServeronTCPport2222inordertosubmitinformationsuchaslogs,currentconguration,threatalerts,

etc. and to execute any tasks and queries from ERAS which are queued up for the client modify conﬁguration,

perform a scan, etc..

• TheupdateserveronadenedportusingtheHTTPorSMBprotocols.Laterinthismanualwewilldiscussa

method which allows an administrator to create a local update server or “Mirror” of the ESET update servers.

Figure  The most important communication channels connecting ERAS, ERAC and update servers. ERAS and MIRROR

SERVER can be run on the same machine

. ESET Conﬁguration Editor

The ESET Conﬁguration Editor is an important component of ERAC and is used for several purposes. One of the

most important is the creation of the following:

• Predenedcongurationsforinstallationpackages

• Congurationssentastaskstoclients

• Ageneral(.xml)congurationle

The Conﬁguration Editor allows the administrator to remotely conﬁgure many of the parameters available in any

ESET security solution, especially those installed on client workstations. It also allows the administrator to export

conﬁgurations to .xml ﬁles which can later be used for multiple purposes, such as creating tasks in ERAC, importing

a conﬁguration locally in ESET Smart Security, etc.

The structure used by the Conﬁguration Editor is an .xml template which stores the conﬁguration in a treelike

structure. The template is stored in the cfgedit.exe ﬁle.

The Conﬁguration Editor allows you to modify any .xml ﬁle. Please avoid modifying or rewriting the

cfgedit.xml source ﬁle! For the Conﬁguration Editor to work, the following ﬁles must be available: eguiEpfw.dll,

cfgeditLang.dll and eguiEpfwLang.dll.



To access the Conﬁguration Editor, start the ERA Console and click Tools > ESET Conﬁguration Editor.

3.2.1 Conﬁguration layering

If a value is changed in the Conﬁguration Editor, the change is marked by a blue symbol. Any entry with the

grey icon has not been changed and will not be written to the .xml output conﬁguration. When applying a

conﬁguration to clients, only those modiﬁcations which have been saved to the .xml output conﬁguration ﬁle will

be applied.

An example is shown below. In this conﬁguration the user name and password are inserted and using a proxy server

is prohibited.

The second conﬁguration shown below sent to clients will ensure that previous modiﬁcations are preserved,

including the user name EAV and password, but will also allow the use of a proxy server, and deﬁnes its

address and port.

3.2.2 Key conﬁguration entries

In this section, we will explain several of the key conﬁguration entries for ESET Smart Security available through the

ESET Conﬁguration Editor Tools > ESET Conﬁguration Editor . To change speciﬁc settings, select the option in the

tree structure on the left and change the corresponding Value on the right.

• Kernel > Setup > Remote administrator

Here you can enable communication between client computers and the ERA Server Connect to Remote

Administrator server. Enter the name or IP address of the ERA Server Server address. The Interval between

connections to server option should be left at the default value of ﬁve minutes. For testing purposes, this value can

be decreased to , which will establish a connection every ten seconds. If a Password is set, use the one which was

Indice

Altri manuali ESET Software

ESET

ESET MOBILE SECURITY - FOR SYMBIAN Manuale utente

ESET

ESET SMART SECURITY 4 Manuale utente

ESET

ESET REMOTE ADMINISTRATOR - ANNEXE 636 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET MAIL SECURITY 4 - FOR MICROSOFT EXCHANGE SERVER... Manuale utente

ESET

ESET MAIL SECURITY Manuale utente

ESET

ESET SMART SECURITY 4 Manuale utente

ESET

ESET SMART SECURITY Manuale utente

ESET

ESET MAIL SECURITY - FOR LINUX BSD AND SOLARIS Manuale utente

ESET

ESET NOD32 ANTIVIRUS POUR MS EXCHANGE Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuale utente

ESET

ESET SMART SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR NOVELL NETWARE SERVER Manuale utente

ESET

ESET MAIL SECURITY 4 Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET SMART SECURITY 4 - V4.2 Guida rapida

ESET

ESET NOD32 ANTIVIRUS - FOR MICROSOFT WINDOWS... Manuale utente

ESET

ESET CYBERSECURITY - QUICK START GUIDE FOR MAC Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET GATEWAY SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR KERIO Manuale utente

ESET

ESET FILE SECURITY Manuale utente

ESET

ESET NOD32 ANTIVIRUS - FOR LINUX MAIL SERVERS Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente