GUI - Mode Installation

Prerequisites:

important

Important

Make sure that you fulfilled the requirements before proceeding with the EEI Server installation. We recommend that you do not install the ESET PROTECT Server and EEI Server on the same machine.

warning

Warning

For installation purposes, use only the user that is created without the Two Factor Authentication option enabled. Otherwise, an error can occur during the installation process.

warning

Warning

In version 1.6, we are introducing a new feature, "Optional Rules". We have a separate group of rules that are not enabled by default, yet they are still installed by the installer but in a disabled state. Users can decide on these rules if they suit their environment and enable them manually.

Having this feature, we have decided to move some of the existing rules to the "Optional" category. It means some of the existing rules enabled in your environment may, after the installation, become disabled because they are updated with the new version of the rule, which is optional now. Please check disabled rules after the upgrade from previous versions whether some of the rules you want to have enabled were not disabled by this mechanism.

EEI Server has a built-in HTTP/S server and is listening to ports 80(HTTP) or 443(HTTPS).  You can change the port settings during the installation process.

The server needs to have a connection to LiveGrid.

Ensure that you have a proper host, port number, login, and password to the MySQL database. The user must be able to create a new database and tables.

EEI Server installation using GUI (only on the server machine)

Follow the steps below to configure and start your EEI Server:

1.Execute the downloaded installer file eei_server_nt64_ENU.msi.

2.Read the End-User License Agreement, select the check box to accept the terms of the License Agreement (without it, it is not possible to continue with the installation process), or read the Privacy Policy at the left lower corner of the window. Click Next to proceed with the installation.

3.Choose whether you want to participate in ESET Customer Improvement Program by selecting the check box, click Next to proceed with the installation. (Telemetry information)

4.Choose the destination directory where you want EEI Server to be installed and click Next to proceed with the installation. You can change the path directly by typing the destination in the command path or by clicking Change button and navigating to the desired folder.

5.Type in the Web Console HTTPS port number (by default it is 443), type in the Web Console HTTP port number (by default it is 80), type in the Agents port number (by default it is 8093, bear in mind that if a different port number is used, you have to change it also during the Agent installation process or by ESET PROTECT policy). Click Next.
EEI_GUI_Install_1

6.Select the type of Database that you will use for the EEI Server:

a.In the case of MySQL, type in the Database name (by default enterpriseinspectordb), Hostname (by default localhost, or use the hostname or the IP Address if the database is seated on a different machine than the EEI Server), Port of the database (filled during the database installation process, by default 3306 for MySQL). Fill in the Username and Password of the database account with sufficient access rights. Click Next.

b.If the database type you selected at the top is MS SQL Server, type in the Database name (by default enterpriseinspectordb), Hostname (by default localhost, or use the hostname or the IP Address if the database is seated on a different machine than the EEI Server), Port of the database (filled during the database installation process, by default 1433 for MSSQL). Then choose whether you want to use Use Named Instance or not by checking the check-box or unchecking it. This will allow you to use a custom database instance, and you can set it in the Hostname field in the form HOSTNAME\DB_INSTANCE for example: 192.168.0.10\EEISQL. For the clustered database use only the clustername. If this option is selected, you cannot change which port will be used, and the system will use default ports determined by Microsoft. Select the ODBC driver that is actually installed on the Server machine where the EEI Server is going to be installed (if not present, install it following the ODBC installation process). Fill in the Username and Password of the database account with sufficient access rights. Click Next.
EEI_GUI_Install_2

7.The installer will check the database parameters. If some parameters are missing, follow the instructions displayed on the screen. The installer will check the connection to the database. It may take a few seconds to complete. If there is a problem, a dialog box explaining the error appears (it may appear behind other windows). If no problems occur, the next screen is displayed. If the database was already created, you are asked to check whether you want to Reuse existing database or to Delete existing database and create new from scratch. Click Next.

warning

Warning

For editing my.ini file, please make sure it is saved in ANSI, not in UTF-8 format. We recommend using Notepad++ that will not change the file format after save.

8.If you have selected the Delete option or you are installing the EEI server on a fresh MySQL database, the window with requirements for my.ini file shows up. Make changes as requested, click Check. If the values required for my.ini file were made before, the check screen for these values would not appear.

9.Select the type of Enterprise Inspector user. Click Next.

10.Based on the previous selection, the default Detection Rules Set is selected. This can be changed after the first log in to the web console in a pop-up that appears or by the filtering rules mentioned at the end of this topic. Click Next.

11.Based on the type of Enterprise Inspector user selected, the default Data Collection option is selected. Click Next.

12.Select the period for detection storage and low-level data storage (Data Retention). Click Next.

note

Note

A low-level event is something a process does. So, write a file, do a DNS lookup, create a registry entry, etc. These can be seen in the Events view.

warning

Warning

For installation purposes, use only the user that is created without the Two Factor Authentication option enabled. Otherwise, an error can occur during the installation process.

13.In the next window, fill in the ESET PROTECT hostname or IP address, ESET PROTECT port for the data connection (by default 2223), ESET PROTECT user, and ESET PROTECT password (we recommend using EI_SERVER_INSTALLER user, which permission settings you will find in ESET PROTECT Permission Settings). Choose the protocol you want to use for communication (we recommend HTTPS as a secure option) and ESET PROTECT port of web console communication (by default 443). Click Next. If you entered the wrong credentials or IP address, the error message window appears. Repair invalid data entry and continue.

14.Accept the Certification Authority file.

15.Continue with one of the available options:

a.Get the certificate from ESET PROTECT

b.Import the certificate from a file