Creating MST file

Before you deploying the ERA Agent installer file, you need to create a transform .mst file with settings for ERA Agent. Install Orca (it is part of the Windows SDK). For more information about Orca see http://support.microsoft.com/kb/255905/

1.Download the ERA Agent installer. For example, you can use Agent-6.1.365.0_x64.msi which is a component of ERA version 6.1.28.0 for 64-bit systems. See our knowledgebase article for the list of ERA component versions.
2.Open Orca by clicking Start > Programs > Orca.
3.Click File in the top menu and then click Open and browse for Agent-6.1.365.0_x64.msi file.
4.Click Transform in the top menu and select New Transform.

orca_new_transform

6.Click Property.

orca_property

7.Right-click anywhere in the list of property values and select Add Row from the context menu.
8.Add the property P_HOSTNAME and type the hostname or IP address of your ERA Server into the Value field.
9.Repeat steps 7 and 8 to add the property P_PORT, where the value is the port used to connect to your ERA Server (2222) by default.

orca_property_add_value

10. For ERA Agent, insert the Peer certificate (.pfx) signed by your Certification Authority stored in ERA Server's database. Insert the Public key of the Certification Authority (.der file) which was used to sign your ERA Server Peer certificate.
There are two ways to insert certificates:
1.You can insert the contents of the certificate and public key encoded in Base64 format (no certificate files will be needed).
In ERA Web Console, navigate to to Admin > Certificates > Peer Certificate, click Agent Certificate and choose icon_export Export as Base64...
Navigate to Admin > Certificates > Certification Authorities, click ERA Certification Authority and choose icon_export Export Public Key as Base64
Add the contents of the exported certificate and public key into the Property table in Orca using the following property names:

Property name

Value

P_CERT_CONTENT

<peer certificate in Base64 format>

P_CERT_PASSWORD

<password for the peer certificate (don’t add this when password is empty)>

P_CERT_AUTH_CONTENT

<exported public key of the Certification Authority in Base64 format>

P_CERT_AUTH_PASSWORD

<password for the Certificate Authority (don’t add this when password is empty)>

New properties will be highlighted in green, click Transform and select Generate transform... to create a .mst file.

orca_generate_transform

2.You can download the certificate files and make them accessible from the target machine. Export the Agent Peer Certificate and Public Key file from Certification Authority of ERA Server and place them into a folder accessible from the target machine where ERA Agent will be installed.
Go to Admin > Certificates > Peer Certificate, click Agent Certificate and choose icon_export Export...
Go to Admin > Certificates > Certification Authorities, click Certification Authority and choose icon_export Export Public Key

fs_deploy_gpo_certificates_export2

Use the exported files and add their path into the Properties table with Orca using following property names:

Property name

Value

P_CERT_PATH

<path to the exported .pfx certificate> (specify path to the certificate file including extension)

P_CERT_PASSWORD

<password for the .pfx certificate (don’t add this when password is empty)>

P_CERT_AUTH_PATH

<path to the exported Public Key of the Certification Authority>

P_CERT_AUTH_PASSWORD

<password for the Certificate Authority (don’t add this when password is empty)>

The added properties will be highlighted in green, click Transform and select Generate transform... to create a .mst file.

Command (if you generated a transform file with the name AgentSettings): msiexec /i Agent-6.1.265.0_x64.msi /qn TRANSFORMS=”AgentSettings.mst”

To create a log from the installation run this command instead: msiexec /i Agent-6.1.265.0_x64.msi /qn TRANSFORMS=”AgentSettings.mst” /L*v! log.txt