Create a new Certificate

As part of the installation process, ESET Remote Administrator requires that you create a Peer certificate for Agents. These certificates are used to authenticate products distributed under your license.


There is one exception, Agent certificate for server assisted installation cannot be created manually. This certificate is generated during server installation, provided that you have selected Generate certificates option.

To create a new certificate in the ERA Web Console, navigate to Admin > Certificates and click Actions > New.

icon_section Basic

Enter a Description for the certificate.

Product - Select the type of certificate you want to create from the drop-down menu.

Hostname - Leave the default value (an asterisk) in the Host field to allow for distribution of this certificate with no association to a specific DNS name or IP address.

Passphrase - We recommend that you leave this field blank, but you can set a passphrase for the certificate that will be required when clients attempt to activate.

Attributes - These fields are not mandatory, but you can use them to include more detailed information about this certificate.

Common name - This value should contain the string "Agent", "Proxy" or "Server", according to the selected Product.

If you want, you can enter descriptive information about the certificate.

Enter the Valid from and Value to values to ensure that the certificate is valid.

icon_section Sign

Select from two signing method:

1.Certification authority - In case you would like to sign using the ERA Certification Authority (self created CA during ERA installation).

oSelect the ERA certification authority from the list of certification authorities

oCreate new certification authority

2. Custom pfx file - you want to use custom .pfx file, click Browse to select a custom .pfx file. Navigate to your custom .pfx file and click OK. Select Upload to upload this certificate to the Server.

icon_section Summary

Review the certificate information you entered and click Finish. The certificate is now successfully created and will be available in the Certificates list to use when installing the Agent.


Instead of Creating new Certificate, you can use other options, for example Import a Public Key and Export a Public Key or Export Peer Certificate.