Offline installation scenario for ERA

In some cases, you may want to install ERA and its components in environments without access to the Internet. To do so, follow our high-level installation instructions:

validation-status-icon-warning For instructions to upgrade ERA, see Upgrade ERA components in offline environment.

1.Install ESET Remote Administrator. Choose Activate later during installation and activate ERA later with an offline license.

2.Create a local repository for installation packages. There are three ways to do this:

a) Create a local repository using Apache Tomcat already installed with ERA.

I.Go to: C:/Program Files (x86)/Apache Software Foundation/Tomcat 7.0/webapps/

II.Create a new folder for your local repository, for example, era_repository.

III.Copy your installation packages into the repository.

IV.Installation packages will be accessible using this address:
https://tomcat_server:tomcat_port/era_repository/era_agent.dmg

b)Create a local repository using Apache HTTP Proxy.

I.Install Apache HTTP Proxy.

II.Go to: C:\Program Files\Apache HTTP Proxy\htdocs\ (location can be changed in the configuration file).

III.Copy installation packages into the repository.

IV.Installation packages will be accessible using following address:
http://proxy_server:proxy_port/era_agent.dmg

c)Use a shared network folder/drive.

3.Install ERA Agent via live agent installation by using a URL to access the agent installation package from the local repository in the installation script. See our Knowledgebase article for more information or watch our ESET Knowledgebase instructional video in English language.
 
For enterprise users, or to install using GPO/SCCM: See our Knowledgebase article

4.Deploy ESET Endpoint products to workstations using a Software installation task. Choose a custom URL for the installation package from the local repository. Visit the ESET.com downloads page to download installation packages.  

5.Activate your endpoints with an offline license:

How do I activate ESET business products offline?

How do I activate ESET business products from ESET Remote Administrator?

6.Disable ESET LiveGrid.

7.Update mirror – there are 2 scenarios (a, b):
validation-status-icon-warning Apache HTTP Proxy works as a mirror, but Apache Tomcat needs to be reconfigured to run without SSL, because the connection to the <%PRODUCT%> Web Console will be insecure due to the update mirror.

a)In a closed network without access to the internet, the administrator must create a custom update server –  a "mirror" folder where update files for clients are stored:

I.If Apache HTTP Proxy/Apache Tomcat is used as the update server, clients must be configured to use a custom update server (not proxy)

II.If Endpoint security for windows is used as the mirror server, clients must be configured to download from the client mirror

b)If at least one computer has access to internet:

I.You can use Apache HTTP Proxy and configure clients to use the proxy

II.You can use Tomcat as update server + Mirror tool and configure clients to use a custom update server

III.You can set up a mirror using Endpoint security for Windows and configure clients to download from the client mirror

8.It is highly recommended that you update the detection engine on a regular basis. If the database is not updated, computers will be flagged in the Web Console as Not updated. This warning can be muted in ERA Web Console by clicking the computer in the list and selecting Mute from the drop-down menu.