ERA Structure

To manage small to medium-sized networks (1000 clients or less), a single machine with ERA Server and all its components (supplied web server, database, etc.) installed on it is usually sufficient. You can think of it as a single server or standalone installation. All managed clients are connected directly to the ERA Server via ERA Agent. The administrator can connect to the ERA Web Console via web browser from any computer on the network or run the Web Console directly from the ERA Server.



Groups allow you to keep endpoints on your network organized so that you can assign policies to them systematically.

You can manually select which endpoints belong to any Static group. Dynamic groups are template-based, and automatically include endpoints that meet the criteria established in your template.

Knowledgebase articles are available to help you add computers to static groups, create new dynamic group templates and assign a policy to a group.

Additional information on groups can be found in the ERA Administrator guide topics Working with ESET Remote Administrator and Groups.


Certificate - Certificates are used to identify computers on your network, allowing secure communication between your ERA Server and clients, and also to establish secured connection of ERA Web Console.


To make sure all components can communicate correctly, all Peer Certificates need to be valid and signed by the same Certification Authority.

Certification Authority (CA) - A CA is used to legitimize certificates distributed from your network. In an enterprise setting, a public key can be used to automatically associate client software with the ERA Server to allow for the remote installation of ESET products.

For more information about Certificates and Certification Authority, read online help.