Installation Requirements

Installation requires outbound connectivity to esa.eset.com on TCP port 443 and to the licensing servers.

Another requirement for running the installer is to have .NET Framework Version 4.5 (Full Install). The installer will automatically attempt to install .NET 4.5 if it is not already installed.

Windows Firewall exceptions that are essential for the proper function of ESET Secure Authentication will be added automatically as part of the installation. If you are using a different firewall solution, see Firewall exceptions for information about important exceptions that you will need to create.

Installation Access Rights

Active Directory environment:

oDomain administration rights: The installer must be run by a member of the "Domain Administrators" security group, or by a user with administrator privileges.

Domain administration rights can be omitted when installing/uninstalling ESA Components in an AD environment via .msi installer using command line parameters. In this case use the NO_DOMAIN_ADMIN_MODE=1 parameter and then check the installation logs for further instructions marked as "Manual configuration needed".

oSchema extension rights: Essential when installing the Authentication Server. The installer must be run by a user who is a member of the "Schema Admins" security group.

Standalone deployment:

oLocal administrator rights

 

ESA supports the installation of components in a distributed environment. Available models:

Authentication Server (AS) installed in Active Directory Integration mode

oComponents installed in Active Directory Integration mode must be within the same domain and they connect to AS automatically

oComponents installed in Standalone mode connect to AS via invitations

Authentication Server (AS) installed in Standalone mode

oComponents must be installed in Standalone mode and they connect to AS via invitations

 

Table of compatibility of ESA Components and Supported Operating Systems.

Prerequisites for the installation of each component

Authentication Service:

oWindows Server 2008 R2 or later SOS in the list of Supported Operating Systems

Management Tools:

oWindows7 or later COS in the list of Supported Operating Systems, Windows Server 2008 R2 or later SOS in the list of Supported Operating Systems

o.NET Framework version 3.5

oWindows Remote Server Administration Tools, Active Directory Domain Services component (RSAT AD DS)

note

Note

RSAT was previously known as the Remote Administration Pack (adminpack) and is downloadable from Microsoft. In Windows Server 2008 and later, this component may be installed from the “Add Feature” wizard in the Server Manager. All Domain Controllers already have these components installed.

Reporting Engine (Elasticsearch):

oServer JRE (Java SE Runtime Environment) version 1.8.0_131 and later versions of 1.8.x, Java SE 11,  or OpenJDK 11 or 13

oJAVA_HOME and PATH  system environment variables contain the path to your installation of Server JRE or OpenJDK

o.NET Framework version 4.7.2

o2GB free RAM

Identity Provider Connector:

oWindows Server 2012 R2 or later SOS in the list of Supported Operating Systems

oASP.NET Framework version 4.6.2

RADIUS Server:

oWindows Server 2008 R2 or later SOS in the list of Supported Operating Systems

Web App Plug-in for Microsoft Exchange Server:

oMicrosoft Exchange Server 2007 or later (64-bit only), with the Client Access role (Outlook Web App / Outlook Web Access) installed

o.NET Framework version 3.5

oInternet Information Services 7 (IIS7) or later

Web App Plug-in for Microsoft SharePoint Server:

oMicrosoft SharePoint Server 2010, 2013, 2016, 2019 (64-bit only)

oMicrosoft SharePoint Server 2010, 2013 Foundation (64-bit only)

o.NET Framework version 4.5

Web App Plug-in for Microsoft Dynamics CRM:

oMicrosoft Dynamics CRM 2011, 2013, 2015 or 2016

o.NET Framework version 4.5

Web App Plug-in for Microsoft Terminal Services Web Access:

oThe Terminal Services role with the Terminal Services role service installed on Windows Server 2008 R2

o.NET Framework version 4.5

Web App Plug-in for Microsoft Remote Desktop Services Web Access:

oThe Remote Desktop Services role with the Remote Desktop Web Access role service installed on Windows Server 2008 R2 and later SOS in the list of Supported Operating Systems

o.NET Framework version 4.5

Web App Plug-in for Microsoft Remote Web Access:

oThe Remote Web Access role service installed on Windows SBS 2008 where it is called Remote Web Access, Windows SBS 2011, Windows Server 2012 Essentials and Windows Server 2012 Essentials R2  

o.NET Framework version 4.5

Remote Desktop Protection:

oWindows Server 2008 R2 or later SOS in the list of Supported Operating Systems

oMicrosoft Windows 7 or later COS in the list of Supported Operating Systems

oOnly 64-bit operating systems are supported

Windows login protection:

oWindows Server 2008 R2 or later SOS in the list of Supported Operating Systems

oWindows 7 or later COS in the list of Supported Operating Systems

AD FS 3.0 or 4.0 protection:

oWindows Server 2012 R2

 

.NET Requirements:

All components: .NET 4.5 Full Install

Core Server: .NET 4.5 Full Install

RADIUS Server: .NET 4.5 Full Install

Management Tools: .NET 3.5 (4 on Windows Server 2012)

Web App Plugin: .NET 4.5, however, IIS Filters require .NET version 3.5

Reporting Engine (Elasticsearch) and FIDO: .NET Framework version 4.7.2

Identity Provider Connector: .NET Framework version 4.6.2

 

note

Note

Installing ESA Core (Authentication Server) and RADIUS Server on a COS in the list of Supported Operating Systems might not be in alignment with Microsoft's licensing policy. Consult Microsoft's licensing policy or your software supplier for details. Moreover, a COS may present other limitations (for instance number of maximum concurrent TCP connections) compared to a SOS.

Database requirements in Standalone mode

If the Authentication Server is installed in Standalone mode, it uses a built-in database by default. If you prefer an external database, the minimum database requirements are:

MS SQL / MS SQL Express  2012 (11.0.2100.60)

Postgre SQL 9.4.24