New features of ESET Security Management Center for MSP users

ESMC 7.2 offers a set of improvements focused on MSP users. All MSP related features are enabled after you import an EMA 2 account to  ESMC.

Customer Setup Wizard

The key MSP feature in the ESMC is the MSP customer setup. This feature helps you create a user and customized ESET Management Agent installer for your customer.

MSP Tree

After importing the EMA 2 account, ESMC synchronizes with ESET MSP Portal (EMA 2) and creates the MSP Tree. The MSP Tree is a structure in the Computers menu, which represents the structure of companies in your EMA 2 account. Items in the MSP Tree uses different icons than standard ESMC devices and groups. You can not modify the MSP Tree structure. Only after you remove the EMA 2 account from the License Management can you start editing and removing customers from the tree. Suspending a company in EMA 2 does not remove the company from the MSP Tree in  ESMC.

msp_tree

Shared Objects Group

After the synchronization of the MSP account, ESMC creates the MSP tree. There is one Shared Objects static group for each MSP and MSP manager. MSPs can share objects like policies and tasks via the Shared Objects group.

Each MSP user created using the company setup wizard has read and use access to all Shared Objects groups above the user. You can inspect the Permission Sets assigned to the user to see the list of access groups. Users can access only upstream Shared Object groups, not groups from parallel MSP managers.

msp_shared_schema

ESMC certificates and MSP

When you import the EMA 2 account in ESMC, your ESMC Server creates a new MSP Certification Authority (CA). The MSP CA is stored in the Shared Objects static group under MSP root group. There is only one MSP CA, even if you import multiple accounts. If you remove the MSP CA, ESMC creates a new MSP CA after the next synchronization with the license servers. The synchronization occurs automatically once a day.

ESMC creates a new peer Agent certificate after a company is set up using the customer setup wizard. The MSP CA signs these peer certificates. Each certificate is tagged with the company name. Creating a separate certificate for each company improves the overall security.

important

Important

If you want to use the Advanced security, we strongly recommend to set it up before importing the MSP account.

If you remove a CA, all computers using certificates signed by that CA would not able to connect to the ESMC Server anymore. Manual re-deployment of the ESET Management Agent would be necessary.

MSP in the Status Overview

You get the access to the new MSP tile in the Status Overview after importing the EMA 2 account. The MSP tile displays basic information about your account.