ESMC VA upgrade/migration

Upgrade - installing a newer version of ESMC components.

Migration - moving the ESMC Virtual Appliance to another instance of the same version.

Migration & upgrade - moving the ESMC Virtual Appliance to another instance of the higher version.

Before upgrade/migration

Always backup your database and export Certification Authority and Peer Certificates from your old ERA/ESMC VA before migration or upgrade of the ESMC Server.

If you are upgrading/migrating from ERA 6.x, be aware of following:

ERA 6.x Proxy component is deprecated. Read more about the HTTP Proxy new solution.

NTLM authentication is deprecated, ESMC 7 uses Kerberos instead. You have to use Linux login format, if you are logging in to domain on ESMC VA. This applies also to synchronization tasks.

Migration and upgrade process (recommended way to upgrade)

Use the following instructions to migrate and upgrade your ESMC VA.

1.Download the latest version of esmc_appliance.ova (or esmc_appliance.vhd.zip if you use Microsoft Hyper -V).

2.Deploy new ESMC VA, see ESMC Appliance deployment process for instructions. Do not configure new ESMC VA via its web interface yet.

3.Pull database from your old ESMC VA, see Pull database from other server for a complete step-by-step guide.

validation-status-icon-warning IMPORTANT

Do not uninstall/decommission your old ESMC Server yet.

4.Configure ESMC Virtual Appliance via its web interface.

5.Verify that your new ESMC VA behaves the same way as the previous one:

oIf the new ESMC VA has different IP address:

a)Create a policy on your old ESMC VA to set new ESMC Server IP address and assign it to all computers.

b)Wait for the policy to distribute to all ESET Management Agents.

c)Make sure all computers are connecting to the new ESMC VA.

d)Turn off and decommission the old ESMC VA.

oIf the new ESMC VA has the same IP address:

validation-status-icon-warning IMPORTANT

Make sure the network configuration on your new ESMC Server (IP address, FQDN, Computer name, DNS SRV record) matches that of your old ESMC Server. You can also use the hostname, just change the DNS record to point to the new server.

a)Turn off the old ESMC VA.

b)Turn on the new ESMC VA.

c)Make sure all computers are connecting to the new ESMC VA.

d)Decommission the old ESMC VA.

6.Upgrade a ESET Management Agents sample group using component upgrade task.

7.If the upgrade of the sample is successful and Agents are still connecting, continue with the rest of the Agents.

Upgrade process (alternative way to upgrade)

validation-status-icon-warning IMPORTANT

Upgrading ERA or older ESMC to the latest ESMC on the same VA does not upgrade other VA software (operating system, packages needed for proper functioning of ESMC Server). We recommend that you migrate the server after the pure upgrade.

Upgrade the VA using Components Upgrade task:

1.Upgrade ESMC Server first.

2.Upgrade a ESET Management Agents sample group.

3.If the upgrade of the sample is successful and Agents are still connecting, continue with the rest of the Agents.