Component upgrade task

Recommendations:

We recommend using the Component Upgrade task available in ESMC Web Console to upgrade your ESMC infrastructure. Carefully review and understand the directions here before updating. If you are using ERA Virtual Appliance, the recommended upgrade procedure is to pull the database to a new appliance to keep your OS up to date.

Are you upgrading an environment with ERA Proxy?

validation-status-icon-warning IMPORTANT

Only ERA 6.3 and later can be upgraded to ESMC 7.

Backup the following data before you start the upgrade task:

All certificates (Certificate Authority, Server Certificate and Agent Certificate)

Export your Certification Authority Certificates from an old ESMC Server to a .der file and save to external storage.

Export your Peer Certificates (for ESET Management Agent, ESMC Server) and private key .pfx file from an old ESMC Server and save to external storage.

Your ERA/ESMC database.

 

Recommended update procedure:

1.Update ESMC Server first (target the machine with ESMC Server).

validation-status-icon-error WARNING

Do not update Agents before the ESMC Server is updated. ESET Management Agents 7.x use a new communication protocol and are not able to connect to ERA Server 6.x.

2.Choose some clients for a test update and run the task on them (at least one client from each system / bit category).

We recommend that you use Apache HTTP Proxy (or any other transparent web proxy with caching enabled) in order to limit the network load. The test client machines will trigger download / caching of the installers. The next time the task is run, the installers will be distributed to client computers directly from the cache.

3.After a successful test update, proceed with updating the rest of the clients. Alternatively you can target the group All in this step. Computers that were already upgraded before will not be upgraded again.

List of upgraded components:

ESMC Server

ESET Management Agent (task will update all computers in the network with ESET Management Agents installed if they are selected as targets for the task)

ESMC Web Console (only applies when installed using the ESMC All-in-one installer or ESMC Virtual Appliance and any Linux distribution [provided in the installation folder: /var/lib/tomcat8/webapps/, /var/lib/tomcat7/webapps/, /var/lib/tomcat/webapps/])

ESMC Mobile Device Connector. We recommend that you upgrade MDM from version 6.1 to version 6.4 before upgrading your environment to version 7.

details_hoverNOTE

ESMC automatically notifies you when a new version of ESMC Server is available.

The following components must be upgraded manually:

Apache Tomcat (we strongly recommend that you keep Apache Tomcat up-to-date, see Upgrading Apache Tomcat)

Apache HTTP Proxy (can be achieved using All-in-one installer, see Upgrading Apache HTTP Proxy)

ESMC Rogue Detection Sensor

validation-status-icon-warning IMPORTANT

To upgrade ESET Security Products, use the Software Install task. Run the task using the latest installer package to install the latest version over your existing product.

Before upgrading:

validation-status-icon-error WARNING

If the component upgrade fails on a machine running the ESMC Server or Web Console, you may not be able to log into the Web Console remotely. We recommend that you configure physical access to the server machine before performing this upgrade. If you cannot arrange for physical access to the machine, make sure you can log onto it with administrative privileges using a remote desktop. We recommend that you back up your ESMC Server and Mobile Device Connector databases before performing this operation. To back up your Virtual Appliance, create a snapshot or clone your virtual machine.

hmtoggle_plus0ESMC Server instance is installed on a failover cluster?
hmtoggle_plus0Important instructions before upgrading Apache HTTP Proxy on Microsoft Windows
hmtoggle_plus0Important instructions before upgrading Apache HTTP Proxy on Virtual Appliance

 

See the online help topic for the Security Management Center Components Upgrade task procedure. For additional instructions to upgrade ESET Security Management Center to the latest version, see our Knowledgebase article.

Troubleshooting:

Verify whether you can access the ESMC repository from an upgraded computer.

Re-running the Components Upgrade task will not work if there is at least one component already upgraded to the newer version.

If there is no clear reason for the failure, you can upgrade components manually. See our instructions for Windows or Linux.

See general troubleshooting information for more suggestions to resolve upgrade issues.