Security Management Center Components Upgrade

Recommendations before upgrading

We recommend using the Security Management Center Components Upgrade task available in ESMC Web Console to upgrade your ESMC infrastructure. Carefully review and understand the directions here before upgrading.

details_hoverNOTE

ESMC automatically notifies you when a new version of ESMC Server is available.

For additional instructions to upgrade ESET Security Management Center to the latest version, see our Knowledgebase article.

Are you upgrading an environment with ERA Proxy?

Are you upgrading an environment with ERA Virtual Appliance?

hmtoggle_plus0ESMC Server instance is installed on a failover cluster?
hmtoggle_plus0Important instructions before upgrading Apache HTTP Proxy on Microsoft Windows
hmtoggle_plus0Important instructions before upgrading Apache HTTP Proxy on Virtual Appliance

 

validation-status-icon-warning IMPORTANT

Only ERA 6.3 and later can be upgraded to ESMC 7.

Backup the following data before you start the upgrade task:

All certificates (Certificate Authority, Server Certificate and Agent Certificate)

Export your Certification Authority Certificates from an old ESMC Server to a .der file and save to external storage.

Export your Peer Certificates (for ESET Management Agent, ESMC Server) and private key .pfx file from an old ESMC Server and save to external storage.

Your ERA/ESMC database.

 

To upgrade ESET Security Products, use the Software Install task. Run the task using the latest installer package to install the latest version over your existing product.

Recommended upgrade procedure

1.Upgrade the ESMC Server - Select only the machine with the ESMC Server as target for the Security Management Center Components Upgrade task.

validation-status-icon-error WARNING

When upgrading from ERA 6.x Server, make sure to upgrade to the ESMC Server before upgrading the Agents. ESET Management Agents 7.x use a new communication protocol and are not able to connect to ERA Server 6.x.

2.Select some client computers (as a test sample - at least one client from each operating system and bitness) and run the Security Management Center Components Upgrade task on them.

We recommend that you use Apache HTTP Proxy (or any other transparent web proxy with caching enabled) in order to limit the network load. The test client machines will trigger download / caching of the installers. The next time the task is run, the installers will be distributed to client computers directly from the cache.

3.After the computers with upgraded ESET Management Agent are successfully connecting to the ESMC Server, proceed with upgrading the rest of the clients.

details_hoverNOTE

To upgrade ESET Management Agents on all managed computers in the network, select the Static Group All as target for the Security Management Center Components Upgrade task. Computers that were already upgraded before will not be upgraded again

List of upgraded components:

ESMC Server

ESET Management Agent

ESMC Web Console (only applies when installed using the ESMC All-in-one installer or ESMC Virtual Appliance and any Linux distribution [provided in the installation folder: /var/lib/tomcat8/webapps/, /var/lib/tomcat7/webapps/, /var/lib/tomcat/webapps/])

ESMC Mobile Device Connector. We recommend that you upgrade MDM from version 6.1 to version 6.4 before upgrading your environment to version 7.

The following components must be upgraded manually:

Apache Tomcat (we strongly recommend that you keep Apache Tomcat up-to-date, see Upgrading Apache Tomcat)

Database Server

Apache HTTP Proxy (can be achieved using All-in-one installer, see Upgrading Apache HTTP Proxy)

ESMC Rogue Detection Sensor

Troubleshooting

validation-status-icon-error WARNING

If the component upgrade fails on a machine running the ESMC Server or Web Console, you may not be able to log into the Web Console remotely. We recommend that you configure physical access to the server machine before performing this upgrade. If you cannot arrange for physical access to the machine, make sure you can log onto it with administrative privileges using a remote desktop. We recommend that you back up your ESMC Server and Mobile Device Connector databases before performing this operation. To back up your Virtual Appliance, create a snapshot or clone your virtual machine.

Verify whether you can access the ESMC repository from an upgraded computer.

Re-running the Security Management Center Components Upgrade task will not work if there is at least one component already upgraded to the newer version.

If there is no clear reason for the failure, you can upgrade components manually. See our instructions for Windows or Linux.

See general troubleshooting information for more suggestions to resolve upgrade issues.