Offline installation scenario for ESMC

In some cases, you may want to install ESMC and its components in environments without access to the Internet. To do so, follow our high-level installation instructions:

validation-status-icon-warning IMPORTANT

For instructions to upgrade ESMC, see Upgrade ESMC components in offline environment.

Installation using GPO/SCCM: See our Knowledgebase article

Installation from a local repository

1.Install ESET Security Management Center. Choose Activate later during installation and activate ESMC later with an offline license.

2.Create a local repository for installation packages. There are three ways to do this:

a) Create a local repository using Apache Tomcat already installed with ESMC.

I.Go to: C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\webapps\

II.Create a new folder for your local repository, for example, esmc_repository.

III.Copy your installation packages into the repository.

IV.Installation packages will be accessible using this address:
https://tomcat_server:tomcat_port/esmc_repository/Agent_MacOSX-x86_64.dmg

b)Create a local repository using Apache HTTP Proxy.

I.Install Apache HTTP Proxy.

II.Navigate to folder: C:\Program Files\Apache HTTP Proxy\htdocs\ (location can be changed in the configuration file).

III.Copy installation packages to this folder.

IV.Installation packages will be accessible using following address:
http://proxy_server:proxy_port/Agent_MacOSX-x86_64.dmg

c)Use a shared network folder/drive, for example: file://\\pc22\install\Agent_MacOSX-x86_64.dmg

3.Install ESET Management Agent via live agent installation by using a URL to access the agent installation package from the local repository in the installation script. See our Knowledgebase article for more information.
 

4.Deploy ESET Endpoint products to workstations using a Software installation task. Choose a custom URL for the installation package from the local repository. Visit the ESET.com downloads page to download installation packages.

5.Activate your endpoints with an offline license:

How do I activate ESET business products offline?

How do I activate ESET business products from ESET Security Management Center?

6.Disable ESET LiveGrid.

7.Update mirror – there are 2 scenarios (a, b):

validation-status-icon-warning IMPORTANT

Apache HTTP Proxy works as a mirror, but Apache Tomcat needs to be reconfigured to run without SSL, because the connection to the ESMC Web Console will be insecure due to the update mirror.

a)In a closed network without access to the internet, the Administrator must create a custom update server – a "mirror" folder where update files for clients are stored:

I.If Apache HTTP Proxy/Apache Tomcat is used as the update server, clients must be configured to use a custom update server (not proxy)

II.If Endpoint Security for Windows is used as the mirror server, clients must be configured to download from the client mirror

b)If at least one computer has access to internet:

I.You can use Apache HTTP Proxy and configure clients to use the proxy

II.You can use Tomcat as update server + Mirror Tool and configure clients to use a custom update server

III.You can set up a mirror using Endpoint Security for Windows and configure clients to download from the client mirror

8.It is highly recommended that you update modules on a regular basis. If modules are not updated, computers will be flagged in the Web Console as Not updated. This warning can be muted in ESMC Web Console by clicking the computer in the list and selecting Mute from the drop-down menu.