ESET Virtualization Security deployment
Before you deploy ESET Virtualization Security, we recommend that you create a local vShield user with role auditor. Enter your username and password into the configuration parameters under the vShield Environment section. ESET Virtualization Security will periodically check to see that vShield is properly registered.
The appliance is formatted as a VMware compatible image intended primarily for use in local networks. The OVA file contains a functional operating system, and is ready to use as soon as it is deployed. You can deploy the OVA file using vSphere Client.
Connection with ESET Remote Administrator can be established in the following 3 ways:
•If configuration options are left blank, ESET Virtualization Security will prompt you to enter them when the system boots up.
•If the address and password of ESET Remote Administrator are entered – server-assisted installation will be carried out. You will not be prompted for an address after deployment.
•You can enter all parameters (hostname, IP address, Agent Certificate, Certification Authority public key) during initial configuration to avoid their entry after deployment.
1.Log into vSphere Client, click File in the top menu bar and select Deploy OVF Template.
2.Click Browse and navigate to the image stored on your computer (local hard drive, network share...) or enter a URL where the image is located.
3.Click Next to verify that you have selected the correct image to use.
4.Read and accept the end user license agreement.
5.Follow the instructions on-screen to complete installation and specify the following information about your virtual appliance:
•Name and Location – Specify a name for the deployed template and location where virtual machine files are stored.
•Host / Cluster – Select the host or cluster on which you want to run the template.
•Resource Pool – Select the resource pool within which you want to deploy the template.
•Storage – Select a location to store virtual machine files.
•Disk Format – Select the format that virtual disks will use.
•Network Mapping – Select the network for the virtual machine to use. Ensure that you select the virtual machine network associated with the IP pool you created.
6.Specify all required values on the Properties window. Failure to enter these values can keep your virtual machine from starting or deny it the necessary certificates for communication with ESET Remote Administrator.
7.If you do not already have a certificate authority and agent/server certificate, you will need to create them in ERA Web Console:
To create a certificate authority, follow the steps below in ERA Web Console:
a)Navigate to Admin > Certificates > Certificate Authorities and click New.
b)Complete the required fields, add whatever optional information you want to and then click Save.
To create an agent/server certificate follow the steps below in ERA Web Console:
a)Navigate to Admin > Certificates > Peer Certificates and click New at the bottom of the window to add a new certificate.
b)Complete all mandatory fields, add any optional information that you want to and then click Finish.
c)Select your Agent certificate and select Export as Base64 from the Action drop-down menu. You will be prompted to save the text file.
d)To enter this certificate into the respective field, open the file, copy all text and paste the text into the appropriate field. Repeat these steps when exporting and entering the Server certificate.
8.Repeat these steps to create a new Server certificate.
9.Review the deployment summary and confirm by clicking Finish (the Power on after deployment feature is optional).
10.The deployment process will automatically create a virtual machine with the settings you specified. This process can take several minutes depending on network performance.