ESET Online Help

Search English
Select the topic

Partial Migration from ESET PROTECT On-Prem to ESET PROTECT

The migration from the on-premises ESET PROTECT Server to ESET PROTECT is partial—see the table below:

You can migrate:

You cannot migrate:

ESET Management Agents (managed computers)

static groups

policies

dynamic group templates

report templates

mobile devices (Android only)

the whole database

dynamic groups (but you can migrate dynamic group templates)

detections

audit logs

notifications

tasks and triggers

installers

scheduled/generated reports (but you can migrate report templates)

tags

iOS mobile devices


important

ESET PROTECT does not support ESET Inspect On-Prem but supports ESET Inspect. If you migrate from ESET PROTECT On-Prem to ESET PROTECT, you will not be able to manage ESET Inspect On-Prem from ESET PROTECT, but you can manage ESET Inspect from ESET PROTECT.

Follow the steps below to migrate from the on-premises ESET PROTECT Server to ESET PROTECT:


note

If you have an MSP account, follow the steps for MSP migration to cloud.

I. Create a new ESET PROTECT instance

II. Migrate Policies from ESET PROTECT On-Prem to ESET PROTECT

III. Migrate Dynamic Group Templates from ESET PROTECT On-Prem to ESET PROTECT

IV. Migrate Report templates from ESET PROTECT On-Prem to ESET PROTECT

V. Migrate managed computers from ESET PROTECT On-Prem to ESET PROTECT

V.I. Migrate the static group structure using the computers export tool

V.II. Migrate the managed computers (ESET Management Agents) using the migration policy

VI. Migrate mobile devices

VII. Set up ESET PROTECT users in ESET Business Account

VIII. Add ESET Business Account users to ESET PROTECT Web Console

IX. Decommission the on-premises ESET PROTECT Server

Troubleshooting after the migration


warning

If you manage devices encrypted with ESET Full Disk Encryption, follow these steps to avoid the loss of recovery data.

1.Before the migration - Navigate to Status Overview > Encryption. Here you can Export your current ESET Full Disk Encryption Recovery Data.

2.After the migration - Import the ESET Full Disk Encryption Recovery Data on your new management console.

If you are unable to perform these steps, you need to decrypt the managed devices before the migration. After the migration, you can encrypt the managed devices from the ESET PROTECT Web Console.


warning

Do not export any ESET Management Agent policies.

Ensure you fully unassign all active Agent policies before the migration.


I. Create a new ESET PROTECT instance

Prerequisites

A Superuser account in ESET Business Account.

An eligible license for ESET PROTECT.


important

If your EBA and EMA2 accounts are registered to the same email address, the ESET PROTECT can be activated only from one account. The account (EBA or EMA2) you choose to create the ESET PROTECT instance from will be the only one you can use to activate or delete the instance.

Create a new ESET PROTECT instance

1.Open the ESET Business Account and log in (or create a new account).

2.Click Licenses > Enter License Key.

eba_welcome

3.In the Add License window, type your ESET PROTECT license key and click Add License.

eba_add_license

4.You will receive a verification email (if you do not receive the email, follow the Knowledgebase article instructions). Click Verify license.

eba_verify_license

5.In the Dashboard, click Activate under ESET PROTECT.


warning

Check the language setting of your ESET Business Account. Some ESET PROTECT main program window elements are defined the first time you set the language in your ESET Business Account language settings, and cannot be changed later.

6.An Activate ESET PROTECT window will open. Read the Terms of Use and select the check box if you agree.

7.Select a data center location for your ESET PROTECT instance that is the closest to the location of your managed network and click Continue.


warning

After selected, you will not able to change the data center location of your ESET PROTECT instance.

8.Your ESET PROTECT instance will be created. You can wait for a few minutes until it is created or you can log out and you will be notified by email when the ESET PROTECT instance is available.

9.Click Continue. Alternatively, click Dashboard, click Open in the ESET PROTECT tile to open a new tab with ESET PROTECT Web Console.

ESET PROTECT synchronizes your ESET Business Account structure to the Static Group tree in Computers in the Web Console.


II. Migrate Policies from ESET PROTECT On-Prem to ESET PROTECT

1.Log in to your ESET PROTECT On-Prem.

2.In your ESET PROTECT On-Prem, select Policies > All > select the check box in the table header (or select the check boxes next to policies you want to export) and click Actions > Export.


warning

Do not export any ESET Management Agent policies.

Ensure you fully unassign all active Agent policies before the migration.

export_policies

3.Save the .dat file with the list of Policies.

4.In ESET PROTECT, click Policies > Actions > Import and select the .dat file with the list of policies exported from ESET PROTECT On-Prem in step 2 and click Import to import them to ESET PROTECT.

cloud_import_policies

5.The imported policies will appear under Custom Policies. After the migration of computers from ESET PROTECT On-Prem to ESET PROTECT, policies that were assigned to computers in ESET PROTECT On-Prem are not preserved. After importing Policies to ESET PROTECT, you can assign them to imported computers in ESET PROTECT.


warning

Be careful when applying policies to computers:

a)In your ESET PROTECT On-Prem: Make the list of applied policies and their order for each managed computer.

b)In ESET PROTECT: Apply policies to each computer based on the policy setup from ESET PROTECT On-Prem.


III. Migrate Dynamic Group Templates from ESET PROTECT On-Prem to ESET PROTECT

1.In your ESET PROTECT On-Prem, select More > Dynamic Group Templates.

2.Select the check boxes next to the dynamic group templates you want to export and click Actions > Export.

export_dg_templates

3.Save the .dg file with the exported dynamic group templates.

4.In ESET PROTECT, click More > Dynamic Group Templates > Import and select the .dg file with the dynamic group templates exported from ESET PROTECT On-Prem and click Import to import them to ESET PROTECT.

cloud_import_dg_templates

5.The imported dynamic group templates will appear in the list of all dynamic group templates, and you can use them to create dynamic groups (you cannot migrate dynamic groups).


IV. Migrate Report templates from ESET PROTECT On-Prem to ESET PROTECT

1.In your ESET PROTECT On-Prem, select Reports.

2.Click the gear icon next to a report category or an individual report template and click Export.

export_reports

3.Save the .dat file with the exported report templates.

4.In ESET PROTECT, click Reports > Import Report Templates and select the .dat file with the report templates exported from ESET PROTECT On-Prem and click Import to import them to ESET PROTECT.


important

Repeat the steps above to migrate more individual report templates or more report categories.

cloud_import_reports

5.The imported report templates will appear in Reports. You can use the report templates to schedule and generate reports.


V. Migrate managed computers from ESET PROTECT On-Prem to ESET PROTECT

V.I. Migrate the static group structure using the computers export tool

The computers export tool can export the static group structure (non-MSP or MSP) from ESET PROTECT On-Prem. You can then import the static group structure into ESET PROTECT.


warning

If you decide not to use the computers export tool:

Continue with the migration by using the migration policy.

All the computers will appear in the Lost & found Static Group in ESET PROTECT after the migration.

Prerequisites to run the computers export tool:

64-bit Windows or Linux

Python (version 3.9 and later)—You can verify if Python is installed and verify its version by running the following command:

oWindows Command Prompt: python --version

oLinux Terminal: python3 --version

You can download and install Python from https://www.python.org/. Ensure to select the Add python.exe to PATH check box during the installation on Windows.

Ensure the Web Console port (2223 or a custom port) is accessible on the network.

 

1.Download the computers export tool to the computer.

2.Unzip the downloaded computers_export_tool.zip file.

3.Open the computers_export_tool folder in the Windows Command Prompt or Linux Terminal window.

4.Run the following command:

Windows: python computers_export_tool.py

Linux: python3 computers_export_tool.py

5.In Hostname [localhost], type the ESET PROTECT On-Prem hostname and press Enter. If you run the computers export tool on the ESET PROTECT Server, press Enter to use the default localhost value.

6.In Port [2223], press Enter if ESET PROTECT On-Prem uses the default Web Console port (2223), or type the custom Web Console port and press Enter.

7.In Username, type the Web Console username and press Enter.


important

Use the Web Console user with administrator privileges who has access to all ESET PROTECT On-Prem static groups to ensure the export of all static groups.

8.In Password, type the password of the Web Console user (you will not see the typed signs) and press Enter.

9.The tool generates a computers.csv file (located in the same folder—computers_export_tool). The computers.csv file contains the ESET PROTECT On-Prem static group structure with computer names. Note: If you run the tool again, it overwrites the computers.csv file.


important

A large number of managed computers

The import of a large number of computers can take a long time. If there are more than 30,000 managed computers in ESET PROTECT On-Prem, follow these steps:

1.Using a simple text editor, split the computers.csv file into several .csv files with up to 30,000 lines in each file.

2.Import each .csv file into ESET PROTECT by repeating the steps below.

10. In the cloud ESET PROTECT Web Console, click Computers > click the gear icon next to the All Static Group > select Import.

11. Click Choose File > select the computers.csv file and click Open.

12. Click Import. ESET PROTECT will import the ESET PROTECT On-Prem static group structure from the computers.csv file. You can close the import window and continue working with ESET PROTECT.

13. After the import completes, the Static Group structure with computer names from ESET PROTECT On-Prem will appear in Computers in the cloud ESET PROTECT Web Console. Proceed with the steps below—use the migration policy to migrate the managed computers (ESET Management Agents).

V.II. Migrate the managed computers (ESET Management Agents) using the migration policy


important

Before the migration of Agents, ensure that your firewall settings meet the ESET PROTECT network prerequisites.

1.In ESET PROTECT Web Console, click Quick Links > Download Migration Policy and save the .dat file.

cloud_dwn_mig_pol

2.In your ESET PROTECT On-Prem, select Policies > Import. Select the downloaded .dat file from the previous step and click Import.

policy_import

3.Navigate to Custom Policies and select your imported migration policy.

mig_pol_assign

4.Click the migration policy > Edit.

5.In Settings > Connection, set theicon_force_policy Force flag for Servers to connect to and Certificate.

6.Click Finish.


important

Test the migration on a few machines

We recommend migrating a few computers to which you have physical access. Ensure they can connect to ESET PROTECT and then migrate all computers.

7.Click Assign > Assign groups.

8. Select the All Static Group and click OK.


warning

Apply the migration policy to the All Static Group to ensure that you migrate all the managed computers.

cloud_select_targets_all

9. Click Finish to apply the policy.

10. Log in to your ESET PROTECT Web Console. In Computers, you will see the computers migrated from ESET PROTECT On-Prem. You may need to wait a few minutes until all computers from ESET PROTECT On-Prem start connecting to ESET PROTECT.

11. After you migrate computers from ESET PROTECT On-Prem to ESET PROTECT, you must re-activate ESET security products on the managed computers with cloud licenses managed by ESET PROTECT:

a.In ESET PROTECT Web Console, click Computers > click the gear icon next to the All Static Group > select Tasks > New Task.

cloud_activate_product

b.Select Product Activation in the Task drop-down menu.

c.Select the ESET security product license in Settings, review the target computers in Target and click Finish.


important

If the computers run various ESET security products, you must repeat the activation steps and select the appropriate license for each ESET security product category.

d.Wait a few minutes until the ESET security products are activated.


VI. Migrate mobile devices

VII. Set up ESET PROTECT users in ESET Business Account

VIII. Add ESET Business Account users to ESET PROTECT Web Console

IX. Decommission the on-premises ESET PROTECT Server

After successfully migrating to ESET PROTECT, decommission ESET PROTECT Server.


warning

If you keep the on-premises ESET PROTECT Server, disable the Delete Not Connecting Computers task to prevent the possible deactivation of ESET security products on computers managed by ESET PROTECT.

Troubleshooting after the migration

Refer to our Knowledgebase article to resolve the Device is using a failover connection alert.