ESET Online Help

Search English
Select the category
Select the topic

Features of ESET PROTECT for MSP users

ESET PROTECT offers a set of features focused on MSP users. All MSP related features are enabled after you import an EMA 2 account to ESET PROTECT.

Customer Setup Wizard

The key MSP feature in the ESET PROTECT is the MSP customer setup. This feature helps you create users and customized ESET Management Agent installer for your customer.

MSP Tree

After importing the EMA 2 account, ESET PROTECT synchronizes with ESET MSP Portal (EMA 2) and creates the MSP Tree. The MSP Tree is a structure in the Computers menu, which represents the structure of companies in your EMA 2 account. Items in the MSP Tree uses different icons than standard ESET PROTECT devices and groups. You cannot modify the MSP Tree structure in the Web Console. Only after you remove the EMA 2 account from the License Management can you start editing and removing customers from the tree. Suspending a company in EMA 2 does not remove the company from the MSP Tree in ESET PROTECT.

msp_tree

Shared Objects Group

After the synchronization of the MSP account, ESET PROTECT creates the MSP tree. There is one Shared Objects access group for each MSP and MSP manager. Access Group sets the object's Static Group and access to the object based on the user's access rights. You cannot store computers in Shared Objects. Shared Objects are not visible under Groups in Computers. MSPs can share objects like policies and tasks via the Shared Objects access group.

Each MSP user created using the company Setup Wizard has read and use access to all Shared Objects groups above the user. You can inspect the Permission Sets assigned to the user to see the list of access groups. Users can access only upstream Shared Object groups, not groups from parallel MSP managers.

msp_shared_schema

Managed customers

After synchronizing the MSP account, the MSP user can see the managed customers list in the msp_customer_normal Managed Customers section on the main ESET PROTECT menu.

ESET PROTECT certificates and MSP

When you import the EMA 2 account in ESET PROTECT, your ESET PROTECT Server creates a new MSP Certification Authority (CA). The MSP CA is stored in the Shared Objects static group under MSP root group. There is only one MSP CA, even if you import multiple accounts. If you remove the MSP CA, ESET PROTECT creates a new MSP CA after the next synchronization with the license servers. The synchronization occurs automatically once a day.

ESET PROTECT creates a new peer Agent certificate after a company is set up using the customer Setup Wizard. The MSP CA signs these peer certificates. Each certificate is tagged with the company name. Creating a separate certificate for each company improves the overall security.

important

If you want to use the Advanced security, we strongly recommend to set it up before importing the MSP account.

If you remove a CA, all computers using certificates signed by that CA would not able to connect to the ESET PROTECT Server anymore. Manual re-deployment of the ESET Management Agent would be necessary.

MSP in the Status Overview

You get the access to the new MSP tile in the Status Overview after importing the EMA 2 account. The MSP tile displays basic information about your account.