hmLoadTopic({
hmKeywords:"",
hmTitle:"Agent deployment—Linux",
hmDescription:"Prerequisites The computer must be reachable from the network. We recommend that you use the latest version of OpenSSL 1.1.1. ESET Management Agent also supports OpenSSL 3.x....",
hmPrevLink:"local_deployment_agent_windows.html",
hmNextLink:"local_deployment_agent_macos.html",
hmParentLink:"agent_live_installer.html",
hmBreadCrumbs:"<a href=\"fs.html\">Get started<\/a> &gt; <a href=\"fs_deployment.html\">ESET Management Agent Deployment<\/a> &gt; <a href=\"fs_local_deployment.html\">Local deployment<\/a> &gt; <a href=\"agent_live_installer.html\">Create Agent script installer—Windows\/Linux\/macOS<\/a>",
hmTitlePath:"Get started > ESET Management Agent Deployment > Local deployment > Create Agent script installer—Windows\/Linux\/macOS > Agent deployment—Linux",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Agent deployment—Linux<\/span><\/h1>\n\r",
hmBody:"<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Prerequisites<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>The computer must be reachable from the network.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>We recommend that you <span class=\"f_UI\">use the latest version of <\/span><span class=\"f_UI\">OpenSSL<\/span> <span class=\"f_UI\">1.1.1<\/span>. ESET Management Agent also supports OpenSSL 3.x. The minimum supported version of OpenSSL for Linux is openssl-1.0.1e-30. There can be more versions of OpenSSL installed on one system simultaneously. At least one supported version must be present on your system.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 26px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_NormalList\">Use the command <\/span><span class=\"f_CodeHighlighted\">openssl version<\/span><span class=\"f_NormalList\"> to show the current default version.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 26px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_NormalList\">You can list all versions of <\/span><span class=\"f_NormalList\">OpenSSL<\/span><span class=\"f_NormalList\"> present on your system. See the filename endings listed using the command <\/span><span class=\"f_CodeHighlighted\">sudo find \/ -iname *libcrypto.so*<\/span><span class=\"f_NormalList\"> <\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 45px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span>Verify if your Linux client is compatible using the following command: <span class=\"f_CodeHighlighted\">openssl s_client -connect google.com:443 -tls1_2<\/span> <\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Important_heading\" style=\"page-break-after: avoid;\"><span class=\"f_Important_heading\">OpenSSL 3.x<\/span><span class=\"f_Important_heading\"> support<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>ESET Management Agent supports OpenSSL 3.x.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>ESET PROTECT Server does not natively support OpenSSL 3.x, but you can <a href=\"https:\/\/support.eset.com\/kb8515\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">enable the OpenSSL 3.x support for ESET PROTECT On-Prem<\/a>.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Install the <span class=\"f_CodeHighlighted\">lshw<\/span> package on the client\/server Linux machine for the ESET Management Agent to report the <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_admin&amp;version=13.0&amp;lang=en-US&amp;topic=hw_inventory\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">hardware inventory<\/a> correctly.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Linux distribution<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Terminal command<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Debian<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTable\">Ubuntu<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTableCode\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableCode\">sudo apt-get install -y lshw<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Red Hat<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTableCode\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableCode\">sudo yum install -y lshw<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">OpenSUSE<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTableCode\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableCode\">sudo zypper install lshw<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>For Linux CentOS, we recommend installing the <span class=\"f_CodeHighlighted\">policycoreutils-devel<\/span> package. Run the command to install the package:<\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_CodeHighlighted\">yum install policycoreutils-devel<\/span><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Installation<\/span><\/h2>\n\r<p class=\"p_Normal\">Perform the Installation of the ESET Management Agent component on Linux using a command in the Terminal.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">The communication protocol between Agent and ESET PROTECT Server does not support authentication. Any proxy solution used for forwarding Agent communication to ESET PROTECT Server that requires authentication will not work.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">Follow the steps below for Agent installation on a Linux workstation.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>Download the Agent installer script to the client computer.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>Extract the <span class=\"f_Path\">.sh<\/span> file from the <span class=\"f_Path\">.gz<\/span> archive: <span class=\"f_CodeHighlighted\">tar -xvzf PROTECTAgentInstaller.tar.gz<\/span> <\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>Set the ESET Management Agent installation <span class=\"f_Path\">.sh<\/span> file as an executable: <span class=\"f_CodeHighlighted\">chmod +x PROTECTAgentInstaller.sh<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>Execute the <span class=\"f_Path\">.sh<\/span> file or run the Terminal command: <span class=\"f_CodeHighlighted\">sudo .\/PROTECTAgentInstaller.sh<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>When prompted, type the local administrator password and press <span class=\"f_UI\">Enter<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span>After the Agent installation completes, run the following command in the Terminal window to verify that the Agent is running: <span class=\"f_CodeHighlighted\">sudo systemctl status eraagent<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">7.<\/span>The computer with the installed Agent will appear in your ESET PROTECT Web Console, and you can manage it using ESET PROTECT On-Prem.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">If the computer with the installed Agent does not appear in your ESET PROTECT On-Prem, perform <a href=\"fs_agent_connection_troubleshooting.html\" class=\"topiclink\">troubleshooting<\/a>.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Note\" title=\"Note\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">ESET PROTECT On-Prem supports the <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_admin&amp;version=13.0&amp;lang=en-US&amp;topic=agent_autoupgrade\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">automatic upgrade of ESET Management Agents<\/a> on managed computers.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
