Create Agent (and ESET security product) installer

The procedure of creating an All-in-one installer (including ESET Management Agent and an ESET security product) package is similar to a Startup Wizard.



The installer package is an .exe file and is valid for Microsoft Windows operating systems only.

Click Other Deployment Options in the Quick Links section of the menu bar. In the Deploy Agent window, click Create installer under Create All-in-one installer (Windows only). The Create All-in-one installer window will open.


Deselect the check box Participate in product improvement program if you do not agree to send crash reports and telemetry data to ESET. If the check box is left selected, telemetry data and crash reports will be sent to ESET.

Package contents - Select the check box(es) from the following options:

Management Agent - Include only the ESET Management Agent. Select this option if you want to install the ESET security product on the client computer later, or if the client computer already has an ESET security product installed.

Security Product - Include the ESET security product with the ESET Management Agent. Select this option if the client computer does not have any ESET security product installed and you want to install it with the ESET Management Agent.

Full Disk Encryption - Encryption option is visible only with active ESET Full Disk Encryption license.

Security Product

License (Optional) - you can add a license using one of the methods described in License Management. If you already have existing licenses in License Management, simply choose the license that will be used to activate the ESET security product during the installation. If you do not choose a license, you can create an installer without it and activate the product later. Addition/removal of a license is only allowed to be done by the Administrator whose home group is set to All and who has Write permission on licenses in that group.

Product - Select an ESET security product that will be installed together with ESET Management Agent.



If you do not see any product installation files, make sure you have the repository set to AUTOSELECT. For more information, see the Advanced settings section of Server settings.

Language - Select the language version of the ESET security product installer.

Optionally, you can select a Policy that will be applied on the ESET security product during its installation.

Protection settings - select the check box next to the setting to enable it for the installer:

oThe ESET LiveGrid® feedback system

oDetection of Potentially Unwanted Applications - read more in our Knowledgebase article.

oDo not define Protection settings right now - select this check box if you do not want to define these protections setting for the installer and you want to set them via policy later.

Select the check box I accept the terms of the application End User License Agreement and acknowledge the Privacy Policy. See EULA for more information.


A Peer Certificate and ESET PROTECT Certification Authority are chosen automatically based on the available certificates. If you want to use a different certificate than the one automatically selected, click ESET PROTECT Certificate to see a list of available certificates and then select the one you want to use. If you want to use your own Custom certificate, click the radio button and upload a .pfx certificate file.

Enter your Certificate passphrase if needed. For example, if you have specified the passphrase during the installation of ESET PROTECT, or if you are using a Custom certificate with a passphrase. Otherwise, leave the Certificate passphrase field blank.



The certificate passphrase must not contain the following characters: " \ These characters cause a critical error during the initialization of the Agent.



Be aware that it is possible to extract the Certificate passphrase because it is embedded in the .exe file.


In this section, you can customize the All-in-one installer package:

Optionally, you can change the Name and enter a Description for the package installer.

Click Select tags to assign tags.

Parent group (optional) - Select the Parent group where the computer will be placed after installation. You can select an existing static group or create a new static group to which the device will be assigned after the installer is deployed.

ESET AV Remover - Select the check box to uninstall or completely remove other antivirus programs on the target device.

Initial installer configuration (Optional) - Use this option if you want to apply configuration policy to ESET Management Agent. Click Select under Agent configuration (optional) and choose from the list of available policies. If none of the pre-defined policies are suitable, you can create a new policy or customize the existing ones.

Server hostname (optional) - Type the ESET PROTECT Server hostname or IP address. If necessary, you can specify the Port number (default is 2222).

Select the check box Enable HTTP Proxy settings and specify the Proxy settings (Host, Port, Username and Password) to set ESET Management Agent connection to Proxy to enable communication forwarding between ESET Management Agent and ESET PROTECT Server. The Host field is the address of the machine where the HTTP Proxy is running. HTTP Proxy uses the port 3128 by default. You can set a different port if needed. Make sure to set the same port also in the HTTP Proxy configuration.



The communication protocol between Agent and ESET PROTECT Server does not support authentication. Any proxy solution used for forwarding Agent communication to ESET PROTECT Server that requires authentication will not work.

Enable Use direct connection if HTTP proxy is not available if you want to allow this fallback option.

Click Finish. All-in-one installation package files will be generated for 32-bit and 64-bit operating systems. Click the desired version to start downloading it. Once the download completes you will be prompted to choose the location where the file is stored (for example, PROTECT_Installer_x86_en_US.exe or PROTECT_Installer_x64_en_US.exe). Click Save file.



The installer is not digitally signed, which might generate a web browser warning during installer download as well as generate operating system warning and prevent installation on systems where unsigned installers are blocked.

Run the installation package file on a client computer. It will install the ESET Management Agent and the ESET security product on the device and connect the device to ESET PROTECT. For step-by-step instructions, see the setup wizard. You can run the installation package in a silent mode to hide the setup wizard window.