Agent deployment using GPO or SCCM
Apart from local deployment, you can also use management tools such as Group Policy Object (GPO), System Center Configuration Manager (SCCM), Symantec Altiris or Puppet for remote deployment of Agent.
|
For remote deployments, verify all client computers have an internet connection. |
Use this option for mass deployment of the ESET Management Agent on client computers.
You can create a GPO/SCCM script for Agent deployment on Windows from Quick Links > Deploy Agent or Installers > Create Installer.
1.Click Windows > Use GPO or SCCM for deployment.
2.Select the Participate in product improvement program check box to send anonymous telemetry data and crash report to ESET (OS version and type, ESET product version and other product-specific information).
3.Parent group (optional) - Select the Parent group where the ESET PROTECT Web Console will place the computer after an Agent installation. You can select an existing static group or create a new one to which the device will be assigned after the installer is deployed. Selecting a Parent group will add all policies applied to the group to the installer.
4.Server hostname (optional) - Type the ESET PROTECT Server hostname or IP address. If necessary, specify the Port number (default is 2222).
5.Peer certificate:
•ESET PROTECT certificate - A Peer Certificate for Agent installation and ESET PROTECT Certification Authority are selected automatically. To use a different certificate, click the ESET PROTECT Certificate Description to select from a drop-down menu of available certificates.
•Custom certificate - If you use a custom certificate for authentication, click Custom Certificate > Select , upload the .pfx certificate and select it when installing the Agent. For more information, see Certificates.
Certificate passphrase - Type the certificate passphrase if needed - if you have specified a passphrase during ESET PROTECT Server installation (in the step where you created a Certification Authority) or you use a custom certificate with a passphrase. Otherwise, leave the Certificate passphrase field blank.
|
The certificate passphrase must not contain the following characters: " \ These characters cause a critical error during the initialization of the Agent. |
7.Click Finish.
8.Download the GPO/SCCM script and Agent installers (32-bit, 64-bit, ARM64). Alternatively, you can download the Agent installer .msi files from ESET download page - Standalone installers section.
Click the appropriate link below to view step-by-step instructions for two popular ESET Management Agent remote deployment methods:
•Deployment of ESET Management Agent using Group Policy Object (GPO) - This Knowledgebase article may not be available in your language.
•Deployment of ESET Management Agent using System Center Configuration Manager (SCCM)