Features of ESET PROTECT for MSP users

ESET PROTECT offers a set of features focused on MSP users. All MSP related features are enabled after you import an EMA 2 account to ESET PROTECT.

Customer Setup Wizard

The key MSP feature in the ESET PROTECT is the MSP customer setup. This feature helps you create users and customized ESET Management Agent installer for your customer.

MSP Tree

After importing the EMA 2 account, ESET PROTECT synchronizes with ESET MSP Portal (EMA 2) and creates the MSP Tree. The MSP Tree is a structure in the Computers menu, which represents the structure of companies in your EMA 2 account. Items in the MSP Tree uses different icons than standard ESET PROTECT devices and groups. You cannot modify the MSP Tree structure in the Web Console. Only after you remove the EMA 2 account from the License Management can you start editing and removing customers from the tree. Suspending a company in EMA 2 does not remove the company from the MSP Tree in ESET PROTECT.

msp_tree

Shared Objects Group

After the synchronization of the MSP account, ESET PROTECT creates the MSP tree. There is one Shared Objects access group for each MSP and MSP manager. You cannot store computers in Shared Objects. Shared Objects are not visible under Groups in Computers. MSPs can share objects like policies and tasks via the Shared Objects access group.

Each MSP user created using the company Setup Wizard has read and use access to all Shared Objects groups above the user. You can inspect the Permission Sets assigned to the user to see the list of access groups. Users can access only upstream Shared Object groups, not groups from parallel MSP managers.

msp_shared_schema

ESET PROTECT certificates and MSP

When you import the EMA 2 account in ESET PROTECT, your ESET PROTECT Server creates a new MSP Certification Authority (CA). The MSP CA is stored in the Shared Objects static group under MSP root group. There is only one MSP CA, even if you import multiple accounts. If you remove the MSP CA, ESET PROTECT creates a new MSP CA after the next synchronization with the license servers. The synchronization occurs automatically once a day.

ESET PROTECT creates a new peer Agent certificate after a company is set up using the customer Setup Wizard. The MSP CA signs these peer certificates. Each certificate is tagged with the company name. Creating a separate certificate for each company improves the overall security.

If you want to use the Advanced security, we strongly recommend to set it up before importing the MSP account.

If you remove a CA, all computers using certificates signed by that CA would not able to connect to the ESET PROTECT Server anymore. Manual re-deployment of the ESET Management Agent would be necessary.

MSP in the Status Overview

You get the access to the new MSP tile in the Status Overview after importing the EMA 2 account. The MSP tile displays basic information about your account.

˄˅