ESET PROTECT VA upgrade/migration
For upgrading or migrating your VA, you can perform the following:
•Upgrade - install a later version of ESET PROTECT components.
•Migration - move the ESET PROTECT Virtual Appliance to another instance of the same version.
•Migration & upgrade - move the ESET PROTECT Virtual Appliance to another instance of the later version.
|
A new deployment of ESET PROTECT Virtual Appliance 8.1 and later has the Advanced security enabled by default. If you use ESMC or ESET PROTECT Virtual Appliance 8.0 with disabled Advanced security and you upgrade to ESET PROTECT Virtual Appliance 8.1 and later, Advanced security remains disabled. |
Before upgrade/migration
Back up your database and export Certification Authority and Peer Certificates from your old ESMC/ESET PROTECT VA before migration or upgrade of the ESET PROTECT Server.
Database pull versus the Components Upgrade
There are two principal ways of upgrading your VA:
•Using the database pull - upgrades your whole Appliance (the underlying operating system), not just the ESET PROTECT Server. The process is more complicated and requires having two concurrent appliances during the transition period. We recommend using the database pull for upgrading to the major versions or as a troubleshooting method.
•Upgrading via Components Upgrade task in the Web Console - the process is more simple and does not require access to the appliance, only to the Web Console. We recommend this procedure for minor and hotfix upgrades. Components upgrade does not upgrade other VA software (operating system, packages needed for proper functioning of ESET PROTECT Server).
Migration and upgrade process (recommended way to upgrade)
Use the following instructions to migrate and upgrade your ESET PROTECT VA.
1.Download the latest protect_appliance.ova (or protect_appliance.vhd.zip if you use Microsoft Hyper-V).
2.Deploy a new ESET PROTECT VA. See ESET PROTECT Appliance deployment process for instructions. Do not configure the new ESET PROTECT VA via its web interface yet.
3.Pull database from your old VA. See Pull database from other server for a complete step-by-step guide.
|
Do not uninstall/decommission your old VA Server yet. |
4.Configure ESET PROTECT Virtual Appliance via its web interface.
5.Verify that your new ESET PROTECT VA behaves the same way as the previous one:
oIf the new ESET PROTECT VA has a different IP address:
a)Create a policy on your old VA to set a new ESET PROTECT Server IP address and assign it to all computers.
b)Wait for the policy to distribute to all ESET Management Agents.
c)Ensure all computers are connecting to the new ESET PROTECT VA.
d)Turn off and decommission the old VA.
|
We strongly recommend that you do not uninstall the old ESET PROTECT VA Server using an uninstallation script. This uninstallation procedure will dissociate (remove) all licenses from the new ESET PROTECT VA Server database as well. To prevent this behavior, delete the old ESET PROTECT VA Server database (DROP DATABASE) before the uninstallation. |
oIf the new ESET PROTECT VA has the same IP address:
|
Ensure the network configuration on your new ESET PROTECT Server (IP address, FQDN, Computer name, DNS SRV record) matches that of your old VA Server. You can also use the hostname by changing the DNS record to point to the new server. |
a)Turn off the old VA.
b)Turn on the new ESET PROTECT VA.
c)Ensure all computers are connecting to the new ESET PROTECT VA.
d)Decommission the old VA.
|
We strongly recommend that you do not uninstall the old ESET PROTECT VA Server using an uninstallation script. This uninstallation procedure will dissociate (remove) all licenses from the new ESET PROTECT VA Server database as well. To prevent this behavior, delete the old ESET PROTECT VA Server database (DROP DATABASE) before the uninstallation. |
6.Upgrade a ESET Management Agents sample group using an ESET PROTECT Components Upgrade task.
7.If the upgrade of the sample is successful and Agents are still connecting, continue with the rest of the Agents.
Upgrade process (an alternative way to upgrade)
|
Upgrading ESMC or earlier ESET PROTECT to the latest ESET PROTECT on the same VA does not upgrade other VA software (operating system, packages needed for proper functioning of ESET PROTECT Server). We recommend that you migrate the server after the clean upgrade. |
Upgrade the VA using a Components Upgrade task:
1.Upgrade the ESET PROTECT Server first.
2.Upgrade a ESET Management Agents sample group.
3.If the upgrade of the sample is successful and Agents are still connecting, continue with the rest of the Agents.