Jump to content

Bahr A

  • Content Count

  • Joined

  • Last visited

Profile Information

  • Location
  1. OK found a solution. I've installed ERA, and got the Agent installer script for mac (below). I went to ECA and got the Agent installer for Windows ( the .ini file) replace: eraa_server_hostname with P_HOSTNAME eraa_server_port with P_PORT eraa_peer_cert_b64 with P_CERT_CONTENT Deploy/run the sh ... and all good to go Please correct me if i am wrong on this, or if there is a better way ESET, you really need to support this via ESET Cloud Administrator. #!/bin/sh -e # ESET Security Management Center # Copyright (c) 1992-2018 ESET, spol. s r.o. All Rights Reserved files2del="$(mktemp -q /tmp/XXXXXXXX.files)" dirs2del="$(mktemp -q /tmp/XXXXXXXX.dirs)" echo "$dirs2del" >> "$files2del" dirs2umount="$(mktemp -q /tmp/XXXXXXXX.mounts)" echo "$dirs2umount" >> "$files2del" finalize() { set +e echo "Cleaning up:" if test -f "$dirs2umount" then while read f do sudo -S hdiutil detach "$f" done < "$dirs2umount" fi if test -f "$dirs2del" then while read f do test -d "$f" && rmdir "$f" done < "$dirs2del" fi if test -f "$files2del" then while read f do unlink "$f" done < "$files2del" unlink "$files2del" fi } trap 'finalize' HUP INT QUIT TERM EXIT eraa_server_hostname="from_INI" eraa_server_port="from_INI" eraa_peer_cert_b64="from_INI" eraa_peer_cert_pwd="" eraa_ca_cert_b64="" eraa_product_uuid="" eraa_installer_url="hxxp://repository.eset.com/v1/com/eset/apps/business/era/agent/v7/7.0.447.0/agent_macosx_x86_64.dmg" eraa_installer_checksum="c0ee6644e43b894045c19d9c6efcdaf8df93b9c9" eraa_initial_sg_token="MDAwMDAwMDAtMDAwMC0wMDAwLTcwMDEtMDAwMDAwMDAwMDAyqL0euoruRdGsh3Q8QdTamyl1VnBpIUjDlXLs2XNNYlcmCMpnkUykRTQjmk9RCgxZ8ayzbQ==" eraa_enable_telemetry="0" arch=$(uname -m) if $(echo "$arch" | grep -E "^(x86_64|amd64)$" 2>&1 > /dev/null) then eraa_installer_url="hxxp://repository.eset.com/v1/com/eset/apps/business/era/agent/v7/7.0.447.0/agent_macosx_x86_64.dmg" eraa_installer_checksum="c0ee6644e43b894045c19d9c6efcdaf8df93b9c9" fi if test -z $eraa_installer_url then echo "No installer available for '$arch' arhitecture. Sorry :/" exit 1 fi local_params_file="/tmp/postflight.plist" echo "$local_params_file" >> "$files2del" echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>" >> "$local_params_file" echo "<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"hxxp://www.apple.com/DTDs/PropertyList-1.0.dtd\">" >> "$local_params_file" echo "<plist version=\"1.0\">" >> "$local_params_file" echo "<dict>" >> "$local_params_file" echo " <key>Hostname</key><string>$eraa_server_hostname</string>" >> "$local_params_file" echo " <key>SendTelemetry</key><string>$eraa_enable_telemetry</string>" >> "$local_params_file" echo " <key>Port</key><string>$eraa_server_port</string>" >> "$local_params_file" if test -n "$eraa_peer_cert_pwd" then echo " <key>PeerCertPassword</key><string>$eraa_peer_cert_pwd</string>" >> "$local_params_file" echo " <key>PeerCertPasswordIsBase64</key><string>yes</string>" >> "$local_params_file" fi echo " <key>PeerCertContent</key><string>$eraa_peer_cert_b64</string>" >> "$local_params_file" if test -n "$eraa_ca_cert_b64" then echo " <key>CertAuthContent</key><string>$eraa_ca_cert_b64</string>" >> "$local_params_file" fi if test -n "$eraa_product_uuid" then echo " <key>ProductGuid</key><string>$eraa_product_uuid</string>" >> "$local_params_file" fi if test -n "$eraa_initial_sg_token" then echo " <key>InitialStaticGroup</key><string>$eraa_initial_sg_token</string>" >> "$local_params_file" fi echo "</dict>" >> "$local_params_file" echo "</plist>" >> "$local_params_file" # optional list of G1 migration parameters (MAC, UUID, LSID) local_migration_list="$(mktemp -q /tmp/XXXXXXXX.migration)" tee "$local_migration_list" 2>&1 > /dev/null << __LOCAL_MIGRATION_LIST__ __LOCAL_MIGRATION_LIST__ test $? = 0 && echo "$local_migration_list" >> "$files2del" # get all local MAC addresses (normalized) for mac in $(ifconfig -a | grep ether | sed -e "s/^[[:space:]]ether[[:space:]]//g") do macs="$macs $(echo $mac | sed 's/\://g' | awk '{print toupper($0)}')" done while read line do if test -n "$macs" -a -n "$line" then mac=$(echo $line | awk '{print $1}') uuid=$(echo $line | awk '{print $2}') lsid=$(echo $line | awk '{print $3}') if $(echo "$macs" | grep "$mac" > /dev/null) then if test -n "$mac" -a -n "$uuid" -a -n "$lsid" then /usr/libexec/PlistBuddy -c "Add :ProductGuid string $uuid" "$local_params_file" /usr/libexec/PlistBuddy -c "Add :LogSequenceID integer $lsid" "$local_params_file" break fi fi fi done < "$local_migration_list" local_dmg="$(mktemp -q -u /tmp/EraAgentOnlineInstaller.dmg.XXXXXXXX)" echo "Downloading installer image '$eraa_installer_url':" eraa_http_proxy_value="" if test -n "$eraa_http_proxy_value" then export use_proxy=yes export http_proxy="$eraa_http_proxy_value" (curl --connect-timeout 300 --insecure -o "$local_dmg" "$eraa_installer_url" || curl --connect-timeout 300 --noproxy "*" --insecure -o "$local_dmg" "$eraa_installer_url") && echo "$local_dmg" >> "$files2del" else curl --connect-timeout 300 --insecure -o "$local_dmg" "$eraa_installer_url" && echo "$local_dmg" >> "$files2del" fi os_version=$(system_profiler SPSoftwareDataType | grep "System Version" | awk '{print $6}' | sed "s:.[[:digit:]]*.$::g") if test "10.7" = "$os_version" then local_sha1="$(mktemp -q -u /tmp/EraAgentOnlineInstaller.sha1.XXXXXXXX)" echo "$eraa_installer_checksum $local_dmg" > "$local_sha1" && echo "$local_sha1" >> "$files2del" /bin/echo -n "Checking integrity of of downloaded package " && shasum -c "$local_sha1" else /bin/echo -n "Checking integrity of of downloaded package " && echo "$eraa_installer_checksum $local_dmg" | shasum -c fi local_mount="$(mktemp -q -d /tmp/EraAgentOnlineInstaller.mount.XXXXXXXX)" && echo "$local_mount" | tee "$dirs2del" >> "$dirs2umount" echo "Mounting image '$local_dmg':" && sudo -S hdiutil attach "$local_dmg" -mountpoint "$local_mount" -nobrowse local_pkg="$(ls "$local_mount" | grep "\.pkg$" | head -n 1)" echo "Installing package '$local_mount/$local_pkg':" && sudo -S installer -pkg "$local_mount/$local_pkg" -target /
  2. Hello everyone, We are using ESET for like around 5 years, and we were a small organization. Recently we upgraded our License, and It came with ESET Cloud Administrator (https://eca.eset.com). It was great to create "Live Installers" and install it on the users computers, it gave us very good insight. Now we grow a lot, 99% of our devices are Mac, so we moved to MDM Solution to manage the devices. and ESET installation was an issue. The "Live installer" failed because it's "non-flat" pkg file, as we were told by the MDM support. sudo installer -pkg epi_mac_live_installer.pkg -target / gave us: installer: Package name is ESET Endpoint Solutions installer: Installing at base path / installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) We used brew to install ESET Endpoint Security, and activated the license using. ./esets_daemon --wait-respond --activate key=XXXX-XXXX-XXXX-XXXX-XXXX The Anti-Virus + Firewall worked perfectly, but we lost the Agent. All of the search i did led me to : Agent Deployment on ECA support (Live Installer) OR (GPO SCCM Script), and as Live Installer doesn't work via terminal (only for Windows) The Guide here is just if i have my own ESET Remote Administrator server, and we don't have a Windows Server, or ERA server. What i am looking for: Keep using ECA (ESET Cloud Administrator Deploy Agents to they connect to ESET Cloud Administrator) What do you recommend in this case? All the best
  • Create New...