Bahr A

September 16, 2019

OK found a solution.

I've installed ERA, and got the Agent installer script for mac (below).
I went to ECA and got the Agent installer for Windows ( the .ini file)
replace:
- eraa_server_hostname with P_HOSTNAME
- eraa_server_port with P_PORT
- eraa_peer_cert_b64 with P_CERT_CONTENT

Deploy/run the sh ... and all good to go

Please correct me if i am wrong on this, or if there is a better way

ESET, you really need to support this via ESET Cloud Administrator.

#!/bin/sh -e
# ESET Security Management Center
# Copyright (c) 1992-2018 ESET, spol. s r.o. All Rights Reserved

files2del="$(mktemp -q /tmp/XXXXXXXX.files)"
dirs2del="$(mktemp -q /tmp/XXXXXXXX.dirs)"
echo "$dirs2del" >> "$files2del"
dirs2umount="$(mktemp -q /tmp/XXXXXXXX.mounts)"
echo "$dirs2umount" >> "$files2del"

finalize()
{
  set +e

  echo "Cleaning up:"

  if test -f "$dirs2umount"
  then
    while read f
    do
      sudo -S hdiutil detach "$f"
    done < "$dirs2umount"
  fi

  if test -f "$dirs2del"
  then
    while read f
    do
      test -d "$f" && rmdir "$f"
    done < "$dirs2del"
  fi

  if test -f "$files2del"
  then
    while read f
    do
      unlink "$f"
    done < "$files2del"
    unlink "$files2del"
  fi
}

trap 'finalize' HUP INT QUIT TERM EXIT

eraa_server_hostname="from_INI"
eraa_server_port="from_INI"
eraa_peer_cert_b64="from_INI"
eraa_peer_cert_pwd=""
eraa_ca_cert_b64=""
eraa_product_uuid=""

eraa_installer_url="hxxp://repository.eset.com/v1/com/eset/apps/business/era/agent/v7/7.0.447.0/agent_macosx_x86_64.dmg"
eraa_installer_checksum="c0ee6644e43b894045c19d9c6efcdaf8df93b9c9"
eraa_initial_sg_token="MDAwMDAwMDAtMDAwMC0wMDAwLTcwMDEtMDAwMDAwMDAwMDAyqL0euoruRdGsh3Q8QdTamyl1VnBpIUjDlXLs2XNNYlcmCMpnkUykRTQjmk9RCgxZ8ayzbQ=="
eraa_enable_telemetry="0"

arch=$(uname -m)
if $(echo "$arch" | grep -E "^(x86_64|amd64)$" 2>&1 > /dev/null)
then
    eraa_installer_url="hxxp://repository.eset.com/v1/com/eset/apps/business/era/agent/v7/7.0.447.0/agent_macosx_x86_64.dmg"
    eraa_installer_checksum="c0ee6644e43b894045c19d9c6efcdaf8df93b9c9"
fi

if test -z $eraa_installer_url
then
  echo "No installer available for '$arch' arhitecture. Sorry :/"
  exit 1
fi

local_params_file="/tmp/postflight.plist"
echo "$local_params_file" >> "$files2del"

echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>" >> "$local_params_file"
echo "<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"hxxp://www.apple.com/DTDs/PropertyList-1.0.dtd\">" >> "$local_params_file"
echo "<plist version=\"1.0\">" >> "$local_params_file"
echo "<dict>" >> "$local_params_file"

echo "  <key>Hostname</key><string>$eraa_server_hostname</string>" >> "$local_params_file"
echo "  <key>SendTelemetry</key><string>$eraa_enable_telemetry</string>" >> "$local_params_file"

echo "  <key>Port</key><string>$eraa_server_port</string>" >> "$local_params_file"

if test -n "$eraa_peer_cert_pwd"
then
  echo "  <key>PeerCertPassword</key><string>$eraa_peer_cert_pwd</string>" >> "$local_params_file"
  echo "  <key>PeerCertPasswordIsBase64</key><string>yes</string>" >> "$local_params_file"
fi

echo "  <key>PeerCertContent</key><string>$eraa_peer_cert_b64</string>" >> "$local_params_file"


if test -n "$eraa_ca_cert_b64"
then
  echo "  <key>CertAuthContent</key><string>$eraa_ca_cert_b64</string>" >> "$local_params_file"
fi
if test -n "$eraa_product_uuid"
then
  echo "  <key>ProductGuid</key><string>$eraa_product_uuid</string>" >> "$local_params_file"
fi
if test -n "$eraa_initial_sg_token"
then
  echo "  <key>InitialStaticGroup</key><string>$eraa_initial_sg_token</string>" >> "$local_params_file"
fi

echo "</dict>" >> "$local_params_file"
echo "</plist>" >> "$local_params_file"

# optional list of G1 migration parameters (MAC, UUID, LSID)
local_migration_list="$(mktemp -q /tmp/XXXXXXXX.migration)"
tee "$local_migration_list" 2>&1 > /dev/null << __LOCAL_MIGRATION_LIST__

__LOCAL_MIGRATION_LIST__
test $? = 0 && echo "$local_migration_list" >> "$files2del"

# get all local MAC addresses (normalized)
for mac in $(ifconfig -a | grep ether | sed -e "s/^[[:space:]]ether[[:space:]]//g")
do
    macs="$macs $(echo $mac | sed 's/\://g' | awk '{print toupper($0)}')"
done

while read line
do
  if test -n "$macs" -a -n "$line"
  then
    mac=$(echo $line | awk '{print $1}')
    uuid=$(echo $line | awk '{print $2}')
    lsid=$(echo $line | awk '{print $3}')
    if $(echo "$macs" | grep "$mac" > /dev/null)
    then
      if test -n "$mac" -a -n "$uuid" -a -n "$lsid"
      then
        /usr/libexec/PlistBuddy -c "Add :ProductGuid string $uuid" "$local_params_file"
        /usr/libexec/PlistBuddy -c "Add :LogSequenceID integer $lsid" "$local_params_file"
         break
      fi
    fi
  fi
done < "$local_migration_list"

local_dmg="$(mktemp -q -u /tmp/EraAgentOnlineInstaller.dmg.XXXXXXXX)"
echo "Downloading installer image '$eraa_installer_url':"

eraa_http_proxy_value=""
if test -n "$eraa_http_proxy_value"
then
  export use_proxy=yes
  export http_proxy="$eraa_http_proxy_value"
  (curl --connect-timeout 300 --insecure -o "$local_dmg" "$eraa_installer_url" || curl --connect-timeout 300 --noproxy "*" --insecure -o "$local_dmg" "$eraa_installer_url") && echo "$local_dmg" >> "$files2del"
else
  curl --connect-timeout 300 --insecure -o "$local_dmg" "$eraa_installer_url" && echo "$local_dmg" >> "$files2del"
fi

os_version=$(system_profiler SPSoftwareDataType | grep "System Version" | awk '{print $6}' | sed "s:.[[:digit:]]*.$::g")
if test "10.7" = "$os_version"
then
  local_sha1="$(mktemp -q -u /tmp/EraAgentOnlineInstaller.sha1.XXXXXXXX)"
  echo "$eraa_installer_checksum  $local_dmg" > "$local_sha1" && echo "$local_sha1" >> "$files2del"
  /bin/echo -n "Checking integrity of of downloaded package " && shasum -c "$local_sha1"
else
  /bin/echo -n "Checking integrity of of downloaded package " && echo "$eraa_installer_checksum  $local_dmg" | shasum -c
fi

local_mount="$(mktemp -q -d /tmp/EraAgentOnlineInstaller.mount.XXXXXXXX)" && echo "$local_mount" | tee "$dirs2del" >> "$dirs2umount"
echo "Mounting image '$local_dmg':" && sudo -S hdiutil attach "$local_dmg" -mountpoint "$local_mount" -nobrowse

local_pkg="$(ls "$local_mount" | grep "\.pkg$" | head -n 1)"

echo "Installing package '$local_mount/$local_pkg':" && sudo -S installer -pkg "$local_mount/$local_pkg" -target /

September 15, 2019

Hello everyone,

We are using ESET for like around 5 years, and we were a small organization. Recently we upgraded our License, and It came with ESET Cloud Administrator (https://eca.eset.com).

It was great to create "Live Installers" and install it on the users computers, it gave us very good insight.

Now we grow a lot, 99% of our devices are Mac, so we moved to MDM Solution to manage the devices. and ESET installation was an issue.

The "Live installer" failed because it's "non-flat" pkg file, as we were told by the MDM support.

sudo installer -pkg epi_mac_live_installer.pkg -target /

gave us:

installer: Package name is ESET Endpoint Solutions
installer: Installing at base path /
installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.)

We used brew to install ESET Endpoint Security, and activated the license using.

 ./esets_daemon --wait-respond --activate key=XXXX-XXXX-XXXX-XXXX-XXXX

The Anti-Virus + Firewall worked perfectly, but we lost the Agent.

All of the search i did led me to :

Agent Deployment on ECA support (Live Installer) OR (GPO SCCM Script), and as Live Installer doesn't work via terminal (only for Windows)
The Guide here is just if i have my own ESET Remote Administrator server, and we don't have a Windows Server, or ERA server.

What i am looking for:

Keep using ECA (ESET Cloud Administrator
Deploy Agents to they connect to ESET Cloud Administrator)

What do you recommend in this case?

All the best

Sign In

Bahr A

Posts

Joined

Last visited

Content Type

Forums

Downloads

Posts posted by Bahr A

Deploy Agent to Macs

Deploy Agent to Macs

Browse

Activity

My Activity Streams