Not able to install ESET Security Management Center Server Installer

[Martin25B93 1]

Hi. I started today install ESET Security Management Center Server Installer. I downloaded script from eset website and try to run: 

sudo ./server-linux-x86_64.sh \
--skip-license \
--db-driver=MySQL \
--db-hostname=127.0.0.1 \
--db-port=3306 \
--db-admin-username=root \
--db-admin-password=password \
--server-root-password=password \
--db-user-username=root \
--db-user-password=password \
--cert-hostname="*"

Extracting archive, please wait...

Archive extracted to /tmp/tmp.5FkwOVyao4.

Checking OpenSSL ... done [OpenSSL 1.0.2n 7 Dec 2017]

Reading previous installation settings ... failure

Checking installed version... done

Status of current installation is: NEW

Checking database connection ... failure

Error: User login failed (invalid credentials provided)

--- I have few questions -> 

-> is main root db MYSQL admin? -> db-admin-username=root 
-> Password for db MYSQL admin? ->db-admin-password=password
 server-root-password=password -> password in to webconsole
 db-user-username=root -> Must be same as like db MYSQL admin?
 db-user-password=password -> password
--cert-hostname="*"

Thank you very much  

 

[MartinK 378]

When installing ESMC, following credentials are required:

• password for to-be-created ESMC user "Administrator" ( --server-root-password)
• credentials of DB administrator, i.e. DB user that has permissions to create database and create new user if required ( --db-admin-username , --db-admin-password )
• DB user to be used by ESMC service to connect to database ( --db-user-username , --db-user-password ). This user can be the same as administrator, but I would not recommend that. In case provided user does not exists, it should be automatically created using DB administrator account -> created user will be granted permissions required for ESMC operations and it will be limited to ESMC database.

[Martin25B93 1]

Hi. Perfect :) Now, I have problem with installation ESET Agent. Here is installation error:

ESET Management Agent Installer (version: 7.1.367.0), Copyright © 1992-2019 ESET, spol. s r.o. - All rights reserved.

Creating directories...
Creating 'install' directory path: /opt/eset/RemoteAdministrator/Agent
Creating 'config' directory path: /etc/opt/eset/RemoteAdministrator/Agent
Creating 'data' directory path: /var/opt/eset/RemoteAdministrator/Agent
Creating 'Pki Cache' directory path: /var/opt/eset/RemoteAdministrator/Agent/pki.eset.com/
Creating 'logs' directory path: /var/log/eset/RemoteAdministrator/Agent
Creating 'libs' directory path: /opt/eset/RemoteAdministrator/Agent
Directories created
The archive will be extracted to: /opt/eset/RemoteAdministrator/Agent
Extracting, please wait...
Checking OpenSSL ... done [OpenSSL 1.0.2n 7 Dec 2017]
Checking installed version ...
Status of current installation is: NEW
New connection settings are 'hostname': '192.168.3.247', 'port': 2222
Getting certificate from server...
It is not possible to authorize to ESET Security Management Center Server with provided credentials.
Cleaning up setup directories


Thank you for advices

[Martin25B93 1]

Here is ESETAgent installer log:

 

2019-11-15 11:33:26 Information: Installer: *******************************************
2019-11-15 11:33:26 Information: Installer: Initialized log file: /var/log/eset/RemoteAdministrator/EraAgentInstaller.log
2019-11-15 11:33:26 Information: Installer: Creating directories...
2019-11-15 11:33:26 Information: Installer: Creating 'install' directory path: /opt/eset/RemoteAdministrator/Agent
2019-11-15 11:33:26 Information: Installer: Creating 'config' directory path: /etc/opt/eset/RemoteAdministrator/Agent
2019-11-15 11:33:26 Information: Installer: Creating 'data' directory path: /var/opt/eset/RemoteAdministrator/Agent
2019-11-15 11:33:26 Information: Installer: Creating 'Pki Cache' directory path: /var/opt/eset/RemoteAdministrator/Agent/pki.eset.com/
2019-11-15 11:33:26 Information: Installer: Creating 'logs' directory path: /var/log/eset/RemoteAdministrator/Agent
2019-11-15 11:33:26 Information: Installer: Creating 'libs' directory path: /opt/eset/RemoteAdministrator/Agent
2019-11-15 11:33:26 Information: Installer: Directories created
2019-11-15 11:33:26 Information: Installer: The archive will be extracted to: /opt/eset/RemoteAdministrator/Agent
2019-11-15 11:33:26 Information: Installer: Extracting, please wait...
2019-11-15 11:33:27 Information: Installer: Checking OpenSSL ...
2019-11-15 11:33:27 Information: DepCheckOpenSSL: Action invoked with:  --ca-password ********** --cert-auth-content ********** --cert-auth-path "" --cert-auth-temp-path "" --cert-content ********** --cert-password ********** --cert-password-is-base64 ********** -$
2019-11-15 11:33:27 Information: DepCheckOpenSSL: Set output property: P_OPENSSL_VERSION = OpenSSL 1.0.2n  7 Dec 2017
2019-11-15 11:33:27 Information: DepCheckOpenSSL: Return code: 0
2019-11-15 11:33:27 Information: Installer: Found: OpenSSL 1.0.2n 7 Dec 2017
2019-11-15 11:33:27 Information: Installer: Checking installed version ...
2019-11-15 11:33:27 Information: CheckVersion: Action invoked with:  --ca-password ********** --cert-auth-content ********** --cert-auth-path "" --cert-auth-temp-path "" --cert-content ********** --cert-password ********** --cert-password-is-base64 ********** --ce$
2019-11-15 11:33:27 Information: Product is not installed
2019-11-15 11:33:27 Information: CheckVersion: Set output property: P_VERSION_STATUS = NEW
2019-11-15 11:33:27 Information: CheckVersion: Return code: 0
2019-11-15 11:33:27 Information: Installer: Status of current installation is: NEW
2019-11-15 11:33:27 Information: Installer: New connection settings are 'hostname': '192.168.3.247', 'port': 2222
2019-11-15 11:33:27 Information: Installer: Getting certificate from server...
2019-11-15 11:33:27 Information: GetServerCertificate: Action invoked with:  --ca-password ********** --cert-auth-content ********** --cert-auth-path "" --cert-auth-temp-path /opt/eset/RemoteAdministrator/Agent/setup/ca.der --cert-content ********** --cert-passwor$
2019-11-15 11:33:27 Information: GetServerCertificate: Set output property: P_CERT_SUBJECT = CN=Server at *;C=US;
2019-11-15 11:33:27 Information: GetServerCertificate: Set output property: P_CERT_ISSUER = CN=Server Certification Authority;C=US;
2019-11-15 11:33:27 Information: GetServerCertificate: Set output property: P_CERT_SERIAL = 01235be71b8223455682dd865b8af1e88401
2019-11-15 11:33:27 Information: GetServerCertificate: Set output property: P_CERT_HASH = 7c:77:df:a9:93:57:2d:39:69:08:67:76:f8:f3:51:0f:b5:31:38:f4
2019-11-15 11:33:27 Information: GetServerCertificate: Set output property: P_SERVER_CONNECTION_STATUS = AUTHORIZE_ERROR
2019-11-15 11:33:27 Information: GetCertificatesFromServer: Following error occurred while trying to get certificates from server: Unable to convert response JSON to message. Error is ConvertProtobufStringToProtobufObject failed with: map::at. Request JSON is: Una$
2019-11-15 11:33:27 Information: CServerAccess: Unloading server API library....
2019-11-15 11:33:27 Information: GetServerCertificate: Return code: 0
2019-11-15 11:33:27 Information: Installer: It is not possible to authorize to ESET Security Management Center Server with provided credentials.
2019-11-15 11:33:27 Information: Installer: Cleaning up setup directories
2019-11-15 11:33:27 Information: Installer: Removing empty directory /etc/opt/eset/RemoteAdministrator/Agent
2019-11-15 11:33:27 Information: Installer: Removing empty directory /var/log/eset/RemoteAdministrator/Agent

 

[MartinK 378]

Please provide list of installer parameters you are using to deploy AGENT (only parameter names, no need for passwords or other sensitive details). From log it seems you are performing so called server-assisted installation, but probably with wrong hostname:port configuration, resulting in communication failure.

Also once ESMC is installed, you might use also live installer created in console to deploy AGENT, it has no parameters so it would be much simpler.

[Martin25B93 1]

Solved. I had OBDC version 5.3.13 After downgrade to 5.2.7. I was to able install Era ESET Agent Thank you very much