Eset Management SSL Wildcard certificate

[AhmedDeban 1]

Dear Brothers ,

We need to do update the signed certificate to custom certificate for Eset Management agent: ports 2222,2223  as the below image , But while insert the ssl certificate all Endpoints does not replicate to the server , the Clients connected to old self signed certificate how to update the clients with the a new custom SSL Certificate to show up online and connected ?

 

[Marcos 5,250]

Please read https://support.eset.com/en/kb8051 for step-by-step instructions.

[AhmedDeban 1]

On 9/12/2024 at 5:08 PM, Marcos said:

Please read https://support.eset.com/en/kb8051 for step-by-step instructions.

Hi @Marcos I tried to create a new ESET management policy and change the certificate , but the clients not updating the new certificate and are not showing  online in ESET protect server  , How to verify if the clients get a new certificate ? 

[Marcos 5,250]

Please check C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html  and trace.log for possible errors. You can upload the logs here, attachments are available only to ESET staff.

[AhmedDeban 1]

21 hours ago, Marcos said:

Please check C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html  and trace.log for possible errors. You can upload the logs here, attachments are available only to ESET staff.

Thanks for your reply if the logs status error with the Peer certificate  

 

is invalid now (NodVerifyTrustResult: 42, NVT_NotTrusted, X509ChainStatus: 0x10000, X509CSF_PartialChain)

Peer certificate may be valid but can not be verified on this machineCheck time validity, revocation and presence of issuing certification authority

 

So How to update the certificate for the Endpoints ? as we can't do both tasks and update the policy . As the endpoint not replicate ? 

[Marcos 5,250]

Please raise a support ticket. Basically if a machine is no longer connecting to the ESET PROTECT server, the agent will need to be reinstalled/re-deployed using current certificates and server settings.