Some can ask you why you would install ESET Antivirus Server on a Linux. We at NVKO are saying: "Why not !!??".

And additionnaly it will avoid to pay an additionnal license for a Windows Server

Database installation

MariaDB is not supported, and it is highly recommended to not install a very higher than 5.7. Unfortunately on a fresh Debian 9.8 install apt package system provides a 5.5.9999 version, which is inh fact a MariaDB currently in 10.1.

So, first we need to configure the APT environment to get sources from the good repository. Download the .deb package from this official url:

https://dev.mysql.com/get/mysql-apt-config_0.8.13-1_all.deb

Then install and run it (select the mysql-5.7 version from the menu during the installation to match the ESET per-requisites):

dpkg -i mysql-apt-config_0.8.13-1_all.deb

You can now update the package list and install the correct MySQL version. Obviously, you will be prompted for settings Database root password.

apt update
apt install mysql-server -y

Edit the global MySQL configuration file (/etc/mysql/mysql/conf.d/mysqld.cnf) and add the following line:

max_allowed_packet=33M
innodb_log_file_size=100M

Restart the MySQL process to apply modification

service mysql restart

Download Standalone components

Follow this link, and download 3 components for Debian 64bits OS type:

  • Agent (.sh file)
  • Server (.sh file)
  • Web-Console (.war file)

Now install the needed packages to be sure that the installer will work properly.

apt install xvfb cifs-utils libqtwebkit4 krb5-user winbind ldap-utils  libsasl2-modules-gssapi-mit snmp selinux-policy-dev samba unixodbc -y

Make the installation package executable:

chmod +x server-linux-x86_64.sh

ODBC installation and configuration

libmyodbc package is needed in order to install ODBC, but it has been removed from the official repository. So, download a separate package from the official site here, and install it:

# Uncompress files
tar xvzf mysql-connector-odbc-5.3.13-linux-glibc2.12-x86-64bit.tar.gz

# Copy binaries and libraries
cp mysql-connector-odbc-5.3.13-linux-glibc2.12-x86-64bit/bin/* /usr/local/bin/
cp mysql-connector-odbc-5.3.13-linux-glibc2.12-x86-64bit/lib/* /usr/local/lib/

# Register the driver
myodbc-installer -a -d -n "MySQL" -t "Driver=/usr/local/lib/libmyodbc5w.so"

# Verify everything is working
myodbc-installer -d -l

Modify the odbcinst.ini file accordingly:

vim /etc/odbcinst.ini

[MySQL]
Description=ODBC for MySQL
Driver=/usr/local/lib/libmyodbc5w.so
Setup=/usr/lib/x86_64-linux-gnu/odbc/libodbcmyS.so
Fileusage=1

Finish by updating the configuration files that control ODBC

odbcinst -i -d -f /etc/odbcinst.ini

Installer can now be launched. If you have special characters in passwords field, think to escape them with a backslash.

./server-linux-x86_64.sh \
--skip-license \
--db-driver=MySQL \
--db-hostname=127.0.0.1 \
--db-port=3306 \
--db-admin-username=root \
--db-admin-password=STRONG_PASSWORD \
--server-root-password=STRONG_PASSWORD \
--db-user-username=root \
--db-user-password=STRONG_PASSWORD \
--cert-hostname="LOCAL_IP_ADDRESS;HOSTNAME;HOSTNAME.FQDN"

Install Tomcat and Java

Tomcat7 and OpenJDK 7 are specified in the documentation, but no more present in the official repositories. So, install version 8.

apt install tomcat8 openjdk-8-jdk

Web Console installation

Copy the war application to the webapps folder of the Tomcat installation.

cp era.war /var/lib/tomcat8/webapps/
service tomcat8 restart

You can now test the connection to the ERA Web Console by pointing your browser to:

http://IP_ADDRESS:8080/era

ERA login page

HTTPS can be enabled by following this official tutorial:

https://support.eset.com/kb3724/


Install ERA Agent

cd; chmod +x agent-linux-x86_64.sh

Now install the agent.

./agent-linux-x86_64.sh --skip-license --hostname=HOSTNAME --port=2222 --webconsole-hostname=HOSTNAME --webconsole-port=2223 --webconsole-user=administrator --webconsole-password=file:/tmp/eset-admin