Install ESM Components
Table of Contents
4.2 (EoS)
Expand all | Collapse all
-
- Set Up the Endpoint Infrastructure
- Activate Traps Licenses
-
- Endpoint Infrastructure Installation Considerations
- TLS/SSL Encryption for Traps Components
- Configure the MS-SQL Server Database
- Install the Endpoint Security Manager Server Software
- Install the Endpoint Security Manager Console Software
- Manage Proxy Communication with the Endpoint Security Manager
- Load Balance Traffic to ESM Servers
-
- Malware Protection Policy Best Practices
- Malware Protection Flow
- Manage Trusted Signers
-
- Remove an Endpoint from the Health Page
- Install an End-of-Life Traps Agent Version
-
-
- Traps Troubleshooting Resources
- Traps and Endpoint Security Manager Processes
- ESM Tech Support File
-
- Access Cytool
- View the Status of the Agent Using Cytool
- View Processes Currently Protected by Traps Using Cytool
- Manage Logging of Traps Components Using Cytool
- Restore a Quarantined File Using Cytool
- View Statistics for a Protected Process Using Cytool
- View Details About the Traps Local Analysis Module Using Cy...
- View Hash Details About a File Using Cytool
Install ESM Components
Use the following workflow to install ESM
components (ESM Server and ESM Console) using Msiexec.
- Open a command prompt as an administrator:
- Select StartAll ProgramsAccessories. Right-click Command prompt, and then Run as administrator.
- Select Start. In the Start Search box, type cmd. Then, to open the command prompt as an administrator, press CTRL+SHIFT+ENTER.
- Run the msiexec command followed
by one or more of the following options or properties:Although Msiexec supports additional options, ESM installers support only the options listed here.
- Install, display, and logging options:
- /i <installpath>\<installerfilename>.msi—Install a package. For example, msiexec /i c:\install\traps.msi.
- /l*v <logpath>\<logfilename>.txt—Log verbose output to a file. For example, /l*v c:\logs\install.txt.
- /qn—Displays no user interface (quiet installation). At minimum, you must also specify the host server name or IP address using the CYVERA_SERVER property.
For a full list of Msiexec parameters, see https://msdn.microsoft.com/en-us/library/windows/desktop/aa367988(v=vs.85).aspx - Public properties:
- CYVERA_SERVER=<servername>—Primary host server name or IP address (default is ESMserver)
- CYVERA_SERVER_PORT=<serverport>—Primary host server port (default is 2125)
- USE_SSL_PRIMARY=[0|1]—(Quiet installation only) Set encryption preferences on the primary server by specifying 0 to not use SSL (not recommended) or 1 to use SSL (default)
- CYVERAESCFOLDER=”<installationfolder>”—If you are installing the ESM component for the first time, this option changes the installation folder from the default to the specified folder. If you later upgrade the ESM component using Msiexec, you must use this option to specify the location in which the installer should look for the install directory. For example, CYVERAESCFOLDER="D:\Program Files\Palo Alto Networks\Endpoint Security Manager\".
For example, to install Traps without a user interface, specify a server named TrapsServer that does not use SSL encryption on a port other than the default (for example on port 5212, a non-standard port), and create an installation log in C:\temp, enter the following:msiexec /i c:\install\traps.msi /l*v C:\temp\trapsinstall.log /qn CYVERA_SERVER=TrapsServer CYVERA_SERVER_PORT=5212 USE_SSL_PRIMARY=0We recommend that you restart the device after completing the installation.