You should begin the installation of Symantec ESM components by starting the Symantec ESM Suite Installer. The Suite Installer lets you install all the ESM components. However, you can select the components that you want to install from the Custom Setup panel of the install wizard. The Symantec ESM Suite Installer installs the components in the order in which they are listed on the Custom Setup panel.
37 Installing Symantec ESM managers and agents on Windows
You cannot install the ESM 9.0.1 console or the ESM 9.0.1 manager if you do not have ESM 9.0 installed on your computer.
You must be a built-in administrator on the computer to install ESM console on Windows Vista. You also have to have write access on the esm.mdb file to launch the console. If you do not have write permissions on the esm.mdb file, then an administrator must grant you the write permission.
Note:An ESM 9.0.1 manager is compatible only with an ESM 9.0.1 console. ESM 9.0.1 manager is compatible with ESM 6.0 or later agents.
To install the console, the manager, and the agent by using the ESM Suite Installer
1
Log on to the computer on which you want to install the Symantec ESM as an administrator. Alternatively, use a role that is equivalent to anadministrator.
2
Insert the product disc into the drive.3
Go to ESMInstaller\ESMSetupSuite and run the setup.exe.4
On the prompt that informs you about the upgrade, click Yes.5
In the Resuming the Setup Wizard panel, click Next.6
In the License Agreement panel, click I accept the terms in the licenseagreement, and then click Next.
7
In the Superuser Account Credentials panel, enter the credentials for the ESM manager account, and then click Next.The superuser credentials that you provide for ESM 9.0.1 must be the same as the credentials of the ESM 9.0 superuser account.
8
In the Disclaimer Option panel, enter a password for the Disclaimer.rtf file, and then click Next.The Disclaimer Option panel is displayed only if you have created and saved the Disclaimer.rt file in the console install directory.
9
In the Setup Wizard Completed panel, click Finish. See“Configuring and editing the disclaimer”on page 35.Silently installing the console, the manager, and the agent
You can use Symantec ESM command-line options to perform a silent installation of the ESM components. The command-line options let you install the ESM console, the manager, and the agent on local computers without any prompts for user inputs.
Installing Symantec ESM managers and agents on Windows
Installing the ESM components by using the ESM Suite Installer
To silently install the console, the manager, and the agent
1
Log on as administrator to the computer on which you want to install the console, the manager, and the agent. Alternatively, use a role that is equivalent to an administrator.2
Copy the ESMSetupSuite folder and the Documentation folder from the product disc to a network installation folder or to a local folder.3
Copy the Manager&ConsoleSilentInstallSample.bat file from the Examples folder in the product disc. Save the Manager&ConsoleSilentInstallSample.bat file in the local folder where you have saved the ESMSetupSuite folder.4
Right-click the Manager&ConsoleSilentInstallSample.bat file, and then clickEdit.
5
Specify the parameters of <COMMANDLINE>.Table 3-6lists the command-line options to silently install the ESM console, the manager, and the agent.
Table 3-6 Command-line options to silently install the ESM console, the manager, and the agent
Description Option
Perform the installation in silent mode. /s
<COMMAND LINE> is the parameter to pass on to the ESM installer.
/v"<COMMAND LINE>"
Perform the installation without GUI. /qn
Use the most verbose logging and write the output to the specified log file.
Log on to www.microsoft.com for more log options.
/l*v <LOG FILE>
Log errors only. /le <LOG FILE>
Specify the directory where you want to install the ESM console, manager, and the console.
INSTALLDIR=<DIRECTORY>
Install ESM console, manager, and the console.
ADDLOCAL=ESMManager
Set the installation mode. EXECUTEACTION=INSTALL
39 Installing Symantec ESM managers and agents on Windows
Table 3-6 Command-line options to silently install the ESM console, the manager, and the agent (continued)
Description Option
Specify the Superuser Password. A Superuser Account ‘ESM’ is created with administrative privileges for the ESM manager.
The password must fulfill the following criteria:
■ The password must contain at least six characters.
■ The password must contain at least one non-alphabetical character.
■ The password must not contain the following special characters: space, tab - | & ; ( ) < > PASSWORD=<PASSWORD>
List of managers to which you want to register the agent.
‘mgr spec’ has the following comma-delimited list of information:
■ Manager name
■ Logon name
■ Logon password REGAGENTLIST=[{mgr spec 1},{mgr spec
2},...{mgr spec n}]
Specify the type of LiveUpdate
(1 - disable, 2 - enable from all managers, 3 - enable from selected managers)
LURADIOGROUP=2
Comma-delimited list of managers to allow LiveUpdate for the agents.
This option is ignored unless LURADIOGROUP is 3. LUALLOWEDMGRS=mgr1,mgr2,...,mgrn
This property is ignored if you upgrade ESM console from a previous version.
EDITCONSOLEUSERNAME=ESM
Retain the ESM console user account credentials from the previous version. EDITCONSOLEPASSWORD=<password>
Installing Symantec ESM managers and agents on Windows
Installing the ESM components by using the ESM Suite Installer
Table 3-6 Command-line options to silently install the ESM console, the manager, and the agent (continued)
Description Option
Set the value to 1 if you want to install the Symantec LiveUpdate server and register ESM to the LiveUpdate server.
Set the value to 0 if you do not want to install the Symantec LiveUpdate server.
CHECKBOXINSTALLLIVEUPDATE=1
For example,
setup.exe /s /v"/qn /l*v
\"%TEMP%\SymantecESMManagerConsoleInstall.log\"
INSTALLDIR=\"C:\Program Files\Symantec\Enterprise Security Manager\" EXECUTEACTION=INSTALL EDITMANAGERUSERNAME=ESM PASSWORD=esm4now REGAGENTLIST=[{dev-imr50-2,esm,esm4now,1,default,5600}] LURADIOGROUP=2 LUALLOWEDMGRS=dev-imr50-2 EDITCONSOLEUSERNAME=ESM
EDITCONSOLEPASSWORD=esm4now CHECKBOXINSTALLLIVEUPDATE=1 REINSTALL=ALL"