Computer Associates eTrust Antivirus

Version: 8
Views: 2.8k  |  Created: 05/23/2006

Average Rating: 0
eTrust Antivirus has 1 inventory records, 0 Questions, 0 Blogs and 0 links. Please help add to this by sharing more!

Deployment Tips (7)

Most Common Setup Type
Not Determined
Average Package Difficulty Rating
Rated 0 / 5 (Not Rated) based on 0 ratings
Most Commonly Reported Deployment Method
Not Determined
or cancel
121
Note
You can install eTrust AV / ITM without ORCA if you use a modified ICF file.

Run the Remote Installer and create a ICF files with the settings you need for your environment.
The most important setting is the [PhoneHome] section.
You have to add the IP of your management server, without the client won't accept any policy or update from the server!

[PhoneHome]
ServerList=|127.0.0.1|SERVERIP|

You can also edit the [ContentUpdate] section and every other option just as you need it.

Save the modified ICF file. You will find it on the server in the folder \eTrustITM\InoRemote\Data


eTrust Client for x64 Windows:

We need
eTrust ITM.msi + 1033.mst (or any other language transfrom)
iGateway_42_win32_x64.msi

you find the files on the server in the folder \eTrustITM\InoRemote\Image.x64\Client


Create a installation batch script:

@echo off
msiexec /i "iGateway_42_win32_x64.msi" CMDLINE=ITM ADDLOCAL=iGateway,Spin /qb!
msiexec /i "eTrust ITM.msi" TRANSFORM=1033.mst PRODUCT=ITM INO_ICFFILE="\\server\inoc6.icf" /qb!


1. we have to install the iGateway with "iGateway and Spin".
2. we install eTrust ITM in english with our modified ICF


Reboot the client.
After that the discovery of the server will find the client, register the licence and push the updates.
The first initzialation could take some time - up to two hours.


That's working fine for us.
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
120
Note
Used the above information and added to it.

INODIST.INI does not looked like it is being used anymore - setting have been moved into the INOC6.ICF file.

The CA eTrust ITM Admin Server must be setup first in order to create an license.xml file to copy into your eTrust ITM Administrative share so that it can be "found".

Create the Administrative share (P:\CAeTrustITM8) by copying the following files:
1. All files from \Common\Bin\Win32\Client
2. INOC6.ICF, 1033_EN.EXE from \English\Bin\Win32
3. LICENSE.XML from the eTrust ITM Admin server.
Your license can be found at C:\Program Files\CA\SharedComponents\SubscriptionLicense
4. Replace iGateway_40_win32.msi with the downloaded version.
5. Replace DRVUPDI.EXE with the latest downloaded version.

Use Orca to edit the iGateway_40_win32 MSI
Property table
Set ADDLOCAL = iGateway,Spin
Set CMDLINE = ITM
Set INO_ICFFILE = P:\CAeTrustITM8\inoc6.icf
Set PRODUCT = ITM
Shortcuts table
Remove all shortcuts

Use Orca to edit the eTrust ITM MSI
Property table
Set AgreeToLicense = Yes
Set INO_ICFFILE = P:\CAeTrustITM8\inoc6.icf
Set PRODUCT = ITM
Shortcuts table
Remove all shortcuts

Modify INOC6.ICF for your environment:
environment
[Realtime]
bEnableAnimation=0
bRTAboutBox=0
[Alert]
Host=itmadminserver
[NameClient]
ServerList=itmadminserver
[Miscellaneous]
StartServiceAfterSetup=0
StartServicesOnReboot=1
[InstallComponent]
CommonClient=1
eAVClientGUI=1
KeepOldSettingIfAny=0
WebAccess=1
Reboot=0
[PostAction]
App1=50comupd /q:a
AppDir1=.
App2=1033_en.exe
AppDir2=.
App3=drvupdi /s
AppDir3=.
[ContentUpdate]
Server=itmadminserver
ServerPort=42511
Protocol=2
[License]
HostServer=itmadminserver


Silent Install
msiexec /I "iGateway_40_win32.msi" /qb
msiexec /I "eTrust ITM.msi" /qb
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
120
Note
Another way to install Etrust 8.1 without using Orca-
I installed the remote installer onto our AV management server. I only installed files for x86 clients. From there, I copied the files in the c:\Program Files\CA\eTrustITM\InoRemote\Image\Client folder onto our network install share. There should be the 1033.mst and iGateway.mst files there. If not, these might be created when one remote install is performed. Also you need to copy the 1033_en.exe file, which I found in c:\Program Files\CA\eTrustITM\InoRemote\Lang\English. You can also update the drvupdi.exe file, the link is at http://supportconnectw.ca.com/public/antivirus/downloads/ildrvupdate.asp .
You also need the inoc6.inf file, which you can GUI configure using the remote installer or by hand. There are a few things to check for (thanks to the prior posts for pointing me in the right direction):
Under [InstallComponent]-
Reboot=2 (Causes the OS to reboot after the installation completes)
ShowSaveSettingDialog=0
InoPop3=1 (If you use POP3 like we do)
Under [License]-
HostServer=<your AV management server here>
Under [PostAction]-
App1=50comupd /q:a
AppDir1=. (The dots point the installer to the folder the msi is in)
App2=1033_en.exe
AppDir2=.
App3=drvupdi /s
AppDir3=.
App4=
AppDir4=

Now that the hard stuff is done, create a new GPO. Add a new package. Select the iGateway msi and pick "Advanced" on the next window. If you don't choose "Advanced", you cannot add the mst file to the GPO. Go to the modifications tab and add the iGateway.mst file. Click OK. Next add a new package for the eTrust_ITM msi and add the 1033.mst file to the modifications tab. You must add the msi files in this order or the install will 'succeed', but nothing will work.

You can use this to migrate to a GPO based ETrust installation. It installed on top of manually installed Etrust 7.x and 8.0 with no problems.
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
119
Note
CA provide an MSI for eTrust 8 but if you try to run it unmodified it just fails with a message that it can only be installed through setup.exe. Use the following procedure to install via group policy:

1. Copy the install files off the CD to a network share. There is an updated version of the iGateway component that you should download and use to replace the iGateway_40_win32.msi off the CD: http://supportconnectw.ca.com/public/ca_common_docs/igatewaypatch_index.asp

2. Setup the inoc6.icf and inodist.ini files for the install options and distribution points that you want. Ensure that the icf file contains the following under the [InstallComponent] head:

CommonClient=1
eAVClientGUI=1
KeepOldSettingIfAny=0

3. Using an MSI editor (I used the free Orca and Msitran from the Windows SDK) create an MST for iGateway_40_win32.msi, containing the following added setup properties
INO_ICFFILE [icf file including full path]
PRODUCT ITM
ADDLOCAL iGateway,Spin
CMDLINE ITM

4. create an MST for eTrust ITM.msi, and modify the values for the following already existing setup properties
INO_ICFFILE [icf file including full path]
PRODUCT ITM

Create packages for iGateway_40_win32.msi and eTrust ITM.msi with iGateway_40_win32.mst and eTrust ITM.mst as modifications. You must create the packages in that order so that they install in that order.
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
5
Command Line
Adding to the discussion in the Notes section...

v8.1 supports the following commands:

install.exe /s [INO_ICFFILE=full_path_to_your_ICF_file]

This will perform a silent install without messing around with MSI or MST files. The switch in brackets is optional. If you didn't edit the default .ICF file (English\Bin\inoc6.icf), then don't include it in your command line.

Install.exe is found in the folder:

[YourLanguage]\Bin\Win32 (for Windows 32)
[YourLanguage]\Bin\eAV.x64 (for Windows 64)

You can find this info on your intallation CD in the documentation file:

AV_Imp_ENU.pdf

Also, if you, like us, just purchased a license for the Anti-virus module and you still want to use the MSI files for your install, then use the switch PRODUCT=eAV instead of PRODUCT=ITM with the msiexec command. eAV will install the anti-virus module only. ITM will install both anti-virus and Pest Patrol modules. These are the command lines I used:

msiexec /i "[my_path]\iGateway_42_win32.msi" CMDLINE=ITM ADDLOCAL=iGateway,Spin /qb

msiexec /i "[my_path]\eTrust ITM.msi" TRANSFORMS="[my_path]\1033.MST" PRODUCT=eAV INO_ICFFILE="[my_path]\my_icf_file.icf" /qb

Reminder: If you didn't edit the default ICF (inoc6.icf) do not include the INO_ICFFILE switch.

If your language is other than English US, you must use the correct ####.MST file. For Example, for Spanish use 1034.MST.
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
1
Note
You can force 'Download updates now' by running the command:

"C:\Program Files\CA\SharedComponents\ScanEngine\inodist.exe" /cfg "C:\Program Files\CA\eTrustITM\InoDist.ini"
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment
0
Virtualization
We have virtualized our main etrust server with no problems.
Environment:

VMware ESX 3.5
1 - Main etrust sever (virtualized)
30 - Domain Controllers / 27 are redistribution servers
(all physical machines)
Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows
Please log in to comment

Inventory Records (1)

View inventory records anonymously contributed by opt-in users of the K1000 Systems Management Appliance.

Versions

eTrust Antivirus

Version

8

Questions & Answers (0)

Questions & Answers related to Computer Associates eTrust Antivirus

Blogs (0)

Blog posts related to Computer Associates eTrust Antivirus

Reviews (0)

Reviews related to Computer Associates eTrust Antivirus