Overview
Symantec Enterprise Security Manager™ (ESM) 6.5.3 agent, manager, console Update for Windows Server 2008 provides ESM 6.5.3 agent, manager, and console that are required to support ESM agent on Windows Server 2008.

This update provides the following:

• ESM Agent installers (32-bit, 64-bit) for Windows Server 2008
• ESM manager (Windows and UNIX) and Console executables to support the agent on Windows Server 2008 (applies to ESM 6.5.3, ESM 6.5.3 SP1, ESM 6.5.3 SP2)
• RenameAgentFolder utility to enable ESM to use the new naming convention for the folders, which contain the policy run data of the agents

Information on Updates downloaded before August 29, 2008

This section only applies to customers who downloaded the Symantec Enterprise Security Manager™ 6.5.3 Agent support on Windows Server 2008 Update before August 29, 2008.

Some customers experienced the following issues with the ESM manager:

• The scheduled policy runs get deleted.
• The summary data gets purged but the raw report files do not get purged even after setting the appropriate purge options on the manager.
• The ESM manager crash during a policy run.

• ESM 6.5.3 SP 1
• ESM 6.5.3 SP 2
• Windows 2008 support
• Fixes made to the July 2nd release of this Windows 2008 support patch
• Fixes for the job scheduling and raw report deletion defects mentioned above
• Additional fixes for defects created after the release of ESM 6.5.3 SP2

• The console hangs when applying the security update on the manager.

Symantec response
Symantec recommends that all the customers who have downloaded the patch prior to August 29, 2008 for Windows and Solaris manager, need to download the .zip files from the following locations.

ESM Windows Manager Update for Windows Server 2008 Agent Support
(Applies to ESM 6.5.3, ESM 6.5.3 SP1, ESM 6.5.3 SP2)

ESM Solaris Manager Update for Windows Server 2008 Agent Support
(Applies to ESM 6.5.3, ESM 6.5.3 SP1, ESM 6.5.3 SP2)

After you download the .zip file and extract the binaries, the new binaries are at the following location:

• <Relative path>\Symantec\653SP2\ESMUnixMgr\solaris-sparc\esmcifd
• <Relative path>\Symantec\653SP2\ESMWinMgr\windows\esmmanager.exe

1. Stop the ESM Manager service for Windows from the Service Control Manager.
2. Replace the old binary with the downloaded manager binary (esmmanager.exe).
3. Start the Manager service.

1. Stop the ESM Manager daemon by typing the following at the command:
   /esm/esmrc stop
2. Replace the old esmcifd (manager binary) with the new esmcifd that has been downloaded.
3. Start the ESM Manager by typing the following at the command:
   daemons /esm/esmrc start

ESM console download:
Symantec recommends that all the customers who have downloaded the console binary prior to July 2, 2008, need to download the binary from the following location:
ESM Console Update for Windows Server 2008 Agent Support
(Applies to ESM 6.5.3, ESM 6.5.3 SP1, ESM 6.5.3 SP2)

The ESM 6.5.3 agent downloads:
Symantec has released downloadable MSI installers (32-bit and 64-bit) to install the ESM 6.5.3 agent on Windows Server 2008.

Download ESM 6.5.3 agent for Windows Server 2008 (64-bit installer)

Download ESM 6.5.3 agent for Windows Server 2008 (32-bit installer)

The ESM agents are not affected by the problems associated with the patches and do not need any fix applied.