Upgrading to a new release
|Article:HOWTO80759|||||Created: 2012-10-24|||||Updated: 2014-09-21|||||Article URL http://www.symantec.com/docs/HOWTO80759|
You can upgrade to the newest release of the product to take advantage of new features. To install a new version of the software, you must perform certain tasks to ensure a successful upgrade. You should also check the known issues that appear in the release notes for any late-breaking information relating to upgrades.
Before you upgrade, review the following information:
For the most current system requirements, see: Release Notes and System Requirements for all versions of Symantec Endpoint Protection and Symantec Network Access Control
New features in this version
Feature changes between the previous version and the newest version of the client, where applicable
Compatible Symantec Endpoint Protection Manager and Symantec Endpoint Protection client upgrade paths
This section is specific to upgrading the software in environments where a compatible version of the product is already installed.
If you upgrade from 11.0, remove any packages that are assigned to the client groups. Theoption on the 11.0 package causes the upgrade to remove all protection technologies from the clients.
For more information, see: Clients show "No Symantec protection technologies are installed" after migrating the SEPM from 11.x to 12.1
Table: Process for upgrading to the Symantec Endpoint Protection enterprise version displays the steps you need to perform to upgrade to the latest version of Symantec Endpoint Protection.
Table: Process for upgrading Symantec Network Access Control displays the steps you need to perform to upgrade to the latest version of Symantec Network Access Control.
Table: Process for upgrading to the Symantec Endpoint Protection enterprise version
Table: Process for upgrading Symantec Network Access Control
Back up the database
Back up the database that Symantec Endpoint Protection Manager uses to ensure the integrity of your client information.
Turn off replication
If you upgrade from a Symantec Endpoint Protection 11.0 network, turn off replication on all sites that are configured as replication partners. Any attempts to replicate the database between Symantec Endpoint Protection versions during the upgrade corrupts the database. Symantec Endpoint Protection 12.1 and later does not allow replication if the product versions do not match.
Enable local authentication
Enforcers are not able to authenticate clients during an upgrade. To avoid problems with client authentication, Symantec recommends that you enable local authentication before you upgrade. After the upgrade is finished, you can return to your previous authentication setting.
Stop the Symantec Endpoint Protection Manager service
You must stop the management server service before you install a newer version.
Upgrade the Symantec Endpoint Protection Manager software
Install the new version of Symantec Endpoint Protection Manager on all sites in your network. The existing version is detected automatically, and all settings are saved during the upgrade.
Turn on replication after the upgrade
Turn on replication when the installation is complete to restore your configuration.
Upgrade Symantec client software
Prepare then upgrade your client software to the latest version.
When Symantec provides updates to client installation packages, you add the updates to Symantec Endpoint Protection Manager and make them available for exporting. You do not, however, have to reinstall the client with client deployment tools. The easiest way to update Windows clients in groups with the latest software is to use AutoUpgrade. You should first update a group with a small number of test computers before you update your entire production network.
You can also update clients with LiveUpdate if you permit clients to run LiveUpdate and if the LiveUpdate Settings policy permits.
Article URL http://www.symantec.com/docs/HOWTO80759