Upgrading to a new release

Article:HOWTO80759  |  Created: 2012-10-24  |  Updated: 2014-09-21  |  Article URL http://www.symantec.com/docs/HOWTO80759
Article Type
How To


Subject


Upgrading to a new release

You can upgrade to the newest release of the product to take advantage of new features. To install a new version of the software, you must perform certain tasks to ensure a successful upgrade. You should also check the known issues that appear in the release notes for any late-breaking information relating to upgrades.

Before you upgrade, review the following information:

This section is specific to upgrading the software in environments where a compatible version of the product is already installed.

Note:

If you upgrade from 11.0, remove any packages that are assigned to the client groups. The Maintain existing client features when upgrading option on the 11.0 package causes the upgrade to remove all protection technologies from the clients.

For more information, see: Clients show "No Symantec protection technologies are installed" after migrating the SEPM from 11.x to 12.1

Table: Process for upgrading to the Symantec Endpoint Protection enterprise version displays the steps you need to perform to upgrade to the latest version of Symantec Endpoint Protection.

Table: Process for upgrading Symantec Network Access Control displays the steps you need to perform to upgrade to the latest version of Symantec Network Access Control.

Table: Process for upgrading to the Symantec Endpoint Protection enterprise version

Step

Action

Description

Step 1

Back up the database

Back up the database that Symantec Endpoint Protection Manager uses to ensure the integrity of your client information.

See Backing up the database and logs.

Step 2

Turn off replication

If you upgrade from a Symantec Endpoint Protection 11.0 network, turn off replication on all sites that are configured as replication partners. Any attempts to replicate the database between Symantec Endpoint Protection versions during the upgrade corrupts the database. Symantec Endpoint Protection 12.1 and later does not allow replication if the product versions do not match.

See Turning off replication before an upgrade from Symantec Endpoint Protection 11.0.

Step 3

Stop the Symantec Endpoint Protection Manager service

You must stop the management server service before you install a newer version.

See Stopping and starting the management server service.

Step 4

Upgrade the Symantec Endpoint Protection Manager software

Install the new version of Symantec Endpoint Protection Manager on all sites in your network. The existing version is detected automatically, and all settings are saved during the upgrade.

See Upgrading a management server.

Step 5

Turn on replication after the upgrade

Turn on replication when the installation is complete to restore your configuration.

See Turning on replication after an upgrade from Symantec Endpoint Protection 11.0.

Step 6

Upgrade Symantec client software

Prepare then upgrade your client software to the latest version. If you use Group Update Providers, they must be upgraded first.

See About upgrading client software.

See Upgrading Group Update Providers.

See Preparing for client installation.

When Symantec provides updates to client installation packages, you add the updates to Symantec Endpoint Protection Manager and make them available for exporting. You do not, however, have to reinstall the client with client deployment tools. The easiest way to update Windows clients in groups with the latest software is to use AutoUpgrade. You should first update a group with a small number of test computers before you update your entire production network.

See Upgrading Windows clients by using AutoUpgrade in Symantec Endpoint Protection.

You can also update clients with LiveUpdate if you permit clients to run LiveUpdate and if the LiveUpdate Settings policy permits.

See Updating client software with a LiveUpdate Settings policy.

Note:

If you upgrade from 11.0 and use Application and Device Control, you must disable the Application Control rule "Protect client files and registry keys." After the clients receive the new policy, you may upgrade the client computers.

See Creating a custom rule set and adding rules.

Table: Process for upgrading Symantec Network Access Control

Step

Action

Description

Step 1

Back up the database

Back up the database that Symantec Endpoint Protection Manager uses to ensure the integrity of your client information.

See Backing up the database and logs.

Step 2

Turn off replication

If you upgrade from a Symantec Endpoint Protection 11.0 network, turn off replication on all sites that are configured as replication partners. Any attempts to replicate the database between Symantec Endpoint Protection versions during the upgrade corrupts the database. Symantec Endpoint Protection 12.1 and later does not allow replication if the product versions do not match.

See Turning off replication before an upgrade from Symantec Endpoint Protection 11.0.

Step 3

Enable local authentication

Enforcers are not able to authenticate clients during an upgrade. To avoid problems with client authentication, Symantec recommends that you enable local authentication before you upgrade. After the upgrade is finished, you can return to your previous authentication setting.

Step 4

Stop the Symantec Endpoint Protection Manager service

You must stop the management server service before you install a newer version.

See Stopping and starting the management server service.

Step 5

Upgrade the Symantec Endpoint Protection Manager software

Install the new version of Symantec Endpoint Protection Manager on all sites in your network. The existing version is detected automatically, and all settings are saved during the upgrade.

See Upgrading a management server.

Step 6

Turn on replication after the upgrade

Turn on replication when the installation is complete to restore your configuration.

See Turning on replication after an upgrade from Symantec Endpoint Protection 11.0.

Step 7

Upgrade Symantec client software

Prepare then upgrade your client software to the latest version.

See About upgrading client software.

See Preparing for client installation.

When Symantec provides updates to client installation packages, you add the updates to Symantec Endpoint Protection Manager and make them available for exporting. You do not, however, have to reinstall the client with client deployment tools. The easiest way to update Windows clients in groups with the latest software is to use AutoUpgrade. You should first update a group with a small number of test computers before you update your entire production network.

See Upgrading Windows clients by using AutoUpgrade in Symantec Endpoint Protection.

You can also update clients with LiveUpdate if you permit clients to run LiveUpdate and if the LiveUpdate Settings policy permits.

See Updating client software with a LiveUpdate Settings policy.


Legacy ID



v14510472_v81626096


Article URL http://www.symantec.com/docs/HOWTO80759


Terms of use for this information are found in Legal Notices