Best Practices For Patching or Upgrading the Symantec Endpoint Management Server

Article:TECH104728  |  Created: 2008-01-16  |  Updated: 2008-01-03  |  Article URL
Article Type
Technical Solution




All policy manager updates are full releases, and there is no actual patch process. What happens when you run the installer application is, it will do a fresh install if no managment server is detected. If there is a managment server installed, the installer will go into upgrade mode, but only if it detects that the manager is at a lower build than what is being installed. With all upgrades we suggest backing up the database before proceeding.

When upgrading the management server, the management server service will be stopped to prevent any access to the database server. This allows the installer to make any required modifications to the database. It will also write links to the latest agent builds into the database for exporting agent packages. The Webserver on the management server is updated as well. Once the upgrade is finished, it will prompt you with a 'Finished' dialog box (starting management server services is enabled by default). Once the management server service is started you, will be able to log into the manager.

While running the upgrades, the agents will not be affected. They will continue to operate and save the logs locally on the agent machine while the upgrade process is taking place. The only thing that is hindered is the ability to make any new policies or changes to existing policies. Once the upgrade process is finished and the management server service is started, all of the agent logs that were collected during the upgrade process will then be written to the database. Upgrading the policy manager does not require the updating of the agents. Unless otherwise noted, they can be out of sequence as far as build version as long as they are in the same base version category (i.e., 5.x series for a 5.x manager) and the physical server will not need to be restarted after the upgrade is finished.

Upgrading multiple management servers that are connected to the same database:
The only change in the updating process is that you will need to turn off the management server service on all of the managers and run the upgrade on the primary management server. This will make any updates and additions required to the database. Once this is complete, you can proceed to upgrade the rest of the managers all at the same time. On subsequent installs, the installer will query the database and see that the changes have completed and proceed with updating the software on that server.

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices