How to convert an unmanaged Symantec Endpoint Protection for Macintosh client to managed
|Article:TECH131585|||||Created: 2010-01-08|||||Updated: 2012-03-30|||||Article URL http://www.symantec.com/docs/TECH131585|
It is necessary to convert an unmanaged Symantec Endpoint Protection (SEP) for Macintosh client into a managed client.
Export communications settings from the target client group within the Symantec Endpoint Protection Manager (SEPM), then copy it to the Destkop of the Macintosh you wish to make managed.
For SEP 12.1, there is a SyLinkDrop tool. This tool can be found on the 12.1 Release Update 1 (RU1, 12.1.1000.157) Part 2 Tools and Documents disk, under \Tools\SylinkDrop\Mac.
- Copy SyLinkDrop.app to the Macintosh. (What appears to be a folder on a Windows computer is an application on the Macintosh.)
- Double-click on SyLinkDrop.
- Click "Browse" to browse for the sylink.xml file previously exported from the SEPM.
- Press "Update SyLink" to update. You will be prompted to input your admin password.
- If successful, you will see the message: "Replace SyLink File Successfully"
- Press "Exit" to close the application.
For all versions of SEP, you may also manually place the sylink.xml file into the appropriate folder on the Macintosh client computer per the following instructions:
- Open the Symantec Endpoint Protection Manager (SEPM) console.
- Click on the Clients tab, and then right-click on the group that the SEP for Mac client should reside in once converted to managed.
- Choose "Export Communications Settings", and when prompted, save the file to a location such as the Desktop. (Note: the file will have a long name prefaced with the group information. Please rename the file so that it is only called "sylink.xml".)
- On the client computer that's going to be converted to a managed client, stop the smcdaemon (see Technical Information below).
- Copy the sylink.xml file to the client machine, pasting it into the following folder: /Library/Application Support/Symantec/SMC/
(See image below.)
- Reboot the computer, or restart the smcdaemon on the Macintosh.
If the SEPM console is not accessible, the sylink.xml file can be obtained using the instructions provided in the document 'How to change a Symantec Endpoint Protection client from unmanaged to managed in MR1 and MR2.' (see link below), substituting "Temporary" for the name of the group that the Macintosh client should join.
To stop and start the smcdaemon:
From Terminal command line:
sudo /Library/StartupItems/SMC/smclient --stop (Note: There is a space after sudo and before --stop)
sudo /Library/StartupItems/SMC/smclient --start (Note: There is a space after sudo and before --start)
Note: when prefacing the command with sudo, you be prompted for your administrator password, which does not echo in the Terminal window.
Article URL http://www.symantec.com/docs/TECH131585