Upgrading or migrating to Symantec Endpoint Protection 12.1.2100 (RU2 MP1)

Article:TECH204449  |  Created: 2013-03-28  |  Updated: 2013-04-04  |  Article URL http://www.symantec.com/docs/TECH204449
Article Type
Technical Solution


Issue



This document describes how to migrate to Symantec Endpoint Protection 12.1.2100 Release Update 2 Maintenance Patch 1 (RU2 MP1).


Solution



Before you begin

This section gives the information that you need to know in order to plan for migration. This information includes supported migration paths and factors that can affect the success of the migration.


Note:
This document is meant for migrations in which a specific previous version of Symantec Endpoint Protection exists on the network or on individual computers. If no previous versions of Symantec Endpoint Protection products are already installed, please read the implementation guides: Symantec Endpoint Protection Implementation Guide or Symantec Endpoint Protection Small Business Edition Implementation Guide..




Things to know to ensure a successful migration
The following is a list of critical information that you need to know in order for your migration to succeed.

 

Migration paths
Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1) can migrate seamlessly over the following:

 

 

Symantec Endpoint Protection 12.1.2015.2015 (RU2)

 


What's new

New fixes and features in Symantec Endpoint Protection 12.1 Release Update 2 Maintenance Patch 1


Supported platforms
Supported platforms for Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1) are listed in the document Symantec Endpoint Protection 12.1 System Requirements.

Downloading Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1)
The installer package to upgrade Symantec Endpoint Protection is available from the Symantec FileConnect site: https://fileconnect.symantec.com/

Migration overview
The following table gives an overview of the migration process for each component of Symantec Endpoint Protection:

 

Component Migration overview
Symantec Endpoint Protection Manager When you migrate a server, the installation automatically detects and configures it appropriately.

You do not need to uninstall management servers before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version.
Symantec Endpoint Protection
Clients
When you migrate a client, the overinstall automatically detects the client, and migrates and installs it appropriately. You do not need to uninstall existing clients before you install the new version.

 



Overview of the migration process
Migration to the current version of Symantec Endpoint Protection includes the following steps in order:

  • Create a migration plan
    Before you begin to install the Symantec Endpoint client, manager, and any administration upgrades, you should have a solid understanding of your network topology and a streamlined plan to maximize the protection of the resources on your network during the upgrade. Symantec strongly recommends that you migrate the entire network to the current version rather than managing multiple versions of Symantec Endpoint Protection.
  • Backup up the database
    Before you upgrade, you should back up the database.
  • Disable replication
    If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates.
  • Enable local authentication
    If Symantec Network Access Control is in use, then enable Local Authentication prior to migration.
  • Disable "Protect client files and registry keys" Application Control Policy
    If the setting "Protect client files and registry keys" is used, disable it in the Application Control policy prior to the migration. WARNING: If this setting is not disabled, you may face issues at a later stage when migrating your clients.
  • Stop the Symantec Endpoint Protection Manager service
    Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
    WARNING: You must stop the Symantec Endpoint Protection Manager service before you upgrade, or you will corrupt your existing installation of Symantec Endpoint Protection Manager.
  • Upgrade the Symantec Endpoint Protection Manager
    You do not need to uninstall management servers before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version.
  • Enabling replication after migration
    After you migrate all servers that used replication, including the servers that were configured for failover and load balancing, you must re-enable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.
  • Upgrade the Symantec Endpoint Protection Clients
    You do not need to uninstall previous clients before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version.



Backing up the database
Before you upgrade, you should back up the database.

    To back up the database
    1. Click Start > Programs > Symantec Endpoint Protection Manager > Symantec Endpoint Protection Manager Tools > Database Back Up and Restore.
    2. In the Database Backup and Restore dialog box, click Back Up.
    3. When asked "Are you sure you want to back up the database?" click Yes.
    4. When you see the message "The database has been backed up successfully," click OK.
    5. In the Database Backup and Restore dialog box, click Exit.


Disabling replication
If your environment utilizes replication, you must disable replication on all sites prior to upgrading the Symantec Endpoint Protection Manager. You must not re-enable replication between sites until they are running the same version of the software.

    To disable replication
    1. Log on to the Symantec Endpoint Protection Manager Console.
    2. On the Admin tab, click the blue Servers tab at the bottom of the pane.
    3. On the Servers tab, in the left pane, expand Local Site > Replication Partners.
    4. For each site that is listed under Replication Partners, right-click the site, and then click Delete.
    5. In the Delete Partner prompt, click Yes.
    6. Log off of the console, and repeat this procedure at all sites that replicate data.

Stopping the Symantec Endpoint Protection Manager service
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.


WARNING: You must stop the Symantec Endpoint Protection Manager service before you perform this procedure or you will corrupt your existing installation of Symantec Endpoint Protection Manager.


    To stop the Symantec Endpoint Protection Manager service
    1. Click Start > Settings > Control Panel > Administrative Tools.
    2. Double Click Services to launch the Services MMC snap-in.
    3. In the Services window, under Name, scroll to and right-click Symantec Endpoint Protection Manager.
    4. Click Stop.
    5. Close the Services window.
      Warning: You must close the Services window, or your upgrade may fail.
    6. Repeat this procedure for all Symantec Endpoint Protection Managers.

Upgrading the Symantec Endpoint Protection Manager
You must upgrade all Symantec Endpoint Protection Managers on which you stopped the Symantec Endpoint Protection service.

    To upgrade Symantec Endpoint Protection Manager
    1. Download and unzip the Release Update.
    2. Browse to the location where you unzipped the Release Update.
    3. Double-click setup.exe to start the installation.
    4. In the Symantec Endpoint Protection panel, click Install Symantec Endpoint Protection Manager.
    5. In the Install Wizard Welcome panel, click Next.
    6. At the License Agreement panel, select "I accept..." then click Next.
    7. At the Ready to install the Program panel, click Install.
    8. In the Install Wizard Completed panel, click Finish.
    9. In the Upgrade Wizard Welcome panel, click Next.
    10. In the Information panel, click Continue.
    11. When the upgrade completes, click Next.
    12. In the Upgrade Succeeded panel, click Finish.


Repeat the above steps on all other Symantec Endpoint Protection Managers on which you stopped the Symantec Endpoint Protection Manager service.

Enabling replication after migration
After you migrate all servers that used replication including the servers that were configured for failover and load balancing, you must re-enable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.

    To enable replication after migration
    1. Log on to the Symantec Policy Management Console if you are not logged on.
    2. On the Admin tab, click the blue Servers tab at the bottom of the pane.
    3. On the Servers tab, in the left pane, expand Local Site, and then click Add Replication Partner.
    4. In the Add Replication Partner panel, click Next.
    5. In the Remote Site Information panel, enter the identifying information about the replication partner, enter the authentication information, and then click Next.
    6. In the Schedule Replication panel, set the schedule for when replication occurs automatically, and then click Next.
    7. In the Replication of Log Files and Client Packages panel, check the items to replicate, and then click Next.
      (Replicating packages generally involves large amounts of traffic and storage requirements.)
    8. To complete the Add Replication Partner Wizard panel, click Finish.
    9. Repeat this procedure for all computers that replicate data with this computer.

Manage product licenses

Symantec Endpoint Protection 12.1 is licensed according to the number of Endpoint Protection clients that are needed to protect the endpoints at your site. Once the Symantec Endpoint Protection Manager is installed, you may immediately deploy clients. New Manager installations come with a trial license: you have 60 days to purchase and activate a license that covers all of your deployed clients. When migrating from an older version of Symantec Endpoint Protection (versions 11.x or 12.0), you start with an upgrade license that expires in 241 days. Note: Small Business Edition comes with a 30-day trial license, whether it is an upgrade or new installation.

In the Symantec Endpoint Protection Manager console, click Admin, and then click Licenses.
Under Tasks, click Activate license.
Follow the instructions in the License Activation Wizard to complete the activation process.

Upgrade client software

NOTE: Clients that are Group Update Providers must be upgraded first. (Group Update Providers are not a feature of Small Business Edition).

Review applicable steps in Steps to prepare computers to install Symantec Endpoint Protection 12.1 client, and choose from the available methods to upgrade clients to Endpoint Protection 12.1:
 

  • AutoUpgrade (Enterprise Edition only): assign client packages to groups in the Manager console, either manually or by using the Upgrade Groups Wizard.

  • LiveUpdate product updates (Enterprise Edition only): Permit product updates in LiveUpdate Settings policy for a client group in the Manager console.

  • Local installation from the product disc.

  • Run the Client Deployment Wizard from the Manager console. It will walk you through the creation of a client package that can be deployed via a weblink and email, remote push, or saved for later local installation or deployment using third-party tools.

  • Automatic client updates (Small Business Edition only): In the Endpoint Protection Manager, under Computers, right click any group, click Properties, and uncheck Disable automatic client package updates.



Article URL http://www.symantec.com/docs/TECH204449


Terms of use for this information are found in Legal Notices