Upgrading or migrating to Symantec Endpoint Protection 12.1.3 (RU3)

Article:TECH206823  |  Created: 2013-06-03  |  Updated: 2013-10-29  |  Article URL http://www.symantec.com/docs/TECH206823
Article Type
Technical Solution


Issue



This document describes how to migrate to Symantec Endpoint Protection 12.1.3 Release Update 3 (RU3).


Solution



This section gives the information that you need to know in order to plan for migration. This information includes supported migration paths and factors that can affect the success of the migration.
 


Note:
This document is meant for upgrades or migrations in which a previous version of Symantec Endpoint Protection (11.x or 12.x), Symantec AntiVirus (10.x), or Symantec Client Security (3.x) exists on the network or on individual computers. If no previous versions of Symantec Endpoint Protection products are already installed, please read the installation and administration guides: Symantec Endpoint Protection and Symantec Network Access Control 12.1.2 Installation and Administration Guide or Symantec Endpoint Protection Small Business Edition Installation and Administration Guide.



Things to know to ensure a successful upgrade

The following is a list of critical information that you need to know in order for your upgrade from an earlier version Symantec Endpoint Protection to succeed.


Upgrade and Migration paths

Symantec Endpoint Protection 12.1.3 (RU3) can upgrade seamlessly over the following:

  • Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1)
  • Symantec Endpoint Protection 12.1.2015.2015 (RU2)
  • Symantec Endpoint Protection 12.1.1101.401 (RU1 MP1)
  • Symantec Endpoint Protection 12.1.1000.157 (RU1)
  • Symantec Endpoint Protection 12.1.671.4971 (RTM)
  • Symantec Endpoint Protection 11.x (can be upgraded to enterprise version only)
  • Symantec Endpoint Protection Small Business Edition 12.0

Symantec Endpoint Protection 12.1.3 (RU3) can migrate installations of the following legacy Symantec products:

  • Symantec AntiVirus Corporate Edition 10.x.
  • Symantec Client Security 3.x
  • Symantec AntiVirus for Mac (client only)

Note: A Small Business Edition product can be upgraded to the enterprise version, but the reverse is considered a downgrade and is not supported.

You may choose to skip importing legacy settings with the Migration Wizard: When to import legacy settings during migration from Symantec AntiVirus to Symantec Endpoint Protection


Release Notes

Symantec™ Endpoint Protection, Symantec Endpoint Protection Small Business Edition, and Symantec Network Access Control 12.1.3 Release Notes


New Fixes and Features

New fixes and features in Symantec Endpoint Protection 12.1 Release Update 3


Supported platforms

Supported platforms for Symantec Endpoint Protection 12.1.3 (RU3) are listed in the following document: System Requirements for Symantec Endpoint Protection, Enterprise and Small Business Editions, and Network Access Control 12.1.2 and 12.1.3.


Downloading Symantec Endpoint Protection 12.1.3 (RU3)

The installer package to upgrade Symantec Endpoint Protection is available from the Symantec FileConnect site:
https://symantec.flexnetoperations.com


Migration overview

For information on how to migrate your Symantec AntiVirus 10.x or Symantec Client Security, please see the following:
Migrating from Symantec AntiVirus or Symantec Client Security to Symantec Endpoint Protection 12.1 or later


Upgrade overview

The following table gives an overview of the upgrade process for each component of Symantec Endpoint Protection:

Component Upgrade overview
Symantec Endpoint Protection Manager When you upgrade the management server, the installation automatically detects and configures it appropriately.

You do not need to uninstall management servers before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.
Symantec Endpoint Protection
Clients
When you upgrade a client, the overinstall automatically detects the client, and upgrades and installs it appropriately. You do not need to uninstall existing clients before you install the new version.


Overview of the upgrade process

Upgrading to the current version of Symantec Endpoint Protection includes the following steps in order:

  • Create a plan
    Before you begin to install the Symantec Endpoint client, manager, and any administration upgrades, you should have a solid understanding of your network topology and a streamlined plan to maximize the protection of the resources on your network during the upgrade. Symantec strongly recommends that you upgrade the entire network to the current version rather than managing multiple versions of Symantec Endpoint Protection.
     
  • Backup up the database
    Before you upgrade, you should back up the database.
     
  • Disable replication
    If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates.
     
  • Enable local authentication
    If you use Symantec Network Access Control, then enable Local Authentication prior to upgrade.
     
  • Disable "Protect client files and registry keys" Application Control Policy
    If you are upgrading from Symantec Endpoint Protection 11.x and use Application and Device Control, you must disable the setting "Protect client files and registry keys" in the Application Control policy prior to the upgrade. After those clients have updated their policy, you may proceed with the upgrade.
    WARNING: If this setting is not disabled, you may face issues at a later stage when upgrading your clients.
     
  • Stop the Symantec Endpoint Protection Manager service
    Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
    WARNING: You must stop the Symantec Endpoint Protection Manager service before you upgrade, or you will corrupt your existing installation of Symantec Endpoint Protection Manager.
     
  • Upgrade the Symantec Endpoint Protection Manager
    You do not need to uninstall management servers before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.
     
  • Enabling replication after upgrading
    After you upgrade all servers that used replication, including the servers that were configured for failover and load balancing, you must re-enable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.
     
  • Upgrade the Symantec Endpoint Protection Clients
    You do not need to uninstall previous clients before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.

 For detailed uprade instructions, please see the chapter "Upgrading Symantec Endpoint Protection" in the Installation and Administration Guide.


Manage product licenses

Symantec Endpoint Protection 12.1 is licensed according to the number of Endpoint Protection clients that are needed to protect the endpoints at your site. Once the Symantec Endpoint Protection Manager is installed, you may immediately deploy clients. New manager installations come with a trial license: you have 60 days to purchase and activate a license that covers all of your deployed clients. When migrating from an older version of Symantec Endpoint Protection (versions 11.x or 12.0), you start with an upgrade license that expires in 90 days. Note: Small Business Edition comes with a 30-day trial license, whether it is an upgrade or new installation.

  • In the Symantec Endpoint Protection Manager console, click Admin, and then click Licenses.
  • Under Tasks, click Activate license.
  • Follow the instructions in the License Activation Wizard to complete the activation process.


Upgrade client software

NOTE: Clients that are Group Update Providers (GUPs) should be upgraded before other SEP clients (Group Update Providers are not a feature of Small Business Edition).

Review applicable steps in Steps to prepare computers to install Symantec Endpoint Protection 12.1 client, and choose from available methods to upgrade clients to Endpoint Protection 12.1.3:

  • AutoUpgrade: Assign client packages to groups in the manager console, either manually or by using the Upgrade Clients with Package wizard.
    For the Small Business Edition, automatic upgrade is enabled by default. To disable it, go to the Computers page in the management console, right-click your Group, select Properties, and then check Disable Automatic Client Package Updates.
  • Permit product updates in LiveUpdate Settings policy for a client group in the manager console (enterprise version only).
  • Local installation from product disc.
  • Run the Client Deployment Wizard from the manager console. It will walk you through the creation of a client package that can be deployed via a web link and email, remote push, or saved for later local installation. In the enterprise version, you also have the option to deploy using third-party tools.




Article URL http://www.symantec.com/docs/TECH206823


Terms of use for this information are found in Legal Notices