Upgrade or migrate to Endpoint Protection 12.1.4 (RU4, RU4a)

Article:TECH211821  |  Created: 2013-10-23  |  Updated: 2015-02-23  |  Article URL http://www.symantec.com/docs/TECH211821
Article Type
Technical Solution


This article describes how to upgrade or migrate to Symantec Endpoint Protection 12.1.4 (RU4) or 12.1.4a (RU4a).



About this release

Find out what's new, learn about known issues, and get additional information about this release.

Download this release

You can download this release update from Symantec FileConnect, if still available, or download the latest version of Symantec Endpoint Protection.

Upgrade to this release

Upgrade and migration paths

Symantec Endpoint Protection 12.1.4013.4013 (RU4)/12.1.4023.4080 (RU4a) can upgrade seamlessly over the following:

  • Symantec Endpoint Protection 12.1.4013.4013 (RU4) - if upgrading to 12.1.4023.4080 (RU4a).
  • Symantec Endpoint Protection 12.1.3001.165 (RU3)
  • Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1)
  • Symantec Endpoint Protection 12.1.2015.2015 (RU2)
  • Symantec Endpoint Protection 12.1.1101.401 (RU1 MP1)
  • Symantec Endpoint Protection 12.1.1000.157 (RU1)
  • Symantec Endpoint Protection 12.1.671.4971 (RTM)
  • Symantec Endpoint Protection 11.x - can be upgraded to the enterprise version only.
  • Symantec Endpoint Protection Small Business Edition 12.0 - Can be upgraded to the enterprise version, but the reverse is considered a downgrade and is not supported.

Symantec Endpoint Protection 12.1.4 (RU4) can also migrate installations of the following legacy Symantec products:

  • Symantec AntiVirus Corporate Edition 10.x.
  • Symantec Client Security 3.x
  • Symantec AntiVirus for Mac (client only)

Upgrade process

Upgrading to the current version of Symantec Endpoint Protection involves the following steps, in order:

Step 1: Create an upgrade plan

Before you install the Symantec Endpoint Protection client, manager, and any administration upgrades, you should have a solid understanding of your network topology and create a streamlined plan to maximize the protection of your network during the upgrade.

Symantec recommends that you upgrade the entire network to the current version of Symantec Endpoint Protection rather than manage multiple versions.


Step 2: Back up and prepare for disaster recovery

Before you upgrade, back up the database and prepare for disaster recovery. These steps are different depending on your version:


Step 3: Disable replication on Symantec Endpoint Protection 11.x managers

Turn off replication at each Symantec Endpoint Protection 11.x site that is configured as a replication partner before you upgrade Symantec Endpoint Protection Manager.


Step 4: Enable local authentication

If you use Symantec Network Access Control, you must enable local authentication before you upgrade Symantec Endpoint Protection Manager.


Step 5: Disable the "Protect client files and registry keys" rule set

If you are upgrading from Symantec Endpoint Protection 11.x and use Application and Device Control (ADC), you must disable the "Protect client files and registry keys" rule set prior to the upgrade.

After those clients have updated their policy, you may proceed with the upgrade.

Caution: If this rule set is not disabled, you may face issues at a later stage when you upgrade your clients.


Step 6: Stop the Symantec Endpoint Protection Manager service

Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the management server automatically starts the service.

Caution: If you do not stop the service before you upgrade, you will corrupt your existing installation of Symantec Endpoint Protection Manager.


Step 7: Upgrade the Symantec Endpoint Protection Manager

You do not need to uninstall management servers before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.


Step 8: Enable replication after upgrading

After you upgrade all servers that used replication, including the servers that were configured for failover and load balancing, you must re-enable replication.

To re-able replication after migration, add a replication partner in Symantec Endpoint Protection Manager.

Note: You only need to add replication partners on the computer on which you first installed the management server. Replication partners will automatically appear on the other management servers.


Step 9: Upgrade the Symantec Endpoint Protection clients

You do not need to uninstall previous clients before you install the new version. The overinstall process saves the client settings, and then upgrades the client to the latest version.

Note: Clients that are Group Update Providers (GUPs) should be upgraded before other Symantec Endpoint Protection clients (GUPs are not a feature of Small Business Edition).

Review the applicable steps to prepare computers to install Symantec Endpoint Protection 12.1.x clients, and choose from one of the available methods to upgrade clients to Symantec Endpoint Protection 12.1.4:

  • Auto-Upgrade - Assign client packages to groups in the manager console, either manually or by using the Upgrade Clients with Package wizard.

    For upgrading Symantec Endpoint Protection Small Business Edition clients, this will occur automatically after you upgrade the Symantec Endpoint Protection Manager. No further action is required on your part to complete the upgrade process. To disable automatic upgrades, in the console, go to the Computers page, right-click your Group, click Properties, and then check Disable Automatic Client Package Updates.
  • LiveUpdate – In the manager console, permit product updates through the LiveUpdate Settings policy for a client group (enterprise version only).
  • Installation File - Use the installation file you download from Symantec FileConnect to upgrade the client.
  • Client Deployment Wizard - Run the Client Deployment Wizard in the manager console. This wizard walks you through the creation of a client package that can be deployed via a web link and email, remote push, or saved for later local installation. In the enterprise version, you also have the option to deploy using third-party tools.

For detailed upgrade instructions, see Upgrading Symantec Endpoint Protection in the Installation and Administration Guide.

Manage Endpoint Protection licenses

Symantec licenses Symantec Endpoint Protection 12.1 according to the number of clients that you need to protect the endpoints at your site. After you install the Symantec Endpoint Protection Manager, you may immediately deploy clients.

Trial and upgrade licenses expire as follows:

  • New Symantec Endpoint Protection Manager installations come with a trial license; you have 60 days to purchase and activate a license that covers all of your deployed clients.
  • When you migrate from an older version of Symantec Endpoint Protection (versions 11.x or 12.0), you start with an upgrade license that expires in 90 days.
  • Small Business Edition comes with a 30 day trial license, whether it is an upgrade or new installation.

To activate Symantec Endpoint Protection licenses:

  1. In the Symantec Endpoint Protection Manager console, click Admin, and then click Licenses.
  2. Under Tasks, click Activate license.
  3. Follow the instructions in the License Activation Wizard to complete the activation process.

Migrate from other Symantec products

This document is meant for upgrades or migrations in which a previous version of Symantec Endpoint Protection 12.x or 11.x, Symantec AntiVirus 10.x, or Symantec Client Security 3.x exists on the network or on individual computers. If no previous versions of these products are already installed, please read the following installation and administration guides:

To learn how to migrate from other Symantec products, please read the Symantec AntiVirus 10.x or Symantec Client Security 3.x migration guide.

Importing legacy settings

You have the option to import legacy settings when migrating from Symantec AntiVirus to Symantec Endpoint Protection. However, this import is not required.

Article URL http://www.symantec.com/docs/TECH211821

Terms of use for this information are found in Legal Notices