Upgrade or migrate to Endpoint Protection 12.1.4.1 (RU4 MP1, MP1a, MP1b)

Article:TECH216176  |  Created: 2014-03-27  |  Updated: 2014-11-20  |  Article URL http://www.symantec.com/docs/TECH216176
Article Type
Technical Solution

Product(s)

Issue



This document describes how to upgrade or migrate to the following:

  • Symantec Endpoint Protection, Release Update 4, Maintenance Patch 1 (SEP RU4 MP1)
  • Symantec Endpoint Protection, Release Update 4, Maintenance Patch 1a (SEP RU4 MP1a)
  • Symantec Endpoint Protection, Release Update 4, Maintenance Patch 1b (SEP RU4 MP1b).

Solution



This section gives the information that you need to know in order to plan for migration. This information includes supported migration paths and factors that can affect the success of the migration.

 


Note: This document is meant for upgrades or migrations in which a previous version of Symantec Endpoint Protection (11.x or 12.x), Symantec AntiVirus (10.x), or Symantec Client Security (3.x) exists on the network or on individual computers. If no previous versions of Symantec Endpoint Protection products are already installed, please read the installation and administration guides: Symantec Endpoint Protection and Symantec Network Access Control 12.1.2 Installation and Administration Guide or Symantec Endpoint Protection Small Business Edition 12.1.2 Installation and Administration Guide.



Things to know to ensure a successful upgrade

The following is a list of critical information that you need to know in order for your upgrade from an earlier version Symantec Endpoint Protection to succeed.


Upgrade and migration paths

Symantec Endpoint Protection 12.1.4100.4126 (RU4 MP1), 12.1.4104.4130 (RU4 MP1a), and 12.1.4112.4156 (RU4 MP1b) can upgrade seamlessly over the following:

  • Symantec Endpoint Protection 12.1.4023.4080 (RU4a)
  • Symantec Endpoint Protection 12.1.4013.4013 (RU4)
  • Symantec Endpoint Protection 12.1.3001.165 (RU3)
  • Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1)
  • Symantec Endpoint Protection 12.1.2015.2015 (RU2)
  • Symantec Endpoint Protection 12.1.1101.401 (RU1 MP1)
  • Symantec Endpoint Protection 12.1.1000.157 (RU1)
  • Symantec Endpoint Protection 12.1.671.4971 (RTM)
  • Symantec Endpoint Protection 11.x (can be upgraded to enterprise version only)
  • Symantec Endpoint Protection Small Business Edition 12.0

Note: A Small Business Edition product can be upgraded to the enterprise version, but the reverse is considered a downgrade and is not supported.

You may choose to skip importing legacy settings with the Migration Wizard: When to import legacy settings during migration from Symantec AntiVirus to Symantec Endpoint Protection


Release notes

Symantec™ Endpoint Protection, Symantec Endpoint Protection Small Business Edition, and Symantec Network Access Control 12.1.4100 Release Notes


New fixes and features

New fixes and features in Symantec Endpoint Protection 12.1 Release Update 4 Maintenance Patch 1


Supported platforms

Supported platforms for Symantec Endpoint Protection 12.1.4.1x are listed in the following document: System Requirements for Symantec Endpoint Protection, Enterprise and Small Business Editions, and Network Access Control 12.1.4.1.


Downloading Symantec Endpoint Protection 12.1.4.1x

The installer package to upgrade Symantec Endpoint Protection is available from the Symantec FileConnect site:
https://symantec.flexnetoperations.com

See Related Articles for more information.


Migration overview

For information on how to migrate your Symantec AntiVirus 10.x or Symantec Client Security 3.x, please see the following:
Migrating from Symantec AntiVirus or Symantec Client Security to Symantec Endpoint Protection 12.1 or later


Upgrade overview

The following table gives an overview of the upgrade process for each component of Symantec Endpoint Protection:

Component Upgrade overview
Symantec Endpoint Protection Manager When you upgrade the management server, the installation automatically detects and configures it appropriately.

You do not need to uninstall management servers before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.
Symantec Endpoint Protection
Clients
When you upgrade a client, the overinstall automatically detects the client, and upgrades and installs it appropriately. You do not need to uninstall existing clients before you install the new version.


Overview of the upgrade process

Upgrading to the current version of Symantec Endpoint Protection includes the following steps in order:

  • Create a plan
    Before you begin to install the Symantec Endpoint client, manager, and any administration upgrades, you should have a solid understanding of your network topology and a streamlined plan to maximize the protection of the resources on your network during the upgrade. Symantec strongly recommends that you upgrade the entire network to the current version rather than managing multiple versions of Symantec Endpoint Protection.
     
  • Backup up the database
    Before you upgrade, you should back up the database.
     
  • Disable replication
    If your Symantec Endpoint Protection 11.x site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates. Symantec Endpoint Protection 12.1 does not allow replication if the database schemas do not match.
     
  • Enable local authentication
    If you use Symantec Network Access Control, then enable Local Authentication prior to upgrade.
     
  • Disable "Protect client files and registry keys" Application Control Policy
    If you are upgrading from Symantec Endpoint Protection 11.x and use Application and Device Control, you must disable the setting "Protect client files and registry keys" in the Application Control policy prior to the upgrade. After those clients have updated their policy, you may proceed with the upgrade.
    WARNING: If this setting is not disabled, you may face issues at a later stage when you upgrade your clients.
     
  • Stop the Symantec Endpoint Protection Manager service
    Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
    WARNING: You must stop the Symantec Endpoint Protection Manager service before you upgrade or you will corrupt your existing installation of Symantec Endpoint Protection Manager.
     
  • Upgrade the Symantec Endpoint Protection Manager
    You do not need to uninstall management servers before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.
     
  • Enabling replication after upgrading
    After you upgrade all servers that used replication, including the servers that were configured for failover and load balancing, you must re-enable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.
     
  • Upgrade the Symantec Endpoint Protection Clients
    You do not need to uninstall previous clients before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version. For more information, see Upgrade client software.

For detailed upgrade instructions, please see the chapter "Upgrading Symantec Endpoint Protection" in the Installation and Administration Guide.


Manage product licenses

Symantec Endpoint Protection 12.1 is licensed according to the number of Endpoint Protection clients that are needed to protect the endpoints at your site. Once the Symantec Endpoint Protection Manager is installed, you may immediately deploy clients. New manager installations come with a trial license: you have 60 days to purchase and activate a license that covers all of your deployed clients. When migrating from an older version of Symantec Endpoint Protection (versions 11.x or 12.0), you start with an upgrade license that expires in 90 days. Note: Small Business Edition comes with a 30-day trial license, whether it is an upgrade or new installation.

  • In the Symantec Endpoint Protection Manager console, click Admin, and then click Licenses.
  • Under Tasks, click Activate license.
  • Follow the instructions in the License Activation Wizard to complete the activation process.

 

To add the new install packages to your existing SEPM:

1.  Go to Admin/Install Packages.
2.  Choose Add a Client Install Package.
3.  Browse to the location of the MP1B patch.   Choose one package at a time:

Choose SAV32.INFO for 32 bit install package.
Choose SAV64.INFO for 64 bit install package.
Choose SEP_MAC.INFO for Macintosh install package.

4.  Click Select to choose the install package.  You will probably go through these steps for each install package.
5.  Name the install package as you require.
6.  When the install package has been added it will appear in the install package list.


Upgrade client software

NOTE: Clients that are Group Update Providers (GUPs) should be upgraded before other Symantec Endpoint Protection clients (Group Update Providers are not a feature of Small Business Edition).

Review applicable steps in Steps to prepare computers to install Symantec Endpoint Protection 12.1 client, and choose from available methods to upgrade clients to Endpoint Protection 12.1.4:

  • AutoUpgrade: Assign client packages to groups in the manager console, either manually or by using the Upgrade Clients with Package wizard.
    For the Small Business Edition, automatic upgrade is enabled by default. To disable it, go to the Computers page in the management console, right-click your Group, select Properties, and then check Disable Automatic Client Package Updates.
  • Permit product updates in LiveUpdate Settings policy for a client group in the manager console (enterprise version only).
  • Local installation from product disc.
  • Run the Client Deployment Wizard from the manager console. It walks you through the creation of a client package that can be deployed via a web link and email, remote push, or saved for later local installation. In the enterprise version, you also have the option to deploy using third-party tools.

 

 






Article URL http://www.symantec.com/docs/TECH216176


Terms of use for this information are found in Legal Notices