SEP 11.x to SEP 12.1 Upgrade process graphical overview
Updated on 16th Nov'12
Hi,
This is SEPM 11.x login screen
Stop the 11.x Symantec Endpoint Protection Manager Service before starting upgrade process.
Note: The SEP 12.1 SEPM upgrade installer requires three times the current database size (sem5.db) if upgrading from pre-12.1 SEPM with the embedded database only.
The download is a zip file and the file size is approximately 1.5 GB in size
From SEP 12.1 RU1 onwards Symantec is giving an options to download full product in two parts i.e par1 & part 2 or download individual files like SEPM setup, SEP 32 bit setup, SEP 64 bit setup, Tools as per requirement.
It gives more levarage to the Symantec customer to choose what he wants. In many cases it's seen that customer used to required only SEP setup and unnecssarily he had to download entire zip file which is around 1.5 GB in size.
Once the download finishes successfully, extract the contents of the compressed file to a location of your choice
Navigate to the extracted files, then enter the SEPM folder and double-click on setup.exe:
After Setup.exe is ran, the setup initialization process will start
Ready to Install
Click on Next,
License Agreement Page
The install procedure will prompt for a backup of the existing database so it will be available if required in the future
Click on Install to start Installation
Management Server & Console Installation Summary Page
If the following ports are already in use then other available ports will have to be selected.
Which communications ports does Symantec Endpoint Protection use?
These options are for database maintenance, new in SEP 12.1
Data Collection Page, Check mark is optional
Server Upgrade Status, Note that the database schema has changed with this version of SEPM.
Upgrade Succeeded message will come up
SEP 12.1 Login Screen - Good to go
After successful upgrade you must activate the license.
Activating your new or renewed Symantec Endpoint Protection 12.1 product license
http://www.symantec.com/docs/HOWTO55294
Refer this article: https://www-secure.symantec.com/connect/articles/s...
SEP Upgrade overview :
SEPM upgrade is a two way process, performed by
- SEP 12.1 installation wizard
- Management server upgrade wizard
Each SEPM in a site must be independently upgraded
First server upgrades the database
Other server update server settings only
Replication can be restored after the upgaade
- Starting in SEP 12.1, replication performs version checking
- Eliminates cross version replication corruption
- Prevents the need to disable replication prior to upgrade
1) Upgrading and migrating to Symantec Endpoint Protection 12.1
http://www.symantec.com/docs/TECH163602
Migrations from SEPM RU7 MP1& MP2 to all current versions of SEPM 12.1 are not supported. Future releases of SEPM 12.1 will contain the migration code necessary to update the newer database schema used by RU7 MP2.
Symantec Endpoint Protection (SEP) clients can be migrated from RU7 MP2 to SEP 12.1, however, SEP 11 RU7 MP2 managers cannot manage SEP 12.1 clients.
http://www.symantec.com/docs/TECH189972
Migration support for 11.0.7101.1056 (RU7 MP1), 11.0.7200.1147 (RU7 MP2), and 11.0.7300.1294 (RU7 MP3) to 12.1 is supported for 12.1.2015.2015 (RU2) or higher.
Comments 86 Comments • Jump to latest comment
Hi,
Nice article for begineers !!
Really a Good one for the Fressher to gather Upgradatioon Knowledge. Keep posting.....
Regard's
Ajit Jha
Technical Consultant
ASC & STS
Do not forget you will need to stop SEPM service before running upgrade.
Mssym- "Stop Symantec Endpoint Protection Manager Service before starting upgrade process " He had that on the above article.
What do you do if fileconnect is not showing the download available to you?
Hi,
Have you received any email notification from Symantec about SEP 12.1? If yes please go through an email, it will guide you to download SEP 12.1
If you have not received any email notification, please contact license department (18003420652) they will provide you new serial number to download SEP 12.1
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Yes i use to get the Email notification. Even in Trial Version
Regard's
Ajit Jha
Technical Consultant
ASC & STS
I really like that SEP 12 has database maintenance options. Several problems with SEP 11 in our environment were traced back to database maintenance. If database is being maintained, then several problems can be prevented
Marriage Made in Heaven
If God is for us, who can be against us? --- Romans 8:31
Thanks! I phoned and was given a serial to be able to see 12 on fileconnect. Appreciate the tip. Didnt realize that I would need to do that.
Hi,
I am bit confused on snapshot showing "Reporting port and Web service port"
Can anyone elaborate on this.
Regards,
SAM
Hi,
Check this article.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Thank you chetan
Hi,
Check following articles also
https://www-secure.symantec.com/connect/articles/few-feature-differences-between-sep-11x-and-sep-121
https://www-secure.symantec.com/connect/articles/feature-comparison-between-sep-121-sbe-and-ee
https://www-secure.symantec.com/connect/articles/enable-save-username-password-option-symantec-endpoint-protection-121
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Hi,
I'm trying to upgrade my system from 11.0 v. to 12.1. Your instruction to get the new version was very helpful for me Chetan, thank You. My server and almost 100 clients computers aren't connect to the internet. Is it important for me to change TCP ports, and how to upgrade rest of clients to the new version?
Regards - Peter.
Hi,
You can upgrade clients through multiple ways.
But most easiest option would be an auto upgrade
Upgrading clients by using AutoUpgrade
http://www.symantec.com/docs/TECH96789
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Gr8 knowledge Base Article
Regards
Sumit G.
The last time i contacted Symantec, they had told that i cannot upgrade from SEP 11.0.7. Is it true ?
Quoting from http://www.symantec.com/docs/TECH162327 : All versions of Symantec Endpoint Protection Manager up to Release Update 6 Maintenance Patch 3 (RU6 MP3) can be migrated to version 12.1. Releases later than RU6 MP3 cannot be migrated to 12.1.
Although there might be a workaround for this. I held back the updates for my client until we get the latest working 12. We are stuck at RU6 MP1 on the clients and MP3 on the server.
“Your most unhappy customers are your greatest source of learning.”
Hi,
I am agreed with Mon_roralio & it's applicable only from RU7 to 12.1 upgrade.
SEP 12.1 RU1 is released now.
Now you can upgrade from RU7 to SEP 12.1 RU1 directly.
I hope it will help you !!!
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Gr8 knowledge Base Article
Thanks In Advance.
Manish
Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.
Gud Knwlg base
When i try to upgrade the Version to 12.1 i get an error when clicking "Install Symantec Endpoint Protection Manager"
Error Message: "Error opening installation log file. Verify that the specified log file exists and is writeable"
All Symantec Services are stopped. Where's this file located?
Hi,
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Nice article for begineers !!
usefull article...
Great article, thanks!
I need to upgrade from 11.0.7 to 12.1 RU1 and I don't see a full .exe file available through file connect. Without the full file, I don't have a setup.exe file to do the install... Where can I find that?
Should be a really helpful tool for those folks doing this for the first time (or those like me who haven't done it for a long time!) The one suggestion I would venture to add is that you should really number the steps so it's easier to keep track of where you are in the process.
Jon Bonning - SEO quote
always good to have some instuction guides for SEP
I am preparing to upgrade from 11-12 and this document is great! My question is this: I have a sinle SEPM server using a database on an SQL server. I take it that will not be an issue and I can just about follow this guide to do the upgrade? Also will the database on the SQL server triple in size or is that just for embedded databases?
Hi Jaunmc,
You can follow this guide to complete the upgrade.
Also will the database on the SQL server triple in size or is that just for embedded databases?
--> The SEP 12.1 SEPM upgrade installer requires three times the current database size (sem5.db) if upgrading from pre-12.1 SEPM with the Embedded Database only.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
This will leave the policies and setting intact correct? Sorry for the noob questions.
yes, everything will be intact. However as a best practice always follow DR steps .
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Thanks mate it is a great help
thanks for the guide mate !
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
This was amazingly helpful, thanks a lot
R. Leerdam - WLZine
but can we directly upgrade 11.6 A to 12.1 ru 1 \ MP 1 please suggest.
Hi Rupesh,
You can directly upgrade from 11.6 to SEP 12.1 RU1.
You can not directly upgrade from 11.6 to SEP 12.1 RU1 MP1
So Upgrade path would be 11.6 --> SEP 12.1 RU1 --> SEP 12.1 RU1 MP1
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Can I just upgrade the server from 11.6 --> SEP 12.1 RU1 --> SEP 12.1 RU1 MP1, or must I upgrade the desktops to SEP 12.1 RU1 first as well?
Hi,
Supported upgrade path is common for both i.e SEPM and SEP clients.
It would be great if you could upgrade clients to RU1 first & then to MP1.
However we have seen many customers follows the upgrade path only for SEPM not for clients.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
thanks yar...!
can you explain me about how heuristic & Bloodhound is working in sonar and insight ?
Hi Rupesh,
SONAR uses heuristics to determine if an unknown file behaves suspiciously and might be a high risk or low risk. It also uses reputation data to determine whether the threat is a high risk or low risk.
About SONAR
http://www.symantec.com/business/support/index?page=content&id=HOWTO55254
Managing SONAR
http://www.symantec.com/business/support/index?page=content&id=HOWTO55215
Adjusting SONAR settings on your client computers
http://www.symantec.com/docs/HOWTO55258
Handling and preventing SONAR false positive detections
http://www.symantec.com/docs/HOWTO55273
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Hi,
Also check this article
How the Insight Lookup process works
http://www.symantec.com/docs/TECH169282
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Hi,
Can i upgrade my current SEPM from v 11.6005 into v 12.1 MP1 ? directly as inline upgrade ?
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
I asked the same question just 5 posts back and it was suggested that you must upgrade the SEPM in steps but that many had skipped the RU1 middle step for the client side...
Hi,
Not supported from RU6 to 12.1 RU1 MP1 as a inline upgrade.
Supported upgrade path is as per below:
SEP 11.6005.x --> SEP 12.1 RU1 --> SEP 12.1 RU1 MP1
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
It is true that 11.6 data base is successfully restored on 12.1
It is true that 11.6 data base is successfully restored on 12.1 RU1 ?
Hi Rupesh,
SEP 11.x version uses IIS with reporting component. From SEP 12.1 IIS is no more used with reporting.
During migration it would be taken care.If you tried to restore RU6 database it should failed.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
If I have some unmanaged 12.1 clients can I push out the managed client on top of it or do I need to uninstall the unmanaged client first?
Thanks
Paul
Hi,
No need to push entire package to convert unmanaged client to managed client. Uninstall also not required.
Check following article for more details
How to change a Symantec Endpoint Protection client from unmanaged to managed
http://www.symantec.com/business/support/index?page=content&id=TECH102322&locale=en_US
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
so in this case just dragand drop the sylink.xml into the application directory is fine ?
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
Hi Dushan,
You are right, just drag and drop the sylink.xml into the application directory.
You can use Sylink replacer tool also.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Yes that's what I'dve thought so Chethan.
Thanks for the clarification.
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
My software SEP 12.1 shows error of actualization (event 1013). What is there the problem ? Maybe system Windows is damaged?
Slawek_Maj panely ET
Hi,
Could you please attach screenshot of an error ?
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Did you resolve your problem??
Adam Mackackap - ItsCharmingTime
Hello Adam,
thank you for the response. I cloned my 11x environment and upgraded the cloon.
Regards,
Savantis
Slawek_Maj panely ET
Hi,
To send an email reply to the poster click on the user name and choose “Send this user an email”
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Hello,
This tutorial is very good but I've a question : I've an installation of SEP RU5 with the database on a separate server. Does this procedure will recognize and update the remote database or will it ask me to install a new SQL Server on the SEP machine ?
it will detect the DB on the remote server and will upgrade the DB schema
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Thank you, I had this problem with another piece of software (but not from Symantec) and since this time I've always a doubt when I upgrade.
Thank you again.
Hi,
Just an info.
Upgrade path for you would be SEP RU5 (11.0.5002.333) --> SEP 12.1 RU1 (12.1.1000.157) --> SEP 12.1 RU1 MP1 (12.1.1101.401)
Upgrade path is applicable for both i.e SEPM & SEP clients.
Till date SEP releases: http://bit.ly/m0vOJp
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Hello,
I through that I answered but no.
It's perfect, thank you !
Hi,
I've got SEP client v11.0.4 can I just upgrade them into 12.1 RU2 directly ?
Kind regards,
John Santana
Graduate IT Professional
--------------------------------------------------
Please be nice to me as I'm newbie in this forum.
John,
Yes, you can. You can direct upgrade any 11.x version to 12.1.2.
SEP Knowledge Base
Endpoint SWAT
Thanks Brian forthe quick clarification.
Kind regards,
John Santana
Graduate IT Professional
--------------------------------------------------
Please be nice to me as I'm newbie in this forum.
Hello,
I'm just a tiny bit confused because of the number of documents I have to go through to update our SEP environment.
Somewhere I read the comment that upgrading is just a few clicks, well I've lost my way
.
Please allow me to note our current installation:
- Symantec Endpoint Protection Enterprize Edition (version 11.0.7000.975) (which RU is this?)
- One Virtual SEP Management Server (Windows 2003 R2, SP2)
I've downloaded almost all of the files on fileconnect and wondering which setup to use:
- Symantec_Endpoint_Protection_12.1_RU1_Part1_Installation_EN or
- Symantec_Endpoint_Protection_12.1.1_MP1_Part1_Installation_EN
I've come across RU1, MP1 and RU1MP1 versions of SEP 12.1
Please your assistance.
Much abliged and Greetings,
Pim
System Administrator
Hi,
Check the following article.
What are the Symantec Endpoint Protection (SEP) versions released officially?
http://bit.ly/m0vOJp
Your current version is version SEP 11 RU7 (11.0.7000.975)
You can upgrade from SEP 11 RU7(11.0.7000.975) to SEP 12.1 RU1(12.1.1000.157)
Navigate to Symantec_Endpoint_Protection_12.1_RU1_Part1_Installation_EN. Extract it if it's a zip file.
Navigate to SEPM folder, click on setup.exe & it will start the upgrade process.
If you would have any queries please revert.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
hi chetan
(when i have upgrade)on my one server i got error that web sevices port is 8444 is using another application
can we use any othe port for web services?
and reporting port?
please help..!
Yes that is possible Rupesh,
To alter the Tomcat port(s) in SEPM, following these steps:
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\conf\server.xml
For conflicts with port 8005, change the port to another unused port:
port="8005"
For conflicts with port 9090, change the port to another unused port:
port="9090"
Note: It's NOT necessary to change both ports when only one of them is conflicting.
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
2 )
after upgrading SEPM server and Client some clients have very slowness issue.
please suggest some steps.
Hi Rupesh,
You should test the performance using latest SEP version because following fixes are listed with SPE 12.1 RU2
Reference: New fixes and enhancements in Symantec Endpoint Protection 12.1 Release Update 2
http://www.symantec.com/docs/TECH199676
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Hi chetan,
currently we have upgraded our Symantec server from 11X to 12.1 RU1 MP1 and we have total 82 SEPM server, is there any setting for better performance, like in the application policy or Virus and spyware policy.
please suggest the same.because SEP 12.1 RU2 is not posible on all server because now we have total 62 server are upgraded on 12.MP1 RU 1 and some server and Client having problem means slowness issue.
please suggest any steps.
Hi,
There are three default policies under Virus & Spyware, I hope you have assigned Virus & Spyware Protection Policy- Balanced
Also refer this thread & try to make those changes in policy
https://www-secure.symantec.com/connect/forums/off...
Also make sure you have selected best application performance under advance scanning option
Refer this article:
https://www-secure.symantec.com/connect/articles/s...
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
thank you for sharing!
Kind regards,
John Santana
Graduate IT Professional
--------------------------------------------------
Please be nice to me as I'm newbie in this forum.
finally RU2 has arrived :-)
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
Yes I must admit that this is the best Symantec Endpoint protection manager that I have ever upgraded into, inline upgrade works great and no errors.
Kind regards,
John Santana
Graduate IT Professional
--------------------------------------------------
Please be nice to me as I'm newbie in this forum.
of course it should John, this is the latest Symantec enterprise product
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
how can i download SEP 12.1 to upgrate my SEP 11 from where i can download the SEP 12.1
Hi,
You would required product serial number to download the latest software. Generally Product serial number starts with 'M' e.g. M123456789.
If you are not able to find product serial number then you can call Symantec license department & they can try to provide you the serial number.
Contact the Licensing Department via:
Website: http://symantec.custhelp.com
Phone number: 1-800-721-3934
Email: license@symantec.com
Check this article as well
https://www-secure.symantec.com/connect/articles/s...
Then you can download software from https://fileconnect.symnatec.com & it's a zip file & size is around 1.5 GB.
Once the download finishes successfully, extract the contents of the compressed file to a location of your choice.
From SEP 12.1 RU1 onwards Symantec is giving an option to download full product in two parts i.e. par1 & part 2 or download individual files like SEPM setup, SEP 32 bit setup, SEP 64 bit setup, Tools as per requirement.
It gives more leverage to the Symantec customer to choose what he wants. In many cases it's seen that customer used to require only SEP setup and unnecessarily he had to download entire zip file which is around 1.5 GB in size.
Contact Us
http://www.symantec.com/partners/support/contact-us.jsp
Assistant & Information
http://www.symantec.com/support/assistance_information.jsp
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Thank for the nice description
Kulwant Singh Loyfly
In my case some agents recognize SEP 12.1 and some doesn't. The ones that recognize it....emit events that the PC is not protected...and then I get event - "yes, it's protected"...kind of weird.
Does anybody apply any working fix.
Lose Weight
Hi,
Could you please provide more info on this?
If possible attach the screen shot.
If machines definitions are not updated then you might see the message that PC is not protected. However once the definitions updated it will change the status to it's protected.
It's happening on end user machine or on the SEPM console?
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
any screenshot that can be posted for reference?
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Yes, a screenshot would be v helpful guys..
Make Girls Laugh
Would you like to reply?
Login or Register to post your comment.