Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Symantec Endpoint Protection Manager database backup and restore explained

Created: 09 Dec 2010 • Updated: 29 Dec 2010 | 7 comments
Language Translations
Pawel Lakomski's picture
+2 2 Votes
Login to vote

1. Introduction

Symantec Endpoint Protection Manager database contains all important data like policies, information on your clients, settings, logs, etc. One of the elements of successful preparation for Disaster Recovery procedure is back up of the database. This article explains how to backup the database, how to set automatic backup and how to change the place backups will go to. Note: if you use MS SQL database for your Symantec Endpoint Protection Manager, you will be able to apply this procedure but you can also take different backup strategies. Please refer to MS SQL documentation for details.

2. Configuration

2.1 SEPM installation folder

You can choose where you want to install your Symantec Endpoint Protection Manager during the first installation stage:

  

2.2 Setting the target path for backup files.

Backup files will be located in a folder \data\backup. Where exactly \data folder will be installed is set during the second stage of installation of Symantec Endpoint Protection Manager – when Management Server Configuration Wizard starts.

If you choose Simple installation the only choice possible will be the default location suggested by Wizard:
\Symantec Endpoint Protection Manager\data
where \Symantec Endpoint Protection Manager is your SEPM installation folder chose during the first stage of installation.

However, if you choose Advanced installation, after you choose the number of clients in your environment and wherever you choose to install the first or additional site or install another manager for an existing one – you will be presented with a screen where you will be asked for server name, port, web console port and server data folder.

  

2.2 Changing the target path for backup files.

You may want to change the location of the folder where database backups are put after having your SEPM installed. This might be due to the fact that you want to keep an extensive number of database backups and you need to put them on a larger drive while you do not want to have to copy them manually there. You can change this location easily by launching Management Server Configuration Wizard from Start – All Programs – Symantec Endpoint Protection Manager. If you choose to reconfigure the existing server:

  

You will be presented with the same settings: server name, port, web console port and server data folder. From here you can change the location for data folder and it will be moved automatically.

Please note: it is not possible to move only \data\backup folder to another location. The whole folder \data must be moved with all its subfolders.

More information on this topic may be found in the technical article:
How to modify the Symantec Endpoint Protection Manager (SEPM) Database Backup and Restore Wizard backup location
http://www.symantec.com/docs/TECH103675

3. Backup

Manual backup can be performed at any moment by stopping Symantec Endpoint Protection Manager service:

  

and launching Backup and Restore from Start – All Programs – Symantec Endpoint Protection Manager. Please mind that backup may take some time so be patient – it depends on your database’s size and your computer’s speed.

  

Another way to start backup is to open the console, go to Admin panel and click on servers. Then choose your database and under tasks click on Back Up Site Now.

  

After the backup is finished, in the backup folder you will find .zip file containing the backup with date and time of backup in a file’s name.

  

Automatic backup is set through Symantec Endpoint Protection Manager console. Go to Admin panel and click on Servers. Select your database and under Tasks choose Edit Backup Settings. Set the schedule for backups and number of copies to keep (if this number is exceeded, the oldest copy is removed).

  

4. Restore

To restore the database from the backup you should first stop Symantec Endpoint Protection Manager service. Then go to Start – All Programs – Symantec Endpoint Protection Manager – Backup and Restore and choose Restore.

  

If in your \data\backup folder SEPM cannot find any backup file you will be presented with a prompt to browse to a .zip file containing backup:

  

Otherwise a drop-down menu with available backups with their dates will be shown.

    

The restoration can take same time. After it finishes you need to run Start – All Programs – Symantec Endpoint Protection Manager – Management Server Configuration Wizard to synchronize the console with the new database.

Comments 7 CommentsJump to latest comment

tryme's picture

can any one help me the SEPM db restoration process stop and say restor faild : zip too large

0
Login to vote
pete_4u2002's picture

what;s the DB used? Is it SQl or embedded?

0
Login to vote
phamduyus's picture

Hi everybody

My SEP server is down ( maybe mainboard broken). I isntalled SEP on other PC and restore old databese. After restore :

  • Some SEP client established with SEP manager but some SEP Client is not established
  • I can not control Application and device control policy..! when I changed policy on SEP Manager the not effective SEP client

Please help me

Thanks/Duy

0
Login to vote
pete_4u2002's picture

the clients that are not communicating , are they up and running?

check the sylink file and compare with good one. Also run dbvalidator tool

0
Login to vote
phamduyus's picture

Thanks pete_4u2002

yes, all SEP Client running now

"check the sylink file and compare with good one. Also run dbvalidator tool" ==> can you guide more detail ?

Thanks/Duy

0
Login to vote
phamduyus's picture

I run dbvalidator command then return result : "database validation passed"

Thanks/Duy

0
Login to vote
pete_4u2002's picture

enable sylink log and review for any error for communication.

0
Login to vote