Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Creating New SEP12 Server

Created: 25 Feb 2013 • Updated: 05 Mar 2013 | 21 comments

Currently I do have SEP12 server with embedded database.

But I need to upgrade it to SEP12 RU2. So I'm taking this chance to install new SEP12 server with Microsoft SQL server.

My question is after I've set up the new server can all the current clients connect to my new server if I just swap the IP address and server name.

Which mean I'll assign IP address and server name of the current server to new server when everything is ready.

Will all the clients and servers inside the SEPM console will appear inside there?

Can all the GUPs can connect and communicate with new SEPM server?

Operating Systems:

Comments 21 CommentsJump to latest comment

Ashish-Sharma's picture

Hi,

Check this artical

https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

How to move SQL Server 2008 / 2008 R2 database used by SEPM to another SQL Server?

Article:TECH170819  |  Created: 2011-09-30  |  Updated: 2012-07-28  | 

Article URL http://www.symantec.com/docs/TECH170819

Overview of how to move the Symantec Endpoint Protection Manager from one machine to another

Article:TECH148555  |  Created: 2011-01-20  |  Updated: 2011-03-15  |  Article URL http://www.symantec.com/docs/TECH148555

Thanks In Advance

Ashish Sharma

SebastianZ's picture

My question is after I've set up the new server can all the current clients connect to my new server if I just swap the IP address and server name.

Which mean I'll assign IP address and server name of the current server to new server when everything is ready.

- This will be not enough, SEP clients are connecting to SEPM using specific communications settings. Just swapping IP addresses will not be sufficient. Follow the documentation on how to move SEPM from one machine to other: http://www.symantec.com/docs/TECH104389

Will all the clients and servers inside the SEPM console will appear inside there?

- After you follow the mentioned documenentation all of the SEP clients should reconnect to the new Server

Can all the GUPs can connect and communicate with new SEPM server?

- the same as for the clients.

For the migration to RU2:

http://www.symantec.com/business/support/index?pag...

ethan86's picture

Thank you for your answer. I'll try it out.

GeoGeo's picture

Easiest way is to do a sylink drop to all the machines. Export communication from group and use the slylink drop tool supplied with SEPM tools to distribute to all the clients.

This will point all the machines at your new SEPM. :)

Please review ideas and vote there could be something useful :)

https://www-secure.symantec.com/connect/security/ideas

SameerU's picture

Hi

The best possible method is of replication in which we can configure second new Server as replication method.

The following method needs the IP address and hostname also different.

Regards

kaman's picture

Hi

There are different ways to do this but the easiest and less risky one is to install one more SEPM server in replication mode with SQL data base. Once the server is ready and installed, create a replication schedule. After one cycle of replication turn down old server and disable replication between servers. Now you can decommision the first server. I hope this would help you.

Regards,

Kamran

ethan86's picture

For Replication mode is it possible for me install SEP12 RU2 in new server while my old server is running SEP12 RU1?

.Brian's picture

They should be on the same version.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

ethan86's picture

Which mean i'll have to install SEP12 RU1 first then do the replication.

After that then upgrade the version to RU2?

.Brian's picture

You can upgrade both to latest version than setup replication

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

ethan86's picture
  1. Click Policies > Policy Components > Management Server Lists > Add Management Server List
  2. Click Add> Priority and a new Priority would get added named as "Priority2"
  3. Add MACHINE_1 under Priority 2 and add MACHINE_2 under Priority 1, and assign this New Management Server List to all the groups.
  4. Wait at least one replication cycle.

I've successfully do the replication.

Should i do above steps first before upgrading my server or I've finished those steps first then can upgrade my SEPM?

Rafeeq's picture

You have completed the replication. You will see the same data on both the SEPMs, now you need to upgrade the SEPM to latest version.

Before upgrade you need to disable replication and start.

http://www.symantec.com/business/support/index?pag...

ethan86's picture

Hi i've completed the replication.

Now i'm at the step to create priority and i can see 2 list under management server list.

One is created for old server and 1st priority is old server and priority is new server.

2nd one is created for new server and 1st priority is new server and 2nd priority is old server.

Under the client list i can see only a few PCs are online and the rest are either offline or online on remote site.

I'm not able to edit or delete the first one under management server list.

I've already assigned 2nd to all the groups but the number only shows 28 and number for old server is showing 58.

Please can someone help me what's happening?

Rafeeq's picture

For the rest you the sylink replacment tool available in SEP 12.1. Create  new group in the new sepm. export the sylink.xml and push it

How to deploy/update communication settings from your SEPM to your SEP clients machines with SEP 12.1 RU2

 

http://www.symantec.com/business/support/index?pag...

ethan86's picture

Hi Rafeeq,

Currently my new server is still in SEP12.1 RU1 since replication is not finished yet.

I thought in order to do the upgrading to RU2 the servers cannot be in replication mode?

That's why i tried to assign management server list with priority to new server.

But i can see many clients are offline and a lot of clients online are also show the status of online on remote site.

Only very few clients shown online only status.

I just want to know whether this process is normal or is there something wrong?

I just checked SEP of my pc and found out that it's still pointing to old server and not the new server.

Rafeeq's picture

sice you have assigned two MSL, the clients may try to connect to any one, which ever is available.

Once we have all the clients in online mode. we can then disable the First SEPM service so that all clients talk to the SEcond SEPM(new)

For the clients which are offline. Check the sylink.xml file , check if you see only single server name and IP or 2 Ips as defined in List.

Our first objective would be to get all the clients reporting to any sepm so that they take the MSLs so that we can disable the first one.

on any one client which is offline. Try this

start - run - smc -stop

start - run - smc -start

ethan86's picture

Hi Rafeeq

Thank you for your fast reply.

I just assigned my new MSL in old SEPM console and i can see the number of online PCs are keep increasing in the new SEPM console.

I think the problem previously i only assigned the new MSL into new console.

Rafeeq's picture

its needs to be configured on new server....

similar to step 2 in this document

http://www.symantec.com/business/support/index?pag...

ethan86's picture

Hi Rafeeq,

I can see all the clients online at new server console.

After that i stopped the replication and upgraded to new version.

But now at the SEPM home page the numbr PC up-to-date is very few hundred and many of them are offline.

I checked the total PC list one by one and found out that SEPM home page is displaying wrong information.

The up-to-date PCs should be over thousand and the offline should be abou 900.

Is it due to GUP since i haven't updated all the GUP yet

Is there anyway to solve it?

Rafeeq's picture

Just give it some time, once all the clients are updated it should show the right info.

The home page is a display on past 24 hours only. However double check your LU policy and make sure they are getting it from SEPM / GUP

Eddie T's picture

Hi there,  I'm new to my company and have been given the task of upgrading our current SEPM 11.0.6005.562 installation to SEPM 12.1.2.  Bear in mind I have zero experience with SEPM and am swimming in the deep end.

What I need to do is decomission our old SEPM "server", which is just a 32 bit Windows XP box with 1 gig of ram, and set up a new Windows 7 Pro 64 bit box as the replacement SEPM 12 "server".

I tried following the procedure here: 

http://www.symantec.com/business/support/index?pag...

However, I can't even get out of the gate because SEPM 11.x will not install on Windows 7.  I receive a message saying it's not compatible.

So, what I plan to do now is set up a fresh SEPM 12.1.2 on the Win 7 64 box, no migration, no replication.  What I'd like to know is whether it's simple to move the license over to the new computer, and also do I have to transfer the database from my old SEPM 11 box to the new one?  If I do, is there a straightforward way to perform this?

Can I export the SEPM 11 database and import it into SEPM 12?