Endpoint Protection

I have a SEP 12.1.5 Manager with the embedded database on a Microsoft 2008 server that's hosed. I have tried a repair of the SEPM installation (under add/remove programs) - that didn't help. At this point, the Symantec Embedded Database service is not even in the list of Microsoft services. Any suggestions for toubleshoting/resolving, without starting over from scratch with the SEPM. Thanks.

John

Do you have the recovery file?

By default, the recovery file is located in the following directory:

Drive:\\Program Files\Symantec\Symantec Endpoint Protection Manager\Server Private Key Backup\recovery_timestamp.zip 

If you do NOT have a database backup to restore:

You can still perform disaster recovery without a database backup, but the following points apply in this case:

• All policies must be re-created or imported from other backups (e.g. exported policy files).
• Clients will be able to communicate with SEPM, but will re-appear in the console only after their next check-in.
• Clients will reappear in the default group as they check in, unless you enable automatic creation of client groups on the re-installed SEPM by editing "scm.agent.groupcreation=true" to the conf.properties file. This file is located <drive>Program files or(x86)/Symantec/Symantec Endpoint Protection Manager/tomcat/etc.
• If you originally had multiple SEPM domains beyond the default domain, you must re-create them using the domain IDs from SEPBackup.txt.

http://www.symantec.com/docs/TECH160736

Thanks for the feeback Brian. We do not have a database backup on this server. We don't have many policies, so I am mainly concerned with not wanting to lose contact with the clients. Shoud I uninstall and reinstall the SEPM to get this SEPM running again, or is there a better way? Will the clients repopulate in the default group? This would be a decent way out - I really want to avoid losing contact with the clients, because we don't have a good inventory of them. Thanks again for the help!

Is it a small number of clients? If so, you can simply replace the sylink on them from the SEPM.

Yes, it's small - only like 50 clients. The problem is that we don't have an inventory of the clients, and we would like to avoid having to rediscover or track down all the clients. Maybe unavoidable?

I found the recovery backup keys, and recovered all the old clients. Thanks for the help Brain!

if you have the server private key backup all you need to do is to uninstall and re-install SEPM on the same server with the same host name and same IP address. once installed restore the server private key backup the clients would automatically discover the new SEPM and will reconnect at the next heart beat interval

you're welcome sir :)