How to move SEPM server to another different server
Hello,
We need to move the our SEPM server 11MR4 MP1 (11.0.4014.26) to another server, different IP and hostname. The actual server will be then disconnected because is an old hardware. Actual server is Windows 2003 and the new one is Windows 2008.(32bits)
I have found a simple procedure the document titled:
"How do I move Symantec Endpoint Protection Manager from one server to another with a different IP address and host name?" Document ID: 2008031204405448
by using replication, but this document has an issue not acceptable for our needs:
WARNING: If Replication is used to "move" the SEPM server to another machine and the original SEPM is uninstalled, you will never be able to configure replication with the new SEPM ever again. The original SEPM is like the "Master" server in the replication setup, and if it is uninstalled, the second SEPM has no ability to configure another replication partner.
I found that a disaster recovery procedure (backup-restore) is possible, but found to issues with it:
- then one has to reconnect each client communication (seems that requires extra work)
- our case is not to recovering the server with same hostname neither IP address.
What we need is to move or have another server and, if possible, no distribute and run symlink file on each of our 200 managed workstations.
In our remaining SAV 10 installation we are able to have one "primary" server and many "secondaries" ones, and promoting a "secondary" server to "primary" is just one clic away.
How can we do that now with SEPM 11? Are there a documented procedure?
Best regards
Raul
Comments
Raul, I am not sure if this
Raul,
I am not sure if this will work for your situation, but I just went through something similar. I went from a development VM to a production physical box and had to move over 3500 clients. First, I worked with Symantec very closely. I reviewed my environment with them and clearly discussed my needs. What they did in my case was to add second management server, increase the priority for that server so that all of my clients would use the new server. I just had to make sure that all of my groups were assigned that new server. I would be happy to review more details with you if you would like.
Hi unmass_med, What you tell
Hi unmass_med,
What you tell looks like the procedure described in the Doc ID which I mention. My concernings are about loosing the "master" role of my actual SEPM server.
Have you uninstalled or disconnected your first SEPM (in VM)? and after that, have you configured another server to replicate succesfully with your second server?
Thanks,
Raul
We did not setup replication
We did not setup replication at all. I built out the new console, including sql, and then added the new console the existing site. The "old" console is still up and running but it does not have any clients reporting into it. Feel free to PM me for more info.
thanks you for your answer.
thanks you for your answer. Seems that in your case have no tested the issue of my concerning. Thanks again.
Hope someone else can bring something more on this.
Raul
This KB will help you. I
This KB will help you. I think this is exactly what you are looking for!
How do I move Symantec Endpoint Protection Manager from one server to another with a different IP address and host name?
service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/9bb60351f8fa6d3f65257409007f5774
Let me know if this helps.
Abhishek Pradhan, PMP, MCT
Consultant | Microsoft Corp.
Blog: http://blog.abhishekpradhan.net | SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.puneusergroup.org
Hi Abhishek, you are
Hi Abhishek, you are suggesting the same article with I started this very conversation. The problem I found in that article is the warning it has.
If you have further clarification on my question or a way to made "Master" a replicated server, that will be the solution I am looking for.
Thanks. Raul
You are right
The above mentioned article was created by one of my colleagues back there in SEP support.It was a very hit article.
Then suddenly we got a complain from backline that this after following this article you cannot do replication any more.So a warning was added to the document.
Yes it is true after following these steps if you remove the 1st Master SEPM.You can no longer user replication as the Second will not act as primary SEPM or other replication partners theat you want to configure.
So what I suggest is to use Sylink Replacer instead of this method.Export you policies and import it back in new SEPM.
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Would you like to reply?
Login or Register to post your comment.