Endpoint Encryption

Symantec Endpoint Encryption server: 3.3.0 (Build 8471)

Current client on our server: 10.3.0.8471

I spoke with support and downloaded the 3.3.2mp7 server PUP file and will upgrade to that next week. My understanding is that this will include the current clients as well. Once I upgrade the server, I can download the clients from our own server and have 11.x clients. That's how it worked in the past. It's been over a year since I've run these updates on this server. This server upgrade is not what I'm posting about. Just setting the scene in case it has bearing on my question below.

I also downloaded a client update from support: SymantecEncryption10.3.2MP6Windows.zip

My question is, if I leave my server at 3.3.0 for now, but want to update only one client at the moment, how do I it... 

Can I install the SymantecEncryptionDesktopWin64-10.3.2MP6.exe (or the extracted PGPDesktop.msi) on a client that has 10.3.0 installed? I mean will this update pick up the configuration of the previous 10.3.0 install on that machine? Am I supposed to upload the EXE or the MSI to my server somehow? It doesn't seem to be a normal update option.

If I do need to upload the client to my server, how do I do that?

I've read through the docs and found nothing on this point. I'd be happy to be proven wrong if it does exist.  :-)

Thanks for any help or suggestions!

As long as the PGPSTAMP reg on the client remains pointing at the SEMS, then it should at least attempt to communicate with it.  This reg key may change with the local upgrade using a standalone client.

If it does, then you can change it back.  Just take a note of it before the upgrade, and read through this article:

http://www.symantec.com/docs/TECH149792

Just be aware that while this may work fine, it will likely be unsupported (where the client is on a newer version than the server).

By the by, upgrading your SEMS will not provide you the v11 client.  Only installing Symantec Endpoint Encryption v11 (which is a separate product altogether but potentially covered under your current license) will provide the newer client.

Thank you for the replies and information. Much appreciated.

How can I upload the MSI files? Do they go through the same System > Updates > Upload update Package function as the PUP files?

Please excuse my ignorance, but the support at Symantec had trouble understanding which product was which and I'm not sure they gave me access to the right stuff. They gave me 3 serial numbers which all had the same 18 files to download 2 days ago. Today, they have different items. I took screenshots the other day to prove it in case it was a problem.

TODAY:

I just downloaded "Symantec_Endpoint_Encryption_11.0.0MP2_EN.zip and extracted 11 MSI's and 1 PDF that is only one page with no instructions.

It's been over a year since I've uploaded anything to this server, but PGP originally told me only to upload PUP files. I don't want to break our server by attempting to upload MSI files. Should I upload the entire zip file?

Thanks again for any help or suggestions.

As stated, "Symantec Endpoint Encryption" (the one you've downloaded) is a separate bit of software entirely and cannot be uploaded to the "Symantec Encryption Management Server" (SEMS, formerly PGP Universal Server).

You cannot manage the SEE11 client from the SEMS.

If your aim is to maintain/update your current encryption environment, then use the PUP file you downloaded previously.  You'll have to unzip it to get the .pup file, then upload that.

If the aim is to move to an entirely new/different platform and go about decrypting and reencrypting machines, then go with SEE11.

Hi stev379,

Let me answer this step by step.

You are currently using Symantec Endpoint Encryption server: 3.3.0 (Build 8471) and clients are on 10.3.0.8471, looking to upgrade just one client to the latest version i.e 10.3.2 MP7.

PGP Client only upgrade:

This is a local client upgrade and can be done using the SymantecEncryptionDesktopWin64-10.3.2MP6.exe that you have downloaded on the client machine. Also this should not impact the client and server communication, even If it does, then you can change it back. Just take a note of it before the upgrade, and read through this article:

http://www.symantec.com/docs/TECH149792

PGP Server Upgrade:

The upgrade for PGP server is always a PUP upgrade. Once the server is updated to the latest version, the package created will be the updated package.

EXE/MSI are for client updates packages, not to be uploaded on the Server.

Different Products under the same serial number:

From Encryption, Symantec has 2 differnt product offerings under the same license agreement. 

Symantec Encryption Management Server (Previously known as PGP server) and the latest version is 3.3.2 MP7/10.3.2 MP7. This is one that you are using.

Symantec Endpoint Encryption 11.0 is the other product that is available under the same license and serial number,

Symantec_Endpoint_Encryption_11.0.0MP2_EN.zip that you have downloaded has the instalation files for it and has nothing to do with your current setup.