Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Need to upgrade and move Manager console to new server

Created: 06 May 2013 • Updated: 16 Sep 2013 | 6 comments
This issue has been solved. See solution.

We have one primary and 3 replication partner.  It is running SEP 11.0.6MP1 with embedded database in Windows 2003 server

Want to upgrade to SEP 12.1.RU2, also want to move to new server which is running in Windows 2008 R2 and also want to upgrade the database from embedded SQL 2008

Like to know the detail steps to proceed further to complete all 3 activity

Operating Systems:

Comments 6 CommentsJump to latest comment

.Brian's picture

If you're going to replicate than they all need to be at the same version before you can move

How to move Symantec Endpoint Protection Manager from one server to another server

Article:TECH199292  |  Created: 2012-11-02  |  Updated: 2013-03-19  |  Article URL http://www.symantec.com/docs/TECH199292

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

remo1974's picture

What we   thought  is

First we install the same setup in the new environment in SQL

with one primary and 3 replication partner of the same version as 11.0.6100

Then take a backup from each server and restore on a new setup

Then when all client started to communicate to new setup then we can go for  Migration to  SEP 12.1.RU2

Will it work or do you have any other suggestion

SOLUTION
.Brian's picture

Is the IP/hostname of the SEPMs staying the same?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SameerU's picture

Hi

Option -1

If you have the new IP address and Hostname than replication is the best method

Option -2 but this is not the method supported by symantec.

On Production SEPM Server:

1. Configure the Management Server List and add Priority 1 as - Assign IP address and Hostname of New Server and Priority - 2 - Assign the IP address and Hostname of Old SEPM Server.
2. Uncheck "Tamper Protection"
3. Uncheck "Password" policy for SEP clients.
4  Uncheck SSL.
5. Export Computer Status logs.
6. Export the policies according to Groups.
7. Export the Domain ID.

On New SEPM Server:

1. Install Symantec Endpoint Protection Manager with Embedded Database on new Server.
2. Configure the same encryption key as of Old SEPM DMZ Server.
3. Add the line "scm groupcreation=True" in conf.properties.
4. Add the new Domain and enter the Old Domain ID and make it as Administer Domain.
5. Rename the Old Domain to Default.
6. Clients would start communicating with New SEPM server according to Groups.
7. Configure the policies according to the Groups.

Please mark as a solution if it works for you

Regards

W007's picture

hello,

Check this artical

https://www-secure.symantec.com/connect/articles/h...

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

http://www.symantec.com/docs/TECH171767

Check this

https://www-secure.symantec.com/connect/forums/how...

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.