Endpoint Protection

 View Only
  • 1.  Need to upgrade and move Manager console to new server

    Posted May 06, 2013 03:22 PM

    We have one primary and 3 replication partner.  It is running SEP 11.0.6MP1 with embedded database in Windows 2003 server

    Want to upgrade to SEP 12.1.RU2, also want to move to new server which is running in Windows 2008 R2 and also want to upgrade the database from embedded SQL 2008

    Like to know the detail steps to proceed further to complete all 3 activity

     



  • 2.  RE: Need to upgrade and move Manager console to new server

    Posted May 06, 2013 03:28 PM

    If you're going to replicate than they all need to be at the same version before you can move

    How to move Symantec Endpoint Protection Manager from one server to another server

    Article:TECH199292  |  Created: 2012-11-02  |  Updated: 2013-03-19  |  Article URL http://www.symantec.com/docs/TECH199292

     



  • 3.  RE: Need to upgrade and move Manager console to new server
    Best Answer

    Posted May 06, 2013 03:41 PM

    What we   thought  is

    First we install the same setup in the new environment in SQL

    with one primary and 3 replication partner of the same version as 11.0.6100

    Then take a backup from each server and restore on a new setup

    Then when all client started to communicate to new setup then we can go for  Migration to  SEP 12.1.RU2

    Will it work or do you have any other suggestion



  • 4.  RE: Need to upgrade and move Manager console to new server

    Posted May 06, 2013 03:59 PM

    Is the IP/hostname of the SEPMs staying the same?



  • 5.  RE: Need to upgrade and move Manager console to new server

    Posted May 06, 2013 10:53 PM

    It would be a New IP and New HOst name



  • 6.  RE: Need to upgrade and move Manager console to new server

    Posted May 06, 2013 11:29 PM

    Hi

    Option -1

    If you have the new IP address and Hostname than replication is the best method

    Option -2 but this is not the method supported by symantec.

    On Production SEPM Server:

    1. Configure the Management Server List and add Priority 1 as - Assign IP address and Hostname of New Server and Priority - 2 - Assign the IP address and Hostname of Old SEPM Server.
    2. Uncheck "Tamper Protection"
    3. Uncheck "Password" policy for SEP clients.
    4  Uncheck SSL.
    5. Export Computer Status logs.
    6. Export the policies according to Groups.
    7. Export the Domain ID.

    On New SEPM Server:

    1. Install Symantec Endpoint Protection Manager with Embedded Database on new Server.
    2. Configure the same encryption key as of Old SEPM DMZ Server.
    3. Add the line "scm groupcreation=True" in conf.properties.
    4. Add the new Domain and enter the Old Domain ID and make it as Administer Domain.
    5. Rename the Old Domain to Default.
    6. Clients would start communicating with New SEPM server according to Groups.
    7. Configure the policies according to the Groups.

     

    Please mark as a solution if it works for you

    Regards


     



  • 7.  RE: Need to upgrade and move Manager console to new server

    Posted May 06, 2013 11:33 PM

    hello,

    Check this artical

    https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

     

    How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

    http://www.symantec.com/docs/TECH171767

     

    Check this

    https://www-secure.symantec.com/connect/forums/how-move-sepm-one-server-another-different-ip-address-and-host-name