Endpoint Protection

Hello all,

i´ve a problem after the installation of a new primary-server. The hardware changes, so the name and the IP-adress would be taken.
After the customization of the group structure and copying the certificates between the Primary and the new parent server only the old-version-clients (7.x & 9.x) were shown in the system center console. All the 10.x-clients aren´t visible.
Also a manually copy of the new grc.dat to a workstation (following restarting the service) takes no success.
Due the installation i created a new sav-group (the old one called "nav_..." instead of "sav...". Can this be a problem for the clients ? (in the grc.dat there´s no entry of the SSC-group)
Is there a chance to make all the cients visible again ? 

Thank you for your support.

Hurra7

hi,
check running the network audit, to see the clients and their status.

on single agent you dropped the grc.dat from the server, it did not show uo in console, hope you have dropped in proper location.

Pete!

Before installing new primary server promote the other server to primary, then install new server to the same server group. Then you can promotr thr new server as primary if you want

There is a good interactive doc out there

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005040513373748

Though the concept is that you will also have to change the GUID in the registry to that of the old PKI

Sandeep is on the right track

v10 introduced SSL and pki folder.  v10 clients use this to encrypt traffic and verify they are talking to a valid server.  If you didn't migrate the cert over properly the v7,8+9 clients wont care, but v10 will.

Hi all,

thanks for your help and the tips about the topic.
The problem was the missing pki-folder from the "old" server. After restoring and modifying the registry entries ("DomainGuid" it works and all clients are visible again. (see link from sandeep).

Kind regards - Hurra7

Hi all,

thanks for your help and the tips about the topic.
The problem was the missing pki-folder from the "old" server. After restoring and modifying the registry entries ("DomainGuid" it works and all clients are visible again. (see link from sandeep).

Kind regards - Hurra7