SEP is installed in 2 parts, if you are installing Managed. First SEPM Console is installed on the Server and then package is created for SEP Client and this package is pushed to the workstations.
SEPM is just a Console that will be used to Manage Client activity and settings. So we need to install a SEP Client on the SEPM COnsole Server as well.
Here is an article for First time SEP installation
Title :'Installing Symantec Endpoint Protection 11.0.6 (RU6) for the first time'
Web URL :http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010041310191048