Video Screencast Help

Upgrade SEP 11 to SEP 12.1 Client on Servers - Is a Reboot Necessary

Created: 12 Jun 2012 • Updated: 13 Jun 2012 | 5 comments
InsentraCameronM's picture
This issue has been solved. See solution.


I am intersted in upgrading a SEP 11 client to a SEP 12.1 client on a server.

Endpoint Configuraiton:

Server 2008 R2

Basic Protection for Servers (AV only)

SEP 11 client -> SEP 12.1 client

I was under the impression that you could push install the SEP 12.1 client and directly upgrade the SEP 11 client and that you would not need to do a reboot. However, I have found that when you push install the SEP 12.1 client, it partially uninstalls the SEP 11 client and waits for a reboot. On reboot it finishes the installation of the SEP 12.1 client and configures the communication settings.

Do you always have to reboot an endpoint after an upgrade?

If so, is there an easier way to upgrade to the SEP 12.1 client without having to reboot 500 servers(and the associate change control process)?

Comments 5 CommentsJump to latest comment

Ashish-Sharma's picture

For SEPM reboot is not mandatory. But for clients it is better to restart if your clients have NTP installed.(But this can be scheduled).

hi Check this forums.

Thanks In Advance

Ashish Sharma

Mithun Sanghavi's picture


What version of SEP 11.x are running?

I agree with Ashish.

Migrating the SEPM would not require any reboots. However, when Migrating the SEP clients you may require a reboot of the SEP client machines. Network Threat Protection (firewall) drivers would require a restart of the machines to get themselves activated. However, these could be taken care off by creating custom package and avoiding the restart of machines.

Creating custom client installation packages in the Symantec Endpoint Protection Manager console version 12.1

NOTE: You may have to restart the machine before the next migration or once the machine is ideal and out of production hours; whichever is earlier.

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Beppe's picture


yes, it is. SEP client main components are drivers and services that, as per Windows architecture, require reboot to load properly.



sandra.g's picture

11 > 12.1 is a different kind of installation than 11.x > 11.x+1 was. It's a side-by-side, replace on reboot model, instead. You will not get the 12.1 client protection until the reboot is completed, even if it is just only antivirus protection.

This document has a little more information about the process:


Symantec, Senior Information Developer
Enterprise Security, Mobility, and Management - Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best helps you!

InsentraCameronM's picture

Thank you all for your help.

Cameron Mottus